$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/1b43a332-c813-37d0-97f3-bb3001312f59.roa File: 1b43a332-c813-37d0-97f3-bb3001312f59.roa (raw, json) Hash identifier: WwZ66VX2QGmQp9A+LYp/q4L7UE9DxrWtfw9Oa1qV7dM= Subject key identifier: 18:F4:03:3A:8B:8F:5C:BB:5D:14:56:C6:39:7E:58:70:7F:5A:C4:4B Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584ACBB08F5F8EBAFFE1D4827080 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/1b43a332-c813-37d0-97f3-bb3001312f59.roa Signing time: Fri 08 Aug 2025 21:56:26 +0000 ROA not before: Fri 08 Aug 2025 21:56:26 +0000 ROA not after: Thu 06 Nov 2025 22:56:26 +0000 asID: 16557 IP address blocks: 72.21.12.0/24 maxlen: 24 72.21.13.0/24 maxlen: 24 72.21.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:b0:8f:5f:8e:ba:ff:e1:d4:82:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Aug 8 21:56:26 2025 GMT Not After : Nov 6 22:56:26 2025 GMT Subject: CN=f5bb3dcc-e4a6-4b0b-b01a-4e13e321e894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:5b:26:56:fc:31:8c:e3:be:37:f5:99:cb: fd:ea:0e:d9:14:1e:25:81:47:df:a4:93:78:57:c7: 48:76:f9:34:58:03:42:ba:12:db:0d:10:86:6f:54: 01:fd:c1:01:a6:85:b3:a0:45:40:59:76:8e:7a:46: f0:5a:66:7b:af:57:8c:37:3e:24:15:d1:b2:d2:d3: 9f:76:66:d7:d8:0a:6c:3f:fb:2b:d6:e0:56:b3:f7: 14:e3:6a:62:c1:56:5a:dc:49:07:b0:3b:2d:d1:c1: 0c:43:35:7b:de:c9:00:87:f0:34:59:5f:a9:0b:4e: ec:09:bc:96:1b:af:6e:30:79:cf:b2:2c:90:ec:0d: 80:39:be:1c:3f:c6:37:83:e1:d5:20:51:60:88:ee: 45:f0:2c:91:5e:9f:b3:bb:41:b4:ce:a4:d8:ec:ee: 6c:e2:31:8f:e1:aa:5c:c5:de:e7:7c:5b:38:fc:c1: 7c:e3:5a:07:10:3d:7a:8a:cc:1f:f5:da:87:aa:37: fa:98:16:4e:5d:f5:0e:91:e0:5b:41:74:d5:80:b9: f7:9b:d3:a0:1e:00:e4:0a:4a:59:64:71:d2:c5:99: 7e:bf:41:e1:06:72:90:d0:95:ca:78:f0:9b:43:da: 66:be:62:0e:c1:c9:a7:6b:c6:63:83:e2:f8:19:1b: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F4:03:3A:8B:8F:5C:BB:5D:14:56:C6:39:7E:58:70:7F:5A:C4:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/1b43a332-c813-37d0-97f3-bb3001312f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.12.0-72.21.14.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3a:4f:f9:3c:66:ca:9e:eb:8a:b7:f4:6a:ec:2c:2f:ea:bd: 90:d3:c1:61:07:1e:48:fc:15:56:5b:e4:cb:41:e9:99:b0:24: 6e:82:a6:05:d6:7d:79:ec:1a:95:2a:05:b5:83:64:e2:ce:aa: 05:32:f4:9c:c3:78:ce:e8:17:3a:3d:3a:26:10:77:d6:57:f0: 20:c3:ce:36:b0:c6:d8:46:f4:ed:e5:2a:45:5c:08:08:07:cf: df:09:8f:cc:92:c7:9f:7e:27:ce:8b:b8:2d:52:40:17:de:a4: 0f:a3:5f:ae:4d:8a:a0:5d:a8:bd:53:32:3b:a2:0e:38:03:63: 6d:e6:ec:c2:fd:4d:17:e8:ed:26:d1:ac:1b:c0:ec:eb:6a:74: 8f:67:fc:d8:2f:f8:04:64:09:73:ce:da:87:c1:86:f7:80:d3: 33:19:41:c5:54:8f:98:fe:7c:ce:da:a7:89:71:d1:fd:ae:5a: 58:21:61:9d:c2:78:03:25:78:98:07:71:2a:af:3b:8c:3d:61: a1:8b:53:b8:02:04:10:7d:82:42:2e:f9:2f:27:0f:57:4f:b6: eb:b0:ff:95:5a:6b:58:e0:c6:a7:f7:df:6d:0f:82:11:47:8d: fc:0c:94:f5:0a:12:26:06:46:56:cd:2b:c5:2e:f1:80:4d:96: f2:70:19:51 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErLsI9fjrr/4dSCcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI1MDgwODIxNTYyNloXDTI1MTEwNjIyNTYyNlowLzEtMCsGA1UEAxMk ZjViYjNkY2MtZTRhNi00YjBiLWIwMWEtNGUxM2UzMjFlODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RVbJlb8MYzjvjf1mcv96g7ZFB4lgUffpJN4 V8dIdvk0WANCuhLbDRCGb1QB/cEBpoWzoEVAWXaOekbwWmZ7r1eMNz4kFdGy0tOf dmbX2ApsP/sr1uBWs/cU42piwVZa3EkHsDst0cEMQzV73skAh/A0WV+pC07sCbyW G69uMHnPsiyQ7A2AOb4cP8Y3g+HVIFFgiO5F8CyRXp+zu0G0zqTY7O5s4jGP4apc xd7nfFs4/MF841oHED16iswf9dqHqjf6mBZOXfUOkeBbQXTVgLn3m9OgHgDkCkpZ ZHHSxZl+v0HhBnKQ0JXKePCbQ9pmvmIOwcmna8Zjg+L4GRt4EQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBj0AzqLj1y7XRRWxjl+WHB/WsRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvMWI0M2EzMzItYzgxMy0z N2QwLTk3ZjMtYmIzMDAxMzEyZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJIFQwD BABIFQ4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARjpP+Txmyp7rirf0auwsL+q9kNPBYQceSPwVVlvky0Hp mbAkboKmBdZ9eewalSoFtYNk4s6qBTL0nMN4zugXOj06JhB31lfwIMPONrDG2Eb0 7eUqRVwICAfP3wmPzJLHn34nzou4LVJAF96kD6Nfrk2KoF2ovVMyO6IOOANjbebs wv1NF+jtJtGsG8Ds62p0j2f82C/4BGQJc87ah8GG94DTMxlBxVSPmP58ztqniXHR /a5aWCFhncJ4AyV4mAdxKq87jD1hoYtTuAIEEH2CQi75LycPV0+267D/lVprWODG p/ffbQ+CEUeN/AyU9QoSJgZGVs0rxS7xgE2W8nAZUQ== -----END CERTIFICATE-----Generated at Wed Aug 20 03:36:02 2025 by rpki-client