$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa File: b70f42e6-c660-3f95-a2e5-3707bb43c217.roa (raw, json) Hash identifier: +VZlh2C7KtMH64UtPPe6sy317Mwa8eRN7HlZVvW5e8c= Subject key identifier: 21:7B:16:CA:FD:30:D6:39:AB:ED:8B:0B:A2:52:B0:F6:DA:B9:94:0A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584ABD4BB03DD3219ACF70784E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 30036 IP address blocks: 72.255.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:b0:3d:d3:21:9a:cf:70:78:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=98da240a-04e5-4d38-9410-8568127a04c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:1b:59:0b:ff:43:03:5a:2a:51:2d:11:bf: d9:a7:e3:99:41:d8:0b:16:38:c2:9e:ca:1d:b4:15: 5c:b7:6d:85:79:18:72:a9:7a:6e:78:47:0c:d5:f7: 22:4e:77:c5:79:8f:be:da:47:47:5f:de:f7:ef:c1: 61:f0:77:cc:e1:21:d6:f7:04:6d:81:14:a8:9b:07: 2a:c5:cf:78:23:5b:e6:60:fd:08:79:ee:a1:78:2a: 58:dd:a3:9a:15:e2:65:19:d2:db:1b:12:a3:27:0a: 63:ba:48:2f:c8:f2:1f:1f:48:3f:c4:34:a0:9f:71: 2f:53:08:cf:dd:a6:ed:2e:43:5a:9a:42:a6:bb:6a: c4:0b:7b:a4:78:48:66:30:f2:cd:38:90:cd:d5:34: fc:d1:16:15:19:33:24:ec:bc:b8:5f:ea:d3:57:70: 36:3b:67:c7:d8:91:65:4a:c4:a0:4f:66:17:b2:6a: ef:28:dc:d4:80:37:fd:c3:4b:b1:92:5c:e8:07:cf: 43:a3:10:f7:59:5c:dd:24:75:78:12:30:bb:df:ec: 61:a8:cc:b7:7f:bc:bc:f4:fc:7a:10:0c:a5:6e:af: aa:02:cc:74:24:54:f3:e8:b5:c7:fc:5f:48:e4:9d: e1:8b:ff:6a:d2:7b:8a:62:32:99:dc:d0:a7:5f:a8: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:16:CA:FD:30:D6:39:AB:ED:8B:0B:A2:52:B0:F6:DA:B9:94:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b70f42e6-c660-3f95-a2e5-3707bb43c217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d6:c7:53:8f:50:73:c7:24:b4:f9:bb:e0:17:02:60:f5:7c: 9f:e3:e0:3d:ad:9f:4a:64:a7:38:77:0b:0e:6a:fd:63:50:00: 0e:c9:74:a4:b0:0f:2f:b7:04:0b:23:d3:4b:6f:c0:3c:25:85: c4:89:9a:3b:28:bd:4a:4f:52:27:88:43:60:b7:62:da:ba:46: 06:9e:00:37:64:d2:3a:b1:87:85:a8:80:01:59:29:1f:4a:b4: 95:da:89:88:85:14:0a:c7:3a:d0:ac:d5:61:44:8f:38:e0:8b: d4:30:2f:95:d3:c5:c9:3b:00:0b:e9:00:82:92:ca:46:ee:8b: 2e:08:00:9e:2b:90:aa:39:53:62:8e:24:ce:1b:5c:42:31:98: 6c:db:5d:f5:f4:10:a1:af:fe:a8:e3:4d:8e:d5:d4:fa:bc:2a: 77:fe:79:7b:19:95:18:ab:ac:07:4f:a6:e0:7c:a2:c1:c9:e1: af:1b:c7:f6:84:5d:98:51:82:ef:69:a4:52:c0:ad:fc:e8:fd: cf:55:a7:28:9a:2a:2a:8d:4d:c1:7d:f9:71:50:31:8c:ce:c0: 12:17:83:c8:b8:23:90:39:83:fe:d7:a2:1f:d2:27:76:33:1d: 2c:00:da:50:a6:45:08:08:61:b7:a3:bd:9f:a3:28:13:86:01: f4:d4:c6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S7A90yGaz3B4TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk OThkYTI0MGEtMDRlNS00ZDM4LTk0MTAtODU2ODEyN2EwNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPQbWQv/QwNaKlEtEb/Zp+OZQdgLFjjCnsod tBVct22FeRhyqXpueEcM1fciTnfFeY++2kdHX97378Fh8HfM4SHW9wRtgRSomwcq xc94I1vmYP0Iee6heCpY3aOaFeJlGdLbGxKjJwpjukgvyPIfH0g/xDSgn3EvUwjP 3abtLkNamkKmu2rEC3ukeEhmMPLNOJDN1TT80RYVGTMk7Ly4X+rTV3A2O2fH2JFl SsSgT2YXsmrvKNzUgDf9w0uxklzoB89DoxD3WVzdJHV4EjC73+xhqMy3f7y89Px6 EAylbq+qAsx0JFTz6LXH/F9I5J3hi/9q0nuKYjKZ3NCnX6hWFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF7Fsr9MNY5q+2LC6JSsPbauZQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjcwZjQyZTYtYzY2MC0z Zjk1LWEyZTUtMzcwN2JiNDNjMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvWx1OPUHPHJLT5u+AXAmD1fJ/j4D2tn0pkpzh3Cw5q/WNQAA7JdKSw Dy+3BAsj00tvwDwlhcSJmjsovUpPUieIQ2C3Ytq6RgaeADdk0jqxh4WogAFZKR9K tJXaiYiFFArHOtCs1WFEjzjgi9QwL5XTxck7AAvpAIKSykbuiy4IAJ4rkKo5U2KO JM4bXEIxmGzbXfX0EKGv/qjjTY7V1Pq8Knf+eXsZlRirrAdPpuB8osHJ4a8bx/aE XZhRgu9ppFLArfzo/c9VpyiaKiqNTcF9+XFQMYzOwBIXg8i4I5A5g/7Xoh/SJ3Yz HSwA2lCmRQgIYbejvZ+jKBOGAfTUxgM= -----END CERTIFICATE-----Generated at Thu Aug 7 12:59:04 2025 by rpki-client