$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4d001ff-dd94-36da-88ac-0cc7fbe6590b.roa File: c4d001ff-dd94-36da-88ac-0cc7fbe6590b.roa (raw, json) Hash identifier: Abs7Lmr5RrJRGlbpQ1ROZT1YerCNeoeBEjxW1kvI6Ts= Subject key identifier: 0B:90:84:5F:16:FD:AF:A9:6B:4D:BC:D7:50:98:77:99:00:CC:FD:A2 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AE11086F2D6D9A6D5258DBD00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4d001ff-dd94-36da-88ac-0cc7fbe6590b.roa Signing time: Sat 16 Aug 2025 20:30:56 +0000 ROA not before: Sat 16 Aug 2025 20:30:56 +0000 ROA not after: Fri 14 Nov 2025 21:30:56 +0000 asID: 174 IP address blocks: 72.244.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:10:86:f2:d6:d9:a6:d5:25:8d:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 16 20:30:56 2025 GMT Not After : Nov 14 21:30:56 2025 GMT Subject: CN=1585c077-db69-4e72-a207-d5741aae64fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:f8:d6:fc:4c:13:6d:aa:76:d3:47:91:89: 51:72:92:8d:37:b0:a9:16:3d:c4:82:71:a7:0a:4d: d2:5c:6f:78:9f:81:78:47:71:34:45:6f:12:23:dc: 8d:8d:48:05:cd:f1:bc:67:9f:45:7e:d4:1f:03:00: 47:36:c2:a2:05:4d:ab:2d:e7:8b:9b:47:4b:ac:9d: c1:db:e3:e6:5a:23:2c:4f:9b:6a:88:6b:2e:f3:d4: 86:26:45:7d:a5:8f:9a:95:8a:e4:d5:e8:be:c7:a1: 10:17:2c:a1:25:79:26:03:84:19:af:f0:2a:d1:40: f5:be:d8:9e:6e:5b:5d:42:39:f8:20:26:fb:45:c3: 2c:f9:87:78:08:e5:96:5f:82:94:e7:d4:29:a5:6a: 00:ac:76:f1:fb:1f:64:d3:12:81:13:df:32:af:9a: 2d:3d:30:2e:e6:90:2e:f1:54:7a:62:ae:40:9b:da: c4:9b:1f:1b:6c:77:df:95:a6:cb:2b:cb:0f:26:2e: 67:bb:7b:6c:ac:0c:31:8f:44:d5:39:09:65:d4:de: 6b:38:0f:63:3e:e2:89:1c:58:24:12:ec:96:c7:6a: 90:12:d5:3f:9d:0b:18:61:72:50:15:3d:a4:46:aa: 7c:80:7b:13:7f:94:fb:08:30:d2:e8:f7:96:5c:b6: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:84:5F:16:FD:AF:A9:6B:4D:BC:D7:50:98:77:99:00:CC:FD:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c4d001ff-dd94-36da-88ac-0cc7fbe6590b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d0:33:08:46:a0:d9:ca:83:a8:35:41:d7:1d:14:96:ce:12: 8f:dc:ea:0c:7f:ed:aa:5f:9e:c1:1d:88:d0:aa:90:1a:78:81: 32:cd:42:ad:2c:76:79:57:c9:70:21:15:4b:0a:c0:9e:15:d4: 4f:6a:5f:d4:c2:d2:cf:28:7e:80:3e:2c:4f:41:6f:f0:66:34: ea:3b:80:c8:b0:73:b0:6b:91:e3:6a:d7:41:ba:48:57:e3:d7: 69:46:16:15:4c:71:ef:d4:68:23:14:2e:7d:7d:4e:7c:69:c1: 1d:3d:78:5b:f6:5b:5c:28:58:54:8d:62:0d:96:96:08:b4:47: e2:4a:98:1e:96:2b:7b:d6:17:51:53:5a:b9:7d:4d:45:b6:80: f7:bc:5e:d9:05:43:ed:74:56:4e:c8:da:5c:2c:be:e7:83:d9: b6:ca:37:56:3a:fa:5b:4f:98:29:a9:f9:9d:bd:27:21:12:14: 1e:68:b2:bf:5f:0c:71:fc:ce:87:cf:10:6e:8d:05:a3:4f:a6: 22:02:40:52:75:fc:72:ca:8e:b4:35:d1:e3:d9:9e:4d:bb:52: 98:fc:4b:15:58:e4:5e:46:54:22:53:bd:43:4d:af:da:28:52: 4d:31:04:1b:02:bf:01:c6:37:5c:7f:12:df:12:95:c6:88:46: 72:45:1a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhEIby1tmm1SWNvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxNjIwMzA1NloXDTI1MTExNDIxMzA1NlowLzEtMCsGA1UEAxMk MTU4NWMwNzctZGI2OS00ZTcyLWEyMDctZDU3NDFhYWU2NGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT/41vxME22qdtNHkYlRcpKNN7CpFj3EgnGn Ck3SXG94n4F4R3E0RW8SI9yNjUgFzfG8Z59FftQfAwBHNsKiBU2rLeeLm0dLrJ3B 2+PmWiMsT5tqiGsu89SGJkV9pY+alYrk1ei+x6EQFyyhJXkmA4QZr/Aq0UD1vtie bltdQjn4ICb7RcMs+Yd4COWWX4KU59QppWoArHbx+x9k0xKBE98yr5otPTAu5pAu 8VR6Yq5Am9rEmx8bbHfflabLK8sPJi5nu3tsrAwxj0TVOQll1N5rOA9jPuKJHFgk EuyWx2qQEtU/nQsYYXJQFT2kRqp8gHsTf5T7CDDS6PeWXLY2MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuQhF8W/a+pa02811CYd5kAzP2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzRkMDAxZmYtZGQ5NC0z NmRhLTg4YWMtMGNjN2ZiZTY1OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATQMwhGoNnKg6g1QdcdFJbOEo/c6gx/7apfnsEdiNCqkBp4gTLNQq0s dnlXyXAhFUsKwJ4V1E9qX9TC0s8ofoA+LE9Bb/BmNOo7gMiwc7BrkeNq10G6SFfj 12lGFhVMce/UaCMULn19TnxpwR09eFv2W1woWFSNYg2Wlgi0R+JKmB6WK3vWF1FT Wrl9TUW2gPe8XtkFQ+10Vk7I2lwsvueD2bbKN1Y6+ltPmCmp+Z29JyESFB5osr9f DHH8zofPEG6NBaNPpiICQFJ1/HLKjrQ10ePZnk27Upj8SxVY5F5GVCJTvUNNr9oo Uk0xBBsCvwHGN1x/Et8SlcaIRnJFGlY= -----END CERTIFICATE-----Generated at Wed Aug 20 08:47:08 2025 by rpki-client