$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa File: 8da70dce-44c2-365f-99fb-5fab845dc30b.roa (raw, json) Hash identifier: GIRRYMLGoZkBWpRLtRyLtrAlVOdqzuoIABoSHuUYhzc= Subject key identifier: 87:6F:04:89:D2:EF:D2:78:E5:5B:C9:83:AC:0D:13:0A:33:9C:77:10 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849DC8FA5FCA18113D6F255A140 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 30036 IP address blocks: 72.255.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:a5:fc:a1:81:13:d6:f2:55:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=a029c5bd-5fba-45a0-b14e-6d71e3da7c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:12:5e:0a:17:98:c9:33:1e:1f:9a:bb:98: 3b:dc:cb:7d:75:6a:77:6a:6a:6d:81:ac:f5:d4:c1: fc:c5:fd:72:7f:a7:3e:9a:d1:28:c5:59:f3:af:29: 79:be:7f:63:f9:c5:d5:c7:34:f3:3d:9f:c8:23:0b: ab:5f:ec:e7:44:e5:8c:52:11:5d:c5:ff:83:a9:64: 96:da:1d:58:0e:03:f5:71:89:59:99:7c:4a:78:f2: 17:a4:0a:35:a4:2f:f1:d0:76:3f:8e:a7:dd:a0:a2: 99:0d:4b:27:50:a2:48:4b:5a:ff:49:b7:c2:81:43: 37:e8:e2:96:45:29:a6:9e:5c:30:3f:83:44:75:c7: e3:78:8e:d8:cd:53:43:ea:ce:32:74:f6:3b:09:cf: fe:52:26:ef:77:09:41:f0:c2:3b:90:cc:a7:44:21: 3a:3c:bc:12:e9:3e:a2:d6:41:f2:a2:42:2a:ef:b8: 76:21:2a:0a:2a:85:26:f0:02:65:1f:9b:26:d6:0e: 20:fd:48:4d:2d:d8:a0:c0:6d:5d:ca:04:3a:93:1f: b0:73:b9:3a:49:7b:da:ea:aa:e7:b4:c7:59:03:fc: a9:ba:78:0f:6a:ca:f2:0f:a9:53:b2:c1:9d:14:17: 09:b6:29:0f:93:51:21:ab:07:d1:48:48:45:4f:2c: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6F:04:89:D2:EF:D2:78:E5:5B:C9:83:AC:0D:13:0A:33:9C:77:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8da70dce-44c2-365f-99fb-5fab845dc30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:af:14:70:59:3a:55:34:01:63:97:c5:d6:ff:3f:41:67:16: f5:08:9e:c4:56:77:25:18:a6:aa:79:a5:1f:55:fe:72:9d:bc: b1:48:c8:d5:91:40:79:c0:ea:b3:41:53:2c:72:04:14:2a:90: 9e:e9:b7:e0:12:a0:fd:1b:58:5b:c5:b6:19:71:95:56:1a:60: 41:b6:95:73:55:24:bd:26:f2:d3:8f:2a:92:c8:6e:16:2d:a5: 49:33:7f:cc:0e:ab:df:20:27:c2:ca:89:49:1c:2f:e3:9b:5f: 66:b1:b0:1c:1f:80:9c:04:42:be:16:f2:63:d9:36:ed:0e:58: 91:df:b1:e8:7d:d0:e1:2a:87:64:77:15:c7:ed:32:65:a3:5a: 7b:79:be:ef:3b:98:7b:db:df:54:66:ac:93:02:8f:7c:a5:89: 31:bc:d7:84:31:84:5f:8b:53:a2:2e:a1:c5:9b:ae:e7:3e:fa: 6c:0d:19:82:11:f7:ea:81:54:69:b3:b4:0e:91:3d:fd:ee:0f: 11:a8:d1:c3:a4:34:3e:82:8c:33:bd:be:35:e2:a7:9a:f6:b5: 23:5a:ef:41:f3:e6:fb:42:13:15:3b:4a:d2:41:d6:1b:37:3f: 5e:12:56:2b:56:b7:0f:dc:b1:cf:7d:6f:66:43:7a:9e:f4:ca: 0d:65:c0:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj6X8oYET1vJVoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YTAyOWM1YmQtNWZiYS00NWEwLWIxNGUtNmQ3MWUzZGE3YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMUSXgoXmMkzHh+au5g73Mt9dWp3amptgaz1 1MH8xf1yf6c+mtEoxVnzryl5vn9j+cXVxzTzPZ/IIwurX+znROWMUhFdxf+DqWSW 2h1YDgP1cYlZmXxKePIXpAo1pC/x0HY/jqfdoKKZDUsnUKJIS1r/SbfCgUM36OKW RSmmnlwwP4NEdcfjeI7YzVND6s4ydPY7Cc/+UibvdwlB8MI7kMynRCE6PLwS6T6i 1kHyokIq77h2ISoKKoUm8AJlH5sm1g4g/UhNLdigwG1dygQ6kx+wc7k6SXva6qrn tMdZA/ypungPasryD6lTssGdFBcJtikPk1EhqwfRSEhFTyzJOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdvBInS79J45VvJg6wNEwoznHcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGRhNzBkY2UtNDRjMi0z NjVmLTk5ZmItNWZhYjg0NWRjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWvFHBZOlU0AWOXxdb/P0FnFvUInsRWdyUYpqp5pR9V/nKdvLFIyNWR QHnA6rNBUyxyBBQqkJ7pt+ASoP0bWFvFthlxlVYaYEG2lXNVJL0m8tOPKpLIbhYt pUkzf8wOq98gJ8LKiUkcL+ObX2axsBwfgJwEQr4W8mPZNu0OWJHfseh90OEqh2R3 FcftMmWjWnt5vu87mHvb31RmrJMCj3yliTG814QxhF+LU6IuocWbruc++mwNGYIR 9+qBVGmztA6RPf3uDxGo0cOkND6CjDO9vjXip5r2tSNa70Hz5vtCExU7StJB1hs3 P14SVitWtw/csc99b2ZDep70yg1lwP4= -----END CERTIFICATE-----Generated at Mon Jun 16 13:10:12 2025 by rpki-client