$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa File: 420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa (raw, json) Hash identifier: LUIj4BXs5zJ/ox0ZUVBfPKl7oLA7JsLkXRaeU3mEHMo= Subject key identifier: 1A:14:12:80:00:3B:1F:49:2F:BE:73:B8:78:88:8C:96:7F:77:C5:C3 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584AADF1200B870A9146C5774680 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13638 IP address blocks: 72.11.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:20:0b:87:0a:91:46:c5:77:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=be4ede38-c8df-4e02-8d7a-cb58fe862a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:3c:43:8f:b9:cc:12:99:8e:8b:95:9e:93: fc:1f:35:ba:53:15:bf:df:74:ca:38:6a:19:a0:ba: 0d:71:be:16:52:fa:d8:26:20:03:15:3b:36:21:81: 58:14:6c:cd:cd:73:ad:96:3b:58:b7:15:e5:87:ab: ba:bd:7a:65:71:8a:d6:88:cc:99:df:cc:a6:69:fe: 50:34:d0:37:f8:86:26:43:5b:0c:bd:0a:5d:41:71: 23:59:71:aa:d3:d5:c1:3c:35:78:13:80:53:4f:28: c8:13:82:1a:86:b0:bc:a8:96:a3:43:0e:8d:e1:ca: 44:58:ac:01:93:29:f9:14:2b:69:45:94:13:48:ae: ab:51:38:c4:c2:2a:81:92:d5:8d:4c:30:ed:87:3e: e6:cc:ad:6e:01:4b:44:43:4a:96:8f:9a:87:c7:55: cf:81:ba:f5:e2:31:82:36:b6:de:50:c9:37:21:5e: 7a:af:4f:2a:48:67:da:8a:82:f9:e4:f2:9e:57:41: 07:ab:d1:57:51:83:88:34:ed:89:d1:56:5c:13:59: b1:37:f7:af:ff:d1:8f:4c:81:b4:33:b0:b1:fd:c1: 48:7a:bd:2a:24:65:f1:77:c6:b8:1e:39:d9:9b:26: d1:e7:b8:0e:ed:f0:6e:0b:3b:6f:cb:29:55:02:8c: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:14:12:80:00:3B:1F:49:2F:BE:73:B8:78:88:8C:96:7F:77:C5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/420d506b-4ddd-3286-8bd2-ef4707b07bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 72.11.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:09:24:5c:44:e3:6b:c9:31:ea:e3:45:3c:55:45:3f:0a:ec: 2c:b6:30:b6:1f:9d:5a:b7:c0:46:2e:8a:e4:c7:b3:f2:80:f2: 34:e2:64:50:8c:67:7f:71:a1:9e:62:1b:a1:02:1e:1d:81:87: b2:45:94:49:5a:66:ec:eb:9a:6f:6d:3c:fb:cb:db:7b:c6:63: 2c:95:a7:16:a8:7d:a0:17:6a:8a:24:bf:20:6d:d7:5e:78:bb: be:fb:48:a8:80:ba:ce:f1:84:21:c9:2e:12:cd:17:ab:f8:8a: 19:0d:27:42:dd:cc:7b:fb:a1:67:7e:f6:01:3a:47:fd:8e:ef: 65:2a:0b:32:07:96:c6:01:7a:15:95:05:2e:a4:13:8e:5a:c4: 23:df:73:c6:41:b6:fc:cc:2f:c1:8a:a4:64:30:46:f5:bc:9f: 0a:c7:6e:f7:61:18:b2:b2:c7:9c:c5:9d:c0:1c:e6:3c:37:75: ff:5d:1d:6f:ea:29:bf:6d:e4:c4:ed:42:f2:97:ba:7d:f3:fe: 7d:96:05:12:4f:39:05:4b:56:e1:e4:93:61:e6:be:b7:de:48: ae:4c:23:fe:cc:c6:79:53:00:60:a4:cc:33:79:c9:c9:64:2b: cd:81:47:a7:27:7a:c5:2d:68:68:c4:fe:f1:70:36:66:0b:1f: 63:eb:42:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SALhwqRRsV3RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YmU0ZWRlMzgtYzhkZi00ZTAyLThkN2EtY2I1OGZlODYyYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR88Q4+5zBKZjouVnpP8HzW6UxW/33TKOGoZ oLoNcb4WUvrYJiADFTs2IYFYFGzNzXOtljtYtxXlh6u6vXplcYrWiMyZ38ymaf5Q NNA3+IYmQ1sMvQpdQXEjWXGq09XBPDV4E4BTTyjIE4IahrC8qJajQw6N4cpEWKwB kyn5FCtpRZQTSK6rUTjEwiqBktWNTDDthz7mzK1uAUtEQ0qWj5qHx1XPgbr14jGC NrbeUMk3IV56r08qSGfaioL55PKeV0EHq9FXUYOINO2J0VZcE1mxN/ev/9GPTIG0 M7Cx/cFIer0qJGXxd8a4HjnZmybR57gO7fBuCztvyylVAow0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoUEoAAOx9JL75zuHiIjJZ/d8XDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvNDIwZDUwNmItNGRkZC0z Mjg2LThiZDItZWY0NzA3YjA3YmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMJJFxE42vJMerjRTxVRT8K7Cy2MLYfnVq3wEYuiuTHs/KA8jTiZFCM Z39xoZ5iG6ECHh2Bh7JFlElaZuzrmm9tPPvL23vGYyyVpxaofaAXaookvyBt1154 u777SKiAus7xhCHJLhLNF6v4ihkNJ0LdzHv7oWd+9gE6R/2O72UqCzIHlsYBehWV BS6kE45axCPfc8ZBtvzML8GKpGQwRvW8nwrHbvdhGLKyx5zFncAc5jw3df9dHW/q Kb9t5MTtQvKXun3z/n2WBRJPOQVLVuHkk2HmvrfeSK5MI/7MxnlTAGCkzDN5yclk K82BR6cnesUtaGjE/vFwNmYLH2PrQoo= -----END CERTIFICATE-----Generated at Fri Aug 8 20:54:57 2025 by rpki-client