$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa File: 60caf8f9-5051-3d82-8e00-297844b8dbfc.roa (raw, json) Hash identifier: 7utPzgTf/wlKTKDeXZGzR9dg8JfqVMDB4kNBLXrYEjc= Subject key identifier: FE:AB:8D:57:A9:4C:BE:E4:B1:0F:10:FF:52:84:77:BB:AE:F3:67:51 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584ACAE54A06EF117038DB797C00 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa Signing time: Fri 08 Aug 2025 21:56:02 +0000 ROA not before: Fri 08 Aug 2025 21:56:02 +0000 ROA not after: Thu 06 Nov 2025 22:56:02 +0000 asID: 16557 IP address blocks: 72.21.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:e5:4a:06:ef:11:70:38:db:79:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Aug 8 21:56:02 2025 GMT Not After : Nov 6 22:56:02 2025 GMT Subject: CN=92acff71-9374-4962-befc-cee482bc6fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:61:d7:89:4c:87:e6:72:9a:7b:58:d7:67: dc:35:9d:9f:1d:83:9f:17:31:76:e3:5a:e5:a8:c8: dd:2f:bf:da:77:ae:45:35:1f:fc:83:c7:6b:eb:38: 8e:96:c8:15:30:fc:46:ea:24:ee:45:39:c7:9d:f3: 9d:21:6e:52:27:f3:ea:9f:56:d3:91:74:a8:c5:de: 35:4f:c7:1a:59:78:ee:3f:52:10:aa:b9:ca:75:f3: 05:b1:af:fe:85:3d:e8:34:c8:25:0d:8a:f1:93:dd: cb:1b:8c:3d:c7:ad:b4:6e:24:d2:e3:92:d5:99:ac: 5e:32:6f:c0:75:52:41:e0:d4:d5:a1:af:1e:52:b0: 5d:ab:87:83:7d:78:51:22:3a:b0:00:cc:71:fb:e4: 40:e8:cd:8f:94:d3:41:dd:19:b7:ce:7e:62:ba:8d: ff:5b:8f:74:06:bc:8d:c1:b5:bd:5f:59:de:70:96: c6:1b:fb:b5:8b:a0:33:9d:ae:1b:1d:cb:c7:f3:37: cb:6b:1e:7b:f7:63:10:1d:91:03:f4:d3:cc:a0:45: de:30:56:38:9b:cc:7d:94:c6:c3:28:6f:22:0c:12: 35:ce:b7:6a:1c:91:e4:57:e3:0c:1e:8d:0d:96:f3: ab:bb:37:e2:78:5e:54:bb:91:a2:d2:f1:cd:a2:99: 88:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AB:8D:57:A9:4C:BE:E4:B1:0F:10:FF:52:84:77:BB:AE:F3:67:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/60caf8f9-5051-3d82-8e00-297844b8dbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9a:70:0f:eb:06:be:39:0b:56:19:18:78:17:e2:b7:09:5b: 70:2e:be:39:f1:be:57:d6:4b:c0:21:7e:6f:cd:43:9d:79:84: 26:d7:35:2c:ce:61:0b:de:9f:17:a8:46:34:52:78:8d:0d:84: 17:a7:4b:ba:1b:3f:5b:61:56:ef:50:60:eb:3e:65:27:e4:88: 79:a3:7c:e3:5b:52:19:8e:32:3c:ab:ec:bc:75:73:e8:54:24: 5f:c9:86:b5:ba:e6:ab:9f:1e:b4:5a:bd:08:ba:3b:4d:0a:b4: a6:56:15:b3:05:44:e1:fd:78:96:6a:1d:53:80:49:2b:32:fe: c6:0b:bb:92:b6:4c:17:e4:04:ea:1f:05:0d:31:9c:fb:ec:4d: 1e:9c:36:67:1c:a0:25:70:a8:4f:76:60:5b:8c:11:db:d0:e3: 94:7d:b9:5d:95:48:51:8c:55:0e:82:2c:cd:4c:6d:3b:4d:54: 48:24:07:dd:17:d8:cb:d5:f9:d5:5f:aa:d8:50:31:fb:28:5d: 9d:c5:9c:2c:77:fb:49:13:10:3c:11:04:0f:44:b1:1f:57:35: 75:16:59:4b:99:3b:8e:ac:2b:e3:97:cc:6c:c3:72:3c:f7:68: 73:2d:8b:5b:d8:ae:71:fe:f7:35:ed:fc:d7:03:cd:58:ea:e9: b8:88:ec:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErK5UoG7xFwONt5fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI1MDgwODIxNTYwMloXDTI1MTEwNjIyNTYwMlowLzEtMCsGA1UEAxMk OTJhY2ZmNzEtOTM3NC00OTYyLWJlZmMtY2VlNDgyYmM2ZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPFh14lMh+ZymntY12fcNZ2fHYOfFzF241rl qMjdL7/ad65FNR/8g8dr6ziOlsgVMPxG6iTuRTnHnfOdIW5SJ/Pqn1bTkXSoxd41 T8caWXjuP1IQqrnKdfMFsa/+hT3oNMglDYrxk93LG4w9x620biTS45LVmaxeMm/A dVJB4NTVoa8eUrBdq4eDfXhRIjqwAMxx++RA6M2PlNNB3Rm3zn5iuo3/W490BryN wbW9X1necJbGG/u1i6Azna4bHcvH8zfLax5792MQHZED9NPMoEXeMFY4m8x9lMbD KG8iDBI1zrdqHJHkV+MMHo0NlvOruzfieF5Uu5Gi0vHNopmIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6rjVepTL7ksQ8Q/1KEd7uu82dRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvNjBjYWY4ZjktNTA1MS0z ZDgyLThlMDAtMjk3ODQ0YjhkYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6acA/rBr45C1YZGHgX4rcJW3AuvjnxvlfWS8Ahfm/NQ515hCbXNSzO YQvenxeoRjRSeI0NhBenS7obP1thVu9QYOs+ZSfkiHmjfONbUhmOMjyr7Lx1c+hU JF/JhrW65qufHrRavQi6O00KtKZWFbMFROH9eJZqHVOASSsy/sYLu5K2TBfkBOof BQ0xnPvsTR6cNmccoCVwqE92YFuMEdvQ45R9uV2VSFGMVQ6CLM1MbTtNVEgkB90X 2MvV+dVfqthQMfsoXZ3FnCx3+0kTEDwRBA9EsR9XNXUWWUuZO46sK+OXzGzDcjz3 aHMti1vYrnH+9zXt/NcDzVjq6biI7LM= -----END CERTIFICATE-----Generated at Wed Aug 20 03:40:17 2025 by rpki-client