$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa File: 2aa07d97-8874-3082-bd20-3dc2c28806cc.roa (raw, json) Hash identifier: VDA6p5TYMY8GWu0gZ/TmifZEwFdbOhCqaKj7O0Ss86g= Subject key identifier: BB:CC:00:2F:3B:10:37:CD:FB:8F:0C:E4:F2:E3:A3:5B:3E:F5:4B:C5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A8F3B7497A3D4043E232F6B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa Signing time: Fri 18 Jul 2025 13:01:05 +0000 ROA not before: Fri 18 Jul 2025 13:01:05 +0000 ROA not after: Thu 16 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 72.255.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:3b:74:97:a3:d4:04:3e:23:2f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 18 13:01:05 2025 GMT Not After : Oct 16 13:01:05 2025 GMT Subject: CN=59901cd6-e4bb-4d1b-9f2a-821caa93a031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:51:9b:bb:4e:76:54:65:2f:95:33:68:77: fd:72:a9:51:ae:a1:8e:46:5c:6e:2d:a3:57:58:f1: 10:8e:ee:f9:9e:23:9f:a2:c2:e8:ba:a3:dd:fd:6f: bf:64:c5:d2:01:0d:2f:61:25:94:c1:9b:25:7a:8b: f0:7c:05:24:00:c2:a7:7a:06:0e:7e:d0:53:c6:b1: 97:fa:47:e5:56:9c:9c:72:6b:d6:35:8c:92:32:b1: 87:5c:96:6c:43:da:04:5b:71:6b:74:a5:d7:bf:ad: 01:da:7b:05:6c:26:cc:6a:16:c7:a0:29:c4:57:2a: 2b:ce:03:a5:b7:9a:55:f1:c7:2c:75:fc:87:c2:60: d1:65:fb:99:30:24:57:66:9e:05:d7:10:f7:8c:c0: e3:19:a6:d2:dc:7b:4c:41:95:6b:2e:c6:38:9c:9b: 6c:51:2c:b8:09:ec:07:7b:17:e2:84:29:a1:7e:0e: a6:ce:67:d7:9c:8a:2d:b0:a3:e6:36:44:6b:10:52: 2f:37:08:7b:55:9c:8c:20:85:71:d2:fe:fb:38:de: 6e:e9:cc:b6:d3:13:5f:5d:c4:9a:89:5e:08:90:34: 7a:b4:13:06:b8:26:de:25:f8:e8:f4:ff:ce:d6:85: 3f:03:c1:12:60:39:e3:6a:42:22:0b:39:dc:61:6e: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:00:2F:3B:10:37:CD:FB:8F:0C:E4:F2:E3:A3:5B:3E:F5:4B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2aa07d97-8874-3082-bd20-3dc2c28806cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a6:67:ae:f0:49:2e:13:3f:02:e5:40:a0:e1:0c:b9:d7:e7: 07:16:9e:fb:73:00:b7:98:76:24:07:12:a1:24:14:2b:cf:23: 4e:27:d3:bc:c2:ae:8c:73:3e:d6:fd:78:e4:89:a1:c3:59:a3: 85:b9:42:20:d3:06:6a:d0:01:bc:38:c5:96:92:83:07:7f:45: 1d:d0:8c:6c:5d:27:07:98:bc:76:2b:c0:70:19:e1:61:55:b3: 94:cb:e0:fb:79:e6:54:89:66:65:b6:f4:bb:48:64:89:d2:7a: 54:ed:fa:32:b7:ff:51:92:db:24:eb:41:c8:c8:27:0c:96:86: 0e:39:81:9c:25:31:7d:d6:b3:f6:e4:8e:e5:23:97:78:1d:ca: ff:e7:5f:6a:97:50:fb:a8:04:c0:02:68:8d:2f:58:cb:8f:ef: 2b:32:58:ec:88:f5:97:f9:a6:25:7b:6f:57:a0:bf:97:29:94: 28:54:e4:7b:67:44:54:9b:b6:f7:1f:e0:68:bb:51:8b:0e:7f: b6:bf:cf:bf:a1:7d:5a:67:db:61:1f:49:ba:f0:7c:f6:aa:73: 2c:13:3a:f3:ee:9a:35:2a:a1:18:04:33:70:76:49:a4:25:38: d9:1e:1a:c1:b3:07:74:87:c5:7b:d0:ea:90:18:47:9a:78:41: b9:15:ad:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO3SXo9QEPiMvawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk NTk5MDFjZDYtZTRiYi00ZDFiLTlmMmEtODIxY2FhOTNhMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaZRm7tOdlRlL5UzaHf9cqlRrqGORlxuLaNX WPEQju75niOfosLouqPd/W+/ZMXSAQ0vYSWUwZsleovwfAUkAMKnegYOftBTxrGX +kflVpyccmvWNYySMrGHXJZsQ9oEW3FrdKXXv60B2nsFbCbMahbHoCnEVyorzgOl t5pV8ccsdfyHwmDRZfuZMCRXZp4F1xD3jMDjGabS3HtMQZVrLsY4nJtsUSy4CewH exfihCmhfg6mzmfXnIotsKPmNkRrEFIvNwh7VZyMIIVx0v77ON5u6cy20xNfXcSa iV4IkDR6tBMGuCbeJfjo9P/O1oU/A8ESYDnjakIiCzncYW7RBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvMAC87EDfN+48M5PLjo1s+9UvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmFhMDdkOTctODg3NC0z MDgyLWJkMjAtM2RjMmMyODgwNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSP9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOmZ67wSS4TPwLlQKDhDLnX5wcWnvtzALeYdiQHEqEkFCvPI04n07zC roxzPtb9eOSJocNZo4W5QiDTBmrQAbw4xZaSgwd/RR3QjGxdJweYvHYrwHAZ4WFV s5TL4Pt55lSJZmW29LtIZInSelTt+jK3/1GS2yTrQcjIJwyWhg45gZwlMX3Ws/bk juUjl3gdyv/nX2qXUPuoBMACaI0vWMuP7ysyWOyI9Zf5piV7b1egv5cplChU5Htn RFSbtvcf4Gi7UYsOf7a/z7+hfVpn22EfSbrwfPaqcywTOvPumjUqoRgEM3B2SaQl ONkeGsGzB3SHxXvQ6pAYR5p4QbkVrcc= -----END CERTIFICATE-----Generated at Fri Aug 8 10:15:30 2025 by rpki-client