$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa File: 7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa (raw, json) Hash identifier: 8R8SwYbrevjhW4Mxo7CwyJDL9+c5T+WmBRi8mRmyEaw= Subject key identifier: 5B:90:EC:6F:41:64:AA:5F:E7:27:D1:E7:AE:AC:B4:34:FA:EF:AB:67 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F4328584AC71122052A3F286C2C271AB0 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 22709 IP address blocks: 72.11.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:22:05:2a:3f:28:6c:2c:27:1a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=c3f6b317-19f9-484d-865c-22bb060ac667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:6e:91:cf:90:0e:f0:5c:ae:c2:0f:eb:79: 27:ac:70:0d:fe:d5:57:12:af:84:9d:22:f0:3e:c0: 7b:4b:0f:9d:6f:e6:47:af:89:50:88:6c:d3:aa:b4: 6f:a3:23:d5:ea:8e:37:a8:ae:43:53:a1:59:67:13: 40:f1:b6:56:b6:14:56:69:7d:36:d4:47:24:45:d4: 8b:88:d1:87:46:1d:1b:57:42:bf:cf:34:32:3c:8a: 44:ec:14:3c:dc:cd:25:8b:7d:da:ef:07:e3:e3:71: cc:96:1c:f6:e7:97:68:80:7a:d9:40:4a:e2:2a:5b: 3c:b5:15:2f:7d:f7:18:8d:f3:7a:6e:6d:e0:62:9d: 1c:ac:e3:d6:f0:6f:81:5a:a3:2b:ab:30:f8:26:97: 8c:e6:f8:a8:95:ab:6e:27:6c:17:e4:09:26:8f:d8: 45:65:27:db:16:4c:60:4a:1e:2b:17:6c:98:cc:7e: a6:47:f0:f3:bd:65:12:03:c9:5c:cf:4b:cb:eb:bd: ca:59:8a:51:ab:e1:96:d6:67:e6:62:52:73:8f:5c: 90:ce:40:59:5b:1b:94:c5:d9:c9:13:9a:c1:04:40: 3d:6d:3e:87:75:ec:5f:15:19:2b:16:02:e2:b7:9c: 17:a1:98:6e:aa:ac:df:62:33:ea:77:fd:7a:14:41: 77:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:90:EC:6F:41:64:AA:5F:E7:27:D1:E7:AE:AC:B4:34:FA:EF:AB:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 72.11.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:08:e1:d8:26:85:3e:ef:87:e1:84:54:9d:6a:c5:6c:83:df: 38:e1:e0:ef:8c:65:da:b3:8c:ab:77:d1:ef:2b:fa:a1:22:da: 80:6e:bf:bb:db:37:2a:4c:bf:5e:44:34:09:54:a1:e0:dc:33: ac:84:b9:99:28:f0:15:24:24:0f:8e:3c:5d:6e:4c:a8:58:12: 2e:bd:34:b9:57:7f:b3:b6:17:97:b4:f3:a1:4e:6b:e0:f3:77: 7a:e1:71:38:4b:89:a1:82:12:a5:56:44:99:a3:f7:49:e3:e6: 41:00:c9:8c:c2:c7:90:ca:e9:d6:f4:4d:d3:87:26:a0:bc:e1: c2:a1:73:74:27:6f:e3:6b:80:28:d3:a2:68:74:14:e8:f2:64: 02:04:ce:1e:c7:fe:25:c8:2e:11:86:98:36:3b:04:7b:fe:ab: 17:c5:f8:ed:fd:4c:16:87:cd:d1:c9:a9:b5:57:a4:39:80:29: 1e:1d:40:8d:cc:c7:18:01:9a:0d:1c:df:92:b0:a3:fb:5b:3b: 59:02:55:11:3f:f6:7c:32:c7:71:9c:2f:83:5f:7e:4a:0e:c0: 3d:ff:28:9e:08:4c:31:18:b0:a2:56:bb:0b:bc:ab:31:51:27: f4:b6:30:43:d1:f8:5d:48:c3:6f:b6:a5:37:09:56:f6:95:3e: 55:6b:cf:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHESIFKj8obCwnGrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YzNmNmIzMTctMTlmOS00ODRkLTg2NWMtMjJiYjA2MGFjNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f5ukc+QDvBcrsIP63knrHAN/tVXEq+EnSLw PsB7Sw+db+ZHr4lQiGzTqrRvoyPV6o43qK5DU6FZZxNA8bZWthRWaX021EckRdSL iNGHRh0bV0K/zzQyPIpE7BQ83M0li33a7wfj43HMlhz255dogHrZQEriKls8tRUv ffcYjfN6bm3gYp0crOPW8G+BWqMrqzD4JpeM5violatuJ2wX5Akmj9hFZSfbFkxg Sh4rF2yYzH6mR/DzvWUSA8lcz0vL673KWYpRq+GW1mfmYlJzj1yQzkBZWxuUxdnJ E5rBBEA9bT6HdexfFRkrFgLit5wXoZhuqqzfYjPqd/16FEF3CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuQ7G9BZKpf5yfR566stDT676tnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvN2ZhNmEwMDQtNGE1MS0z OWRjLTkyMTYtYzFjZjY1Zjg1NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0I4dgmhT7vh+GEVJ1qxWyD3zjh4O+MZdqzjKt30e8r+qEi2oBuv7vb NypMv15ENAlUoeDcM6yEuZko8BUkJA+OPF1uTKhYEi69NLlXf7O2F5e086FOa+Dz d3rhcThLiaGCEqVWRJmj90nj5kEAyYzCx5DK6db0TdOHJqC84cKhc3Qnb+NrgCjT omh0FOjyZAIEzh7H/iXILhGGmDY7BHv+qxfF+O39TBaHzdHJqbVXpDmAKR4dQI3M xxgBmg0c35Kwo/tbO1kCVRE/9nwyx3GcL4NffkoOwD3/KJ4ITDEYsKJWuwu8qzFR J/S2MEPR+F1Iw2+2pTcJVvaVPlVrz0Y= -----END CERTIFICATE-----Generated at Thu Aug 21 03:53:53 2025 by rpki-client