$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa File: 10f9106f-38d7-334c-be0c-2e81c68cb772.roa (raw, json) Hash identifier: aoduc8+rPSX0y7p2jZQrTwRMQh2609eS+a6tWzEx1xM= Subject key identifier: 8F:4F:60:ED:91:41:90:EC:D9:BD:06:08:BF:84:0D:AD:93:A7:0C:24 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AD71F4E83DD4E9BB507CFCD4F Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa Signing time: Wed 13 Aug 2025 07:02:38 +0000 ROA not before: Wed 13 Aug 2025 07:02:38 +0000 ROA not after: Tue 11 Nov 2025 08:02:38 +0000 asID: 3257 IP address blocks: 72.245.192.0/21 maxlen: 24 72.245.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:1f:4e:83:dd:4e:9b:b5:07:cf:cd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 13 07:02:38 2025 GMT Not After : Nov 11 08:02:38 2025 GMT Subject: CN=3dc4fe3f-50e4-465b-8f86-5485291b711a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:71:87:ce:d5:57:b3:7a:e5:26:a0:d7:92:91: 0e:c5:e2:d2:6d:78:93:29:9b:45:7a:a7:11:d8:d5: 63:68:c9:a8:5e:58:16:31:d0:aa:31:c3:46:82:bc: de:b1:9b:ce:dd:97:d5:6c:ce:fd:eb:4a:2c:3e:d1: 09:b0:12:6b:c3:c4:d4:ca:b6:de:6f:3e:f0:c1:71: 44:37:2f:e8:26:d9:a4:18:1e:17:81:34:19:e1:b1: 96:5d:f4:d5:25:b1:90:04:24:9b:f2:a4:19:77:8c: 02:21:cb:02:41:11:35:b4:e6:82:98:7f:39:4e:0a: cf:07:86:1b:e9:ba:cb:91:33:53:d1:09:46:0f:99: 07:25:37:6f:b6:64:dd:ab:56:f4:f5:b3:13:44:c2: 84:50:c6:84:d6:da:07:3f:1b:57:57:20:a3:24:77: 47:18:2c:47:47:57:54:6c:5b:5a:04:07:94:d2:5f: 66:31:bb:45:65:6f:8e:4e:e9:71:83:50:1a:23:5d: c9:45:53:25:b8:cf:7a:04:e2:af:f6:bf:f2:a0:50: 75:33:5b:8d:03:d6:cc:ff:88:ce:8d:76:20:64:6c: 79:4d:6d:6f:77:9d:35:79:51:58:95:93:0a:ab:42: 50:5e:21:be:2b:b3:4a:ac:85:ee:af:d0:09:7b:1b: 85:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4F:60:ED:91:41:90:EC:D9:BD:06:08:BF:84:0D:AD:93:A7:0C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/10f9106f-38d7-334c-be0c-2e81c68cb772.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:71:1a:d0:78:f9:6b:d0:b0:b5:50:56:c1:60:25:87:7b:7c: a4:9b:3c:73:21:69:83:43:fe:88:33:da:a5:0f:41:b0:c8:4b: af:67:b4:56:47:91:1b:5e:8b:1c:4a:5f:94:9c:7d:97:b3:52: 8e:62:a1:0b:ea:5c:a1:09:9d:a5:c5:2e:d0:64:c9:cb:5a:53: 22:bd:13:b2:f9:b8:71:ba:ae:43:1c:60:f0:bb:99:69:e4:5d: 9f:bd:66:04:38:d4:f9:db:30:ab:47:70:d6:3b:70:f3:1f:d7: 93:36:ed:a5:11:66:dc:b1:98:af:92:27:a8:0d:3a:77:cb:23: 0d:05:79:64:48:20:f6:11:94:e4:b4:0f:4e:22:87:fb:12:e1: 29:94:d9:7c:20:2c:90:1e:0a:5c:d8:64:02:67:01:5b:f7:9f: 4a:d8:14:30:e6:cf:65:72:41:f6:c7:9d:db:81:54:00:ce:d3: 51:1c:28:f3:f4:64:d8:87:89:09:21:3d:f1:53:e7:7d:98:93: dc:22:5f:71:12:21:29:64:c6:9c:de:4d:42:dc:24:8f:6e:6e: 9a:25:26:b0:89:08:6b:bb:b9:6c:8b:cd:3a:44:b8:6c:4a:f1: a3:02:8a:ac:5d:93:6a:6c:6c:09:02:ac:ef:5c:ea:41:59:3e: 9d:35:4a:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErXH06D3U6btQfPzU8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxMzA3MDIzOFoXDTI1MTExMTA4MDIzOFowLzEtMCsGA1UEAxMk M2RjNGZlM2YtNTBlNC00NjViLThmODYtNTQ4NTI5MWI3MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXGHztVXs3rlJqDXkpEOxeLSbXiTKZtFeqcR 2NVjaMmoXlgWMdCqMcNGgrzesZvO3ZfVbM7960osPtEJsBJrw8TUyrbebz7wwXFE Ny/oJtmkGB4XgTQZ4bGWXfTVJbGQBCSb8qQZd4wCIcsCQRE1tOaCmH85TgrPB4Yb 6brLkTNT0QlGD5kHJTdvtmTdq1b09bMTRMKEUMaE1toHPxtXVyCjJHdHGCxHR1dU bFtaBAeU0l9mMbtFZW+OTulxg1AaI13JRVMluM96BOKv9r/yoFB1M1uNA9bM/4jO jXYgZGx5TW1vd501eVFYlZMKq0JQXiG+K7NKrIXur9AJexuF/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9PYO2RQZDs2b0GCL+EDa2TpwwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMTBmOTEwNmYtMzhkNy0z MzRjLWJlMGMtMmU4MWM2OGNiNzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpxGtB4+WvQsLVQVsFgJYd7fKSbPHMhaYND/ogz2qUPQbDIS69ntFZH kRteixxKX5ScfZezUo5ioQvqXKEJnaXFLtBkyctaUyK9E7L5uHG6rkMcYPC7mWnk XZ+9ZgQ41PnbMKtHcNY7cPMf15M27aURZtyxmK+SJ6gNOnfLIw0FeWRIIPYRlOS0 D04ih/sS4SmU2XwgLJAeClzYZAJnAVv3n0rYFDDmz2VyQfbHnduBVADO01EcKPP0 ZNiHiQkhPfFT532Yk9wiX3ESISlkxpzeTULcJI9ubpolJrCJCGu7uWyLzTpEuGxK 8aMCiqxdk2psbAkCrO9c6kFZPp01Sk0= -----END CERTIFICATE-----Generated at Wed Aug 20 10:45:04 2025 by rpki-client