$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa File: 079c6c1e-7cea-39de-b468-9dc26c56722f.roa (raw, json) Hash identifier: xN9CJIGfyvNHfBG4Ibg9GtRL7oISJEwk+d0IK+KnWKk= Subject key identifier: 32:06:56:6B:F0:ED:F7:7E:A6:CA:8D:27:BB:4D:0B:78:F6:E2:10:0D Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584ACAE5FE54A7E92A8BE23421A0 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa Signing time: Fri 08 Aug 2025 21:57:27 +0000 ROA not before: Fri 08 Aug 2025 21:57:27 +0000 ROA not after: Thu 06 Nov 2025 22:57:27 +0000 asID: 16557 IP address blocks: 72.21.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:e5:fe:54:a7:e9:2a:8b:e2:34:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Aug 8 21:57:27 2025 GMT Not After : Nov 6 22:57:27 2025 GMT Subject: CN=a118b31b-2482-4b2f-b4a4-03a4d0a3a9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:2d:fa:c9:52:ae:02:70:34:b7:cc:6e:32: c9:c8:94:69:3c:8f:a7:61:7c:73:ae:15:87:a3:5f: 27:4d:74:11:db:44:cb:2d:b6:e6:f4:fe:c9:71:46: 71:d7:5b:93:25:dd:71:c1:8b:69:1e:a6:54:b5:8d: 23:5b:60:aa:9c:61:b6:10:f0:6d:78:6b:37:2f:5e: 81:17:b6:8b:6e:9b:c0:b7:2c:82:69:cf:aa:6f:99: 07:da:fc:3f:e4:77:3e:c9:e0:ec:74:1a:c9:b4:a2: 52:a4:68:ff:a4:50:d5:64:b7:d6:5f:83:42:5f:9d: d1:08:20:b9:bd:61:90:2d:77:64:e6:44:a6:f4:72: a3:51:ba:ac:1e:37:39:de:40:e7:7b:61:1a:58:e9: 47:ba:04:f7:4f:d4:10:c2:e0:de:aa:89:b5:f7:e6: 9d:67:32:c9:9e:42:89:12:a6:3a:5c:06:ba:16:ca: eb:bd:ca:23:9c:cf:dc:ef:3b:73:39:0a:95:17:56: 67:01:1c:4c:10:95:ab:cf:bb:43:93:2c:be:69:bd: 34:d3:5e:12:e5:93:c0:85:0e:2b:4b:9a:23:8f:96: 82:16:5e:e2:a2:9c:b4:fa:b3:82:a6:ae:5d:a5:8d: 41:71:1a:48:a3:7d:1b:35:cf:ba:9b:67:5a:64:43: eb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:06:56:6B:F0:ED:F7:7E:A6:CA:8D:27:BB:4D:0B:78:F6:E2:10:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:38:65:a3:ab:2e:1c:f3:80:96:2f:7b:3e:0c:aa:f5:45:62: 6c:4a:dc:0a:2b:f2:c8:02:b9:4b:f6:65:5b:a2:4d:1d:1a:37: b2:bd:5f:9c:1a:79:2a:23:5c:b3:44:58:51:59:29:4b:43:91: a4:fa:71:44:7a:26:63:5a:6f:0d:de:c9:27:5c:e0:ca:e7:22: 55:03:78:8d:d1:aa:81:ef:1c:aa:1e:99:4c:d1:70:81:4d:14: 5d:c6:02:61:ca:b0:e8:2a:49:a5:d7:b2:9b:ef:34:7b:d2:9f: 76:bb:4a:36:e9:49:d1:57:df:2b:29:6b:0b:f9:27:12:ec:60: dd:26:84:90:97:19:e7:0a:1b:12:aa:04:ef:13:97:0b:23:c0: 6e:1a:c4:7f:af:d3:54:50:6f:17:eb:ea:e0:95:45:f7:ed:c9: 71:26:e4:23:8b:e8:4d:a6:39:15:3c:78:8b:00:37:83:b5:84: a1:bf:1c:09:c7:cd:30:bb:2c:0c:25:36:d9:c5:ce:89:f8:f5: 1a:21:9d:3d:93:af:7f:13:4b:8c:88:85:43:b0:f2:b4:c2:2f: 58:16:07:2b:e1:55:16:fa:8b:4f:61:48:c4:6e:05:b9:85:50: 53:ce:95:91:4a:66:bd:c3:96:29:7d:d0:71:b5:ec:9e:f3:84: de:6d:bf:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErK5f5Up+kqi+I0IaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI1MDgwODIxNTcyN1oXDTI1MTEwNjIyNTcyN1owLzEtMCsGA1UEAxMk YTExOGIzMWItMjQ4Mi00YjJmLWI0YTQtMDNhNGQwYTNhOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD4t+slSrgJwNLfMbjLJyJRpPI+nYXxzrhWH o18nTXQR20TLLbbm9P7JcUZx11uTJd1xwYtpHqZUtY0jW2CqnGG2EPBteGs3L16B F7aLbpvAtyyCac+qb5kH2vw/5Hc+yeDsdBrJtKJSpGj/pFDVZLfWX4NCX53RCCC5 vWGQLXdk5kSm9HKjUbqsHjc53kDne2EaWOlHugT3T9QQwuDeqom19+adZzLJnkKJ EqY6XAa6FsrrvcojnM/c7ztzOQqVF1ZnARxMEJWrz7tDkyy+ab00014S5ZPAhQ4r S5ojj5aCFl7iopy0+rOCpq5dpY1BcRpIo30bNc+6m2daZEPrfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIGVmvw7fd+psqNJ7tNC3j24hANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvMDc5YzZjMWUtN2NlYS0z OWRlLWI0NjgtOWRjMjZjNTY3MjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk4ZaOrLhzzgJYvez4MqvVFYmxK3Aor8sgCuUv2ZVuiTR0aN7K9X5wa eSojXLNEWFFZKUtDkaT6cUR6JmNabw3eySdc4MrnIlUDeI3RqoHvHKoemUzRcIFN FF3GAmHKsOgqSaXXspvvNHvSn3a7SjbpSdFX3yspawv5JxLsYN0mhJCXGecKGxKq BO8TlwsjwG4axH+v01RQbxfr6uCVRfftyXEm5COL6E2mORU8eIsAN4O1hKG/HAnH zTC7LAwlNtnFzon49RohnT2Tr38TS4yIhUOw8rTCL1gWByvhVRb6i09hSMRuBbmF UFPOlZFKZr3Dlil90HG17J7zhN5tv7M= -----END CERTIFICATE-----Generated at Wed Aug 20 03:36:03 2025 by rpki-client