$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa File: 4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa (raw, json) Hash identifier: ae/Xlec/fDNYNWWZx5LPZkpjmUDGfK7LzbAr62M47gA= Subject key identifier: 74:F6:BA:A1:F5:66:88:8D:75:E6:6D:48:D9:10:83:DB:5E:88:66:D8 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AD71A73718F6C555EA24EFD00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa Signing time: Wed 13 Aug 2025 06:52:51 +0000 ROA not before: Wed 13 Aug 2025 06:52:51 +0000 ROA not after: Tue 11 Nov 2025 07:52:51 +0000 asID: 3257 IP address blocks: 72.245.144.0/21 maxlen: 24 72.245.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:1a:73:71:8f:6c:55:5e:a2:4e:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 13 06:52:51 2025 GMT Not After : Nov 11 07:52:51 2025 GMT Subject: CN=57b58214-a57f-4f14-bf13-e57d74187ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6e:b5:3d:67:64:cd:1a:3b:59:fe:6d:d4:20: cf:a1:3c:db:71:55:57:17:0a:ad:5b:b2:85:cb:78: 1a:e2:9b:c8:ac:f2:d3:30:c1:b0:bb:f1:42:44:06: a3:e6:77:f2:b9:ae:3e:66:e9:3a:6e:28:d2:14:39: c3:9f:34:a4:96:0a:db:87:97:3a:03:44:c6:68:25: 15:8d:31:28:7b:06:5c:e9:59:8b:51:01:5a:d8:c5: 31:36:83:06:54:7b:7c:97:22:a6:a0:b0:4c:c9:a9: 63:e7:86:ab:47:44:3e:53:22:fa:47:66:83:39:c3: f0:76:3e:8d:e0:e3:8c:da:e4:fb:ab:31:8e:55:c4: c8:15:98:4c:54:08:3a:1f:ab:c6:fb:cb:bc:f1:b8: 9e:52:ad:c1:bd:d9:21:5a:83:6c:2c:e2:ae:3d:5f: 29:95:1d:96:07:d0:4e:ee:d3:64:ca:26:fa:36:a3: e6:c5:08:5f:a2:80:c8:3e:fc:c8:cd:60:87:6e:db: 06:53:cc:4b:60:a8:95:87:54:70:72:d0:73:e0:02: d0:0d:9b:d7:2b:c9:c0:73:51:64:0b:72:a0:27:d9: fe:f3:a5:35:a5:73:a3:8f:70:7c:2c:2b:f7:4b:e3: 21:87:d5:0f:2e:95:ff:53:ca:e2:eb:b0:e0:c1:d9: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F6:BA:A1:F5:66:88:8D:75:E6:6D:48:D9:10:83:DB:5E:88:66:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c5eef93-7a6c-3a2c-99cf-6fb386599309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.245.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:61:5c:ba:8e:85:e6:43:03:37:d4:73:b4:6a:33:31:ad:4a: 9c:aa:91:81:ad:ef:21:28:a7:7c:71:32:ac:c7:2f:15:ea:9e: b7:f2:2f:79:30:ec:aa:49:ec:d5:5d:17:3b:a3:2d:6c:76:16: 90:1e:8a:c5:be:76:b8:5a:fe:63:cd:97:42:97:5b:7c:02:21: aa:2c:3a:3b:24:9f:46:88:e9:0f:6d:d8:ba:b3:56:d7:9c:e7: ba:ac:21:50:aa:61:28:05:5d:16:e5:21:f9:37:c2:b7:5c:f6: 13:91:41:1c:ac:8e:76:a8:66:dd:fc:49:0b:17:76:a4:e3:40: 44:d8:4b:25:10:da:71:71:43:07:90:eb:71:26:f3:c9:a6:a3: 76:ec:bb:e1:11:80:08:a9:6a:08:3c:17:4b:2d:e9:5f:11:30: 2a:33:6e:c9:f0:e2:29:0e:88:06:97:62:ac:d2:c4:e2:f5:cd: 1b:d9:b8:24:48:00:92:f4:c4:b2:8b:59:9b:01:cc:a0:2e:16: 0e:fe:88:51:34:31:41:6b:48:21:96:fe:58:56:50:d0:14:1b: bc:31:56:16:88:14:ca:0c:c5:78:95:5b:79:96:73:5b:f1:83: 53:bb:a7:18:f8:60:35:93:be:3f:66:a5:fa:30:5c:75:f0:87: 96:6d:e9:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErXGnNxj2xVXqJO/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxMzA2NTI1MVoXDTI1MTExMTA3NTI1MVowLzEtMCsGA1UEAxMk NTdiNTgyMTQtYTU3Zi00ZjE0LWJmMTMtZTU3ZDc0MTg3ZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5G61PWdkzRo7Wf5t1CDPoTzbcVVXFwqtW7KF y3ga4pvIrPLTMMGwu/FCRAaj5nfyua4+Zuk6bijSFDnDnzSklgrbh5c6A0TGaCUV jTEoewZc6VmLUQFa2MUxNoMGVHt8lyKmoLBMyalj54arR0Q+UyL6R2aDOcPwdj6N 4OOM2uT7qzGOVcTIFZhMVAg6H6vG+8u88bieUq3BvdkhWoNsLOKuPV8plR2WB9BO 7tNkyib6NqPmxQhfooDIPvzIzWCHbtsGU8xLYKiVh1RwctBz4ALQDZvXK8nAc1Fk C3KgJ9n+86U1pXOjj3B8LCv3S+Mhh9UPLpX/U8ri67DgwdloiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHT2uqH1ZoiNdeZtSNkQg9teiGbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGM1ZWVmOTMtN2E2Yy0z YTJjLTk5Y2YtNmZiMzg2NTk5MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVhXLqOheZDAzfUc7RqMzGtSpyqkYGt7yEop3xxMqzHLxXqnrfyL3kw 7KpJ7NVdFzujLWx2FpAeisW+drha/mPNl0KXW3wCIaosOjskn0aI6Q9t2LqzVtec 57qsIVCqYSgFXRblIfk3wrdc9hORQRysjnaoZt38SQsXdqTjQETYSyUQ2nFxQweQ 63Em88mmo3bsu+ERgAipagg8F0st6V8RMCozbsnw4ikOiAaXYqzSxOL1zRvZuCRI AJL0xLKLWZsBzKAuFg7+iFE0MUFrSCGW/lhWUNAUG7wxVhaIFMoMxXiVW3mWc1vx g1O7pxj4YDWTvj9mpfowXHXwh5Zt6XE= -----END CERTIFICATE-----Generated at Wed Aug 20 13:20:17 2025 by rpki-client