$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa File: 5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa (raw, json) Hash identifier: xZDhLYu+Ooncy9c6dYySsynN1pw11NRIWzaKdMA5LDU= Subject key identifier: 47:B9:4C:0A:BB:9F:4E:52:8D:BE:18:CE:FE:C1:F6:5F:32:12:AF:14 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584ABD4B89FBA93C543325885120 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 30036 IP address blocks: 72.255.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:89:fb:a9:3c:54:33:25:88:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=3c25716f-28c2-4f3e-b111-525f6d30cb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:5d:92:25:5d:7c:85:2f:a8:cf:62:f6:77: 95:ad:10:fb:84:c7:ab:d9:b7:ee:dd:43:2b:2e:8b: b0:2f:e3:e4:02:6b:ba:43:bb:71:72:87:a6:13:a5: e2:94:b9:b0:4a:3b:83:0e:08:30:b3:aa:d9:41:d1: 1c:01:b1:28:17:93:2b:16:46:a2:65:16:b5:a0:32: ae:db:2d:c1:89:06:5e:27:f3:da:e9:b9:9d:07:07: 7d:cf:0b:c9:fb:c9:9d:ec:66:f2:59:cc:fd:fe:3f: 17:7c:68:18:c1:1a:00:af:9d:4d:bd:15:f9:bc:47: 6d:86:0b:b8:bd:d4:4a:d3:be:08:13:31:a5:2c:f7: 0b:30:c4:89:70:44:18:78:de:6e:38:47:d2:51:53: 5d:24:fa:46:74:88:e7:25:82:b0:4c:f8:e8:de:4d: 8b:bc:b5:21:76:b9:37:6f:5a:66:12:c2:e6:2c:d9: de:01:6c:06:26:65:f3:1a:e5:da:3b:67:99:68:24: 43:2e:62:f1:d8:9b:37:7a:c9:e2:73:41:3b:d0:c3: c1:9f:14:8c:f6:35:22:46:33:53:98:65:1f:d2:5d: 99:61:fc:b9:c0:df:23:e0:41:d4:74:44:5c:23:77: 86:49:67:41:88:fd:85:39:95:91:dc:ca:a2:9c:05: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:4C:0A:BB:9F:4E:52:8D:BE:18:CE:FE:C1:F6:5F:32:12:AF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5f20232c-f8e7-32f9-970a-d6b93baf05e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f7:4d:18:59:12:2a:8f:5c:72:d5:0f:18:06:ed:91:c9:a0: 1d:64:34:3c:b4:c1:94:00:f9:d5:b2:8f:a4:75:89:c1:56:88: d6:47:0c:ee:35:55:eb:aa:5e:42:0b:ec:f2:4b:06:9a:17:7d: 06:f5:09:ff:5d:9b:ed:92:fd:8c:92:88:ac:5f:fb:ed:2c:9f: 0c:c5:1d:48:4d:0c:a8:b4:9c:b0:e3:a9:5f:e2:2b:40:91:b1: a7:32:33:0b:c9:83:8d:7d:e9:07:da:01:c9:6f:d2:a5:ec:e6: 3c:8b:cc:0e:f5:72:21:d7:c5:4a:78:90:e1:ff:c3:f0:38:53: c6:7d:ac:ac:d7:e3:8f:2e:8d:48:87:0c:87:5f:b5:e2:2d:da: f3:85:b3:a3:b0:1a:76:79:e5:58:f9:14:32:9e:c8:d9:17:7e: c8:52:a9:f7:1e:18:c4:97:c4:7b:2e:c4:3e:b5:61:19:19:c8: 86:87:60:df:40:05:cc:49:9f:0b:10:a8:67:09:c5:ab:f1:6c: f3:02:87:a6:26:52:d1:f8:06:94:a2:4b:3c:d4:81:57:4f:7e: 77:3b:f8:16:6a:61:8e:89:8e:2e:ae:41:39:e7:40:23:f7:e8: e1:b2:8e:a7:88:1b:60:57:70:bf:3f:88:35:9c:e7:f9:9c:a9: 91:c3:9f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S4n7qTxUMyWIUSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk M2MyNTcxNmYtMjhjMi00ZjNlLWIxMTEtNTI1ZjZkMzBjYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS9dkiVdfIUvqM9i9neVrRD7hMer2bfu3UMr LouwL+PkAmu6Q7txcoemE6XilLmwSjuDDggws6rZQdEcAbEoF5MrFkaiZRa1oDKu 2y3BiQZeJ/Pa6bmdBwd9zwvJ+8md7GbyWcz9/j8XfGgYwRoAr51NvRX5vEdthgu4 vdRK074IEzGlLPcLMMSJcEQYeN5uOEfSUVNdJPpGdIjnJYKwTPjo3k2LvLUhdrk3 b1pmEsLmLNneAWwGJmXzGuXaO2eZaCRDLmLx2Js3esnic0E70MPBnxSM9jUiRjNT mGUf0l2ZYfy5wN8j4EHUdERcI3eGSWdBiP2FOZWR3MqinAUaPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe5TAq7n05Sjb4Yzv7B9l8yEq8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWYyMDIzMmMtZjhlNy0z MmY5LTk3MGEtZDZiOTNiYWYwNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL3TRhZEiqPXHLVDxgG7ZHJoB1kNDy0wZQA+dWyj6R1icFWiNZHDO41 VeuqXkIL7PJLBpoXfQb1Cf9dm+2S/YySiKxf++0snwzFHUhNDKi0nLDjqV/iK0CR sacyMwvJg4196QfaAclv0qXs5jyLzA71ciHXxUp4kOH/w/A4U8Z9rKzX448ujUiH DIdfteIt2vOFs6OwGnZ55Vj5FDKeyNkXfshSqfceGMSXxHsuxD61YRkZyIaHYN9A BcxJnwsQqGcJxavxbPMCh6YmUtH4BpSiSzzUgVdPfnc7+BZqYY6Jji6uQTnnQCP3 6OGyjqeIG2BXcL8/iDWc5/mcqZHDnw8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:32:33 2025 by rpki-client