$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58426963-8e9f-3d0f-bef2-b544d3e74968.roa File: 58426963-8e9f-3d0f-bef2-b544d3e74968.roa (raw, json) Hash identifier: t6eX0dLGtSyrBK5BQSQKhQ2w+48N+KOV+RNoiiy2Q/U= Subject key identifier: 06:88:93:1C:36:28:B1:47:8F:CF:77:B5:13:10:2C:91:A9:C5:2E:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AB220C80EBAC38DAD8F026640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58426963-8e9f-3d0f-bef2-b544d3e74968.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 0 IP address blocks: 72.13.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:c8:0e:ba:c3:8d:ad:8f:02:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=7dfaa930-672c-4d0d-9957-03e40fecef05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:eb:25:5a:d6:af:48:5f:60:5b:64:39:22: bd:d7:13:23:86:6a:bf:30:a5:0f:61:03:4c:76:e9: 52:37:12:83:56:ea:62:97:76:0a:a0:23:75:ee:56: 7d:bc:23:6c:c5:e6:e0:e4:43:68:2d:eb:7a:5d:9f: 77:f6:fc:08:b0:1e:79:fb:c3:7d:c9:eb:af:be:74: 20:00:3c:7e:77:5a:37:f3:bb:8d:f7:d2:0e:2d:52: c7:f1:d0:92:af:8f:04:ed:cd:24:be:84:20:b9:5e: 0a:16:fe:0a:e4:10:7c:7b:d2:b5:dd:75:9d:9a:1e: 86:de:b3:1a:59:e8:a0:b4:06:e3:f9:9e:45:c3:3a: 46:8f:06:11:d4:e4:7a:6c:2f:09:f9:48:e1:a6:ea: e0:be:f2:11:ad:21:26:3f:6e:0a:3d:2f:02:47:49: 1c:bd:d6:0d:66:9e:e2:eb:d5:4a:0d:a8:9b:2d:9b: 73:b3:96:8b:49:e9:a9:fd:f0:8b:f3:32:cf:2c:ab: f7:c2:77:a6:1b:a2:8f:14:43:06:0e:16:88:f9:f9: b3:f1:fc:b0:05:eb:26:ec:e3:64:14:04:ed:e5:4a: e7:80:4c:10:6c:65:cb:3e:86:be:21:7d:31:5b:49: 9e:65:c7:83:a4:e6:64:d8:2d:1d:89:17:09:1d:1d: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:88:93:1C:36:28:B1:47:8F:CF:77:B5:13:10:2C:91:A9:C5:2E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58426963-8e9f-3d0f-bef2-b544d3e74968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:60:2d:2d:d1:a7:da:b6:4a:57:f6:79:01:2f:15:20:6b:16: 8e:f4:9d:3e:d8:7b:1a:5e:1b:2c:7e:c1:41:bd:dd:56:bf:91: be:71:16:d5:78:ec:ac:38:65:62:34:c6:53:e3:1b:04:cd:70: ca:50:d5:c7:9e:1a:41:4c:5b:6f:bf:39:bc:3a:d0:4c:4b:8b: 8a:9c:44:58:8b:11:51:af:69:00:91:45:26:32:9f:a8:0b:e4: 20:19:23:f6:85:73:df:62:c5:38:28:37:6d:36:a0:bc:a6:ae: 6e:5e:2c:23:44:dc:ad:18:8f:a6:aa:db:56:6b:1d:bf:fb:84: dc:90:4b:d3:9f:60:ce:d7:e7:48:d2:fb:d8:ca:9c:79:ce:56: 51:65:87:bd:14:4c:53:6a:a7:ad:dc:bc:8e:90:3c:87:06:75: 23:51:0b:38:8c:13:7a:11:25:e6:46:f7:af:f1:3d:d0:f2:92: a6:c8:a7:0a:16:0b:78:08:cb:f1:32:be:c4:10:18:93:dc:a3: b7:94:5f:2c:55:c1:f7:81:1e:0f:ba:44:5d:b1:49:43:43:46: a1:88:a9:8a:63:db:43:f3:dc:71:f9:4f:ab:e6:f1:d3:66:17: e1:50:dd:a4:05:31:b1:73:2c:28:50:de:cc:17:78:a1:4f:2f: e3:db:da:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMgOusONrY8CZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2RmYWE5MzAtNjcyYy00ZDBkLTk5NTctMDNlNDBmZWNlZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWnrJVrWr0hfYFtkOSK91xMjhmq/MKUPYQNM dulSNxKDVupil3YKoCN17lZ9vCNsxebg5ENoLet6XZ939vwIsB55+8N9yeuvvnQg ADx+d1o387uN99IOLVLH8dCSr48E7c0kvoQguV4KFv4K5BB8e9K13XWdmh6G3rMa WeigtAbj+Z5FwzpGjwYR1OR6bC8J+UjhpurgvvIRrSEmP24KPS8CR0kcvdYNZp7i 69VKDaibLZtzs5aLSemp/fCL8zLPLKv3wnemG6KPFEMGDhaI+fmz8fywBesm7ONk FATt5UrngEwQbGXLPoa+IX0xW0meZceDpOZk2C0diRcJHR3IHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaIkxw2KLFHj893tRMQLJGpxS5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTg0MjY5NjMtOGU5Zi0z ZDBmLWJlZjItYjU0NGQzZTc0OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVgLS3Rp9q2Slf2eQEvFSBrFo70nT7YexpeGyx+wUG93Va/kb5xFtV4 7Kw4ZWI0xlPjