$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0096e1d3-2232-35dd-9485-37571a8b29d5.roa File: 0096e1d3-2232-35dd-9485-37571a8b29d5.roa (raw, json) Hash identifier: Y8bW2yOrjUcWhCnqDOLaXbR6IKbIOwM9r+paSpmYXH8= Subject key identifier: E0:35:4E:D0:57:7A:D7:02:04:A2:86:2C:05:9F:C1:A7:00:D4:80:28 Certificate issuer: /CN=59dd5c15-2985-4e5b-8090-c191469aad18 Certificate serial: 010D0C9F4328584A97BBCB40F22C8FFAE734D180 Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0096e1d3-2232-35dd-9485-37571a8b29d5.roa Signing time: Mon 21 Jul 2025 14:06:12 +0000 ROA not before: Mon 21 Jul 2025 14:06:12 +0000 ROA not after: Sun 19 Oct 2025 14:06:12 +0000 asID: 399646 IP address blocks: 72.18.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:bb:cb:40:f2:2c:8f:fa:e7:34:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18 Validity Not Before: Jul 21 14:06:12 2025 GMT Not After : Oct 19 14:06:12 2025 GMT Subject: CN=a3aa394a-ffd9-4025-8022-c5064a623f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2f:ab:c0:14:69:c0:4d:6c:02:f9:ae:7c:99: b7:57:c3:7f:b0:70:c5:f6:9c:b2:b2:7a:00:10:3f: 1a:28:76:cd:06:4e:af:08:c5:cb:49:b1:b2:12:cd: ad:77:34:68:4e:e9:12:7e:3d:62:a7:d7:84:ed:13: 48:a9:0b:d3:9c:d1:24:4f:49:14:10:89:6b:0e:a3: 49:ba:f5:f6:92:16:5e:14:47:5a:d0:0d:5a:b6:0c: 29:30:4f:a2:1c:a4:9b:ae:4f:ad:e8:d1:4f:96:c4: e3:13:90:8e:6f:a6:97:c5:84:70:30:50:41:42:a8: 2a:b1:ce:9c:09:36:72:df:b5:65:b6:78:83:64:86: 99:b8:5c:4a:13:86:56:b0:82:ca:ae:63:d9:c9:76: cc:92:02:5e:1c:3d:43:55:6d:fc:a3:4f:07:c4:42: f8:3a:02:be:c2:57:d1:b4:49:45:93:ac:43:cd:b9: db:5d:e0:b6:da:2a:23:e8:fe:5f:97:85:26:79:84: cb:c1:b1:47:f1:94:4a:c7:f4:33:21:4d:a0:bc:17: 9f:23:99:a3:67:3a:19:7d:5b:22:1f:19:4b:b8:93: 72:0b:fd:40:98:b4:41:bc:e4:49:fe:f6:39:82:7e: 75:d7:8f:48:4c:68:7d:14:fc:a6:34:74:3d:a3:b2: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:35:4E:D0:57:7A:D7:02:04:A2:86:2C:05:9F:C1:A7:00:D4:80:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/0096e1d3-2232-35dd-9485-37571a8b29d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl X509v3 Authority Key Identifier: keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer sbgp-ipAddrBlock: critical IPv4: 72.18.