$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa File: e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa (raw, json) Hash identifier: EzvCwRIsEp5brm0oiao16UjolWAhCBo+Ex8sTR9z4bM= Subject key identifier: 28:37:A9:13:D0:5F:80:45:79:A9:03:22:D6:CE:27:A6:CD:AA:CC:BC Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584ACAE5C3327F5008AF6D6D3080 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa Signing time: Fri 08 Aug 2025 21:57:00 +0000 ROA not before: Fri 08 Aug 2025 21:57:00 +0000 ROA not after: Thu 06 Nov 2025 22:57:00 +0000 asID: 16557 IP address blocks: 72.21.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ca:e5:c3:32:7f:50:08:af:6d:6d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Aug 8 21:57:00 2025 GMT Not After : Nov 6 22:57:00 2025 GMT Subject: CN=bd537542-c372-4065-9ae8-9e9e8876e933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:13:fe:d2:68:72:7a:1c:79:09:62:e1:17: cf:81:16:79:cf:cf:09:59:73:d2:fb:cc:a0:27:88: 83:65:da:27:a5:26:35:cd:1e:77:48:a0:e1:90:32: 4b:5c:0a:ae:5b:a3:1c:b6:a5:f9:04:b3:7a:10:0e: ef:de:ed:e0:b1:7f:ad:7c:95:24:e2:f7:8f:37:cb: 09:3b:84:07:3b:f0:87:f9:78:41:e5:ce:d9:fa:23: 9c:db:15:82:bd:b2:dd:90:41:c3:60:93:d0:db:b9: f6:69:25:55:0a:e3:c1:a3:cc:67:dd:53:11:1a:aa: 71:9b:58:23:1e:db:ab:ed:4d:93:bc:49:ae:62:f3: 82:43:32:7e:b8:83:d5:b7:80:c4:c4:4d:96:7a:37: fb:8f:c4:4e:62:5e:ed:49:19:ac:6a:14:d3:d4:25: bb:3a:37:48:1f:ad:d8:1e:08:f0:75:a5:4e:14:d9: ee:64:7f:ad:c2:e9:73:e0:04:55:60:7b:ca:85:35: d6:a6:49:f9:5e:a4:96:af:3d:68:47:bb:40:22:92: 91:7b:16:6f:df:af:84:6a:c2:5d:18:33:41:90:56: 87:a5:73:50:db:80:c3:ee:9b:b9:72:73:65:40:07: e9:61:fa:df:c8:cd:ba:b5:0f:aa:0c:b1:f9:bc:ec: 12:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:37:A9:13:D0:5F:80:45:79:A9:03:22:D6:CE:27:A6:CD:AA:CC:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e0806b84-3d2d-35ba-81fe-e3d1a9381e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:13:4b:c9:a9:46:ee:41:7d:48:f6:b8:4a:af:c2:73:3a:a2: b4:80:f8:0f:e0:9e:be:35:f7:9a:92:07:4a:be:54:b9:57:ef: f7:c0:7f:d0:68:71:12:86:b6:d5:d7:56:2c:01:9c:72:a0:a6: b9:76:b2:8e:6f:c1:24:62:30:9c:29:7d:e7:34:c7:fd:3f:3a: 3e:8c:3b:8f:20:98:c5:09:b2:2d:65:61:c9:2d:6a:ef:40:10: df:f9:53:09:49:dd:c3:37:aa:a3:23:29:97:a9:b8:93:b6:8f: 9f:ce:f0:fe:79:46:3d:d3:ea:44:ba:41:5b:e0:14:a6:f1:1d: 53:dd:ff:bb:d2:d8:2f:1f:8e:26:c3:bf:28:06:d0:06:38:55: a1:01:a4:05:e6:df:09:7f:67:05:00:af:ec:17:8b:73:6c:3f: e5:f9:1b:15:7a:48:c9:05:70:52:75:98:6c:4e:ef:b5:14:2d: f8:bb:d2:cb:cb:a0:e6:fb:21:b6:e2:2c:8b:66:de:9c:5f:45: 6f:29:2e:66:c2:11:b6:c6:40:e7:1a:23:cf:af:a6:99:b9:c3: 08:32:1b:fa:72:b6:51:c9:38:d8:4e:47:a3:d4:e4:cc:4e:61: 07:c5:7f:58:93:cf:1a:6d:2e:d3:75:5c:16:69:b8:67:56:1a: 82:98:b3:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErK5cMyf1AIr21tMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI1MDgwODIxNTcwMFoXDTI1MTEwNjIyNTcwMFowLzEtMCsGA1UEAxMk YmQ1Mzc1NDItYzM3Mi00MDY1LTlhZTgtOWU5ZTg4NzZlOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv98T/tJocnoceQli4RfPgRZ5z88JWXPS+8yg J4iDZdonpSY1zR53SKDhkDJLXAquW6MctqX5BLN6EA7v3u3gsX+tfJUk4vePN8sJ O4QHO/CH+XhB5c7Z+iOc2xWCvbLdkEHDYJPQ27n2aSVVCuPBo8xn3VMRGqpxm1gj Htur7U2TvEmuYvOCQzJ+uIPVt4DExE2Wejf7j8ROYl7tSRmsahTT1CW7OjdIH63Y HgjwdaVOFNnuZH+twulz4ARVYHvKhTXWpkn5XqSWrz1oR7tAIpKRexZv36+EasJd GDNBkFaHpXNQ24DD7pu5cnNlQAfpYfrfyM26tQ+qDLH5vOwSrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCg3qRPQX4BFeakDItbOJ6bNqsy8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvZTA4MDZiODQtM2QyZC0z NWJhLTgxZmUtZTNkMWE5MzgxZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoTS8mpRu5BfUj2uEqvwnM6orSA+A/gnr4195qSB0q+VLlX7/fAf9Bo cRKGttXXViwBnHKgprl2so5vwSRiMJwpfec0x/0/Oj6MO48gmMUJsi1lYcktau9A EN/5UwlJ3cM3qqMjKZepuJO2j5/O8P55Rj3T6kS6QVvgFKbxHVPd/7vS2C8fjibD vygG0AY4VaEBpAXm3wl/ZwUAr+wXi3NsP+X5GxV6SMkFcFJ1mGxO77UULfi70svL oOb7IbbiLItm3pxfRW8pLmbCEbbGQOcaI8+vppm5wwgyG/pytlHJONhOR6PU5MxO YQfFf1iTzxptLtN1XBZpuGdWGoKYs7Y= -----END CERTIFICATE-----Generated at Wed Aug 20 03:44:29 2025 by rpki-client