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:98:65:4c:27:aa:9a:03:cf:72:32:12:a8:be:04:f9:35:9c: 47:ad:d0:54:10:cb:98:42:2d:ce:53:0c:18:35:a2:33:d1:fe: 88:21:9c:9c:88:db:8e:12:46:2e:66:81:b8:4f:eb:94:36:94: d9:30:6b:8c:f0:e4:a7:0a:5c:b7:fa:06:a5:79:68:88:a6:fb: ec:b7:d0:5b:de:92:24:67:c9:87:3e:30:a7:ff:f0:60:bf:3b: 79:cc:41:6b:03:64:40:c0:3a:a4:f7:9c:f0:ca:d4:f3:04:2f: 37:49:f8:15:2c:f6:2e:3d:f0:e8:ad:15:d6:b0:af:86:d5:b0: 09:8d:e3:ec:1d:01:59:f4:a1:1f:67:5d:60:dd:e5:b0:9b:43: 3c:ca:48:5f:4f:c6:fb:5c:e1:b2:96:b2:ad:86:81:cb:d8:c5: a7:62:5e:56:75:58:1f:37:34:ff:2b:c4:6b:95:53:ba:19:2b: a3:a7:e3:9a:24:a4:7b:6d:7f:41:56:12:fe:06:06:ec:33:24: fe:ef:82:6a:8e:f6:0a:5d:52:d7:3c:f0:13:05:13:cd:54:f8: 6c:5a:68:be:ae:a9:5e:3d:08:eb:20:01:f3:31:77:f1:14:83: 02:e6:d4:95:17:87:9d:d4:3e:7b:e2:e8:f1:60:d3:1d:ac:4c: 32:6b:64:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqXu8tA8iyP+uc00YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlkZDVjMTUtMjk4NS00ZTViLTgwOTAtYzE5MTQ2OWFh ZDE4MB4XDTI1MDcyMTE0MDYxMloXDTI1MTAxOTE0MDYxMlowLzEtMCsGA1UEAxMk YTNhYTM5NGEtZmZkOS00MDI1LTgwMjItYzUwNjRhNjIzZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS+rwBRpwE1sAvmufJm3V8N/sHDF9pyysnoA ED8aKHbNBk6vCMXLSbGyEs2tdzRoTukSfj1ip9eE7RNIqQvTnNEkT0kUEIlrDqNJ uvX2khZeFEda0A1atgwpME+iHKSbrk+t6NFPlsTjE5COb6aXxYRwMFBBQqgqsc6c CTZy37VltniDZIaZuFxKE4ZWsILKrmPZyXbMkgJeHD1DVW38o08HxEL4OgK+wlfR tElFk6xDzbnbXeC22ioj6P5fl4UmeYTLwbFH8ZRKx/QzIU2gvBefI5mjZzoZfVsi HxlLuJNyC/1AmLRBvORJ/vY5gn51149ITGh9FPymNHQ9o7IfUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA1TtBXetcCBKKGLAWfwacA1IAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81OWRk NWMxNS0yOTg1LTRlNWItODA5MC1jMTkxNDY5YWFkMTgvMDA5NmUxZDMtMjIzMi0z NWRkLTk0ODUtMzc1NzFhOGIyOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTlkZDVjMTUtMjk4NS00ZTViLTgw OTAtYzE5MTQ2OWFhZDE4LzU5ZGQ1YzE1LTI5ODUtNGU1Yi04MDkwLWMxOTE0Njlh YWQxOC5jcmwwHwYDVR0jBBgwFoAUb0Wahbhc9Ip9r6B8KQ/8IMB9htAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81OWRkNWMxNS0yOTg1LTRlNWItODA5MC1jMTkx NDY5YWFkMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuYZUwnqpoDz3IyEqi+BPk1nEet0FQQy5hCLc5TDBg1ojPR/oghnJyI 244SRi5mgbhP65Q2lNkwa4zw5KcKXLf6BqV5aIim++y30FvekiRnyYc+MKf/8GC/ O3nMQWsDZEDAOqT3nPDK1PMELzdJ+BUs9i498OitFdawr4bVsAmN4+wdAVn0oR9n XWDd5bCbQzzKSF9Pxvtc4bKWsq2GgcvYxadiXlZ1WB83NP8rxGuVU7oZK6On45ok pHttf0FWEv4GBuwzJP7vgmqO9gpdUtc88BMFE81U+GxaaL6uqV49COsgAfMxd/EU gwLm1JUXh53UPnvi6PFg0x2sTDJrZGM= -----END CERTIFICATE-----Generated at Thu Aug 7 04:34:26 2025 by rpki-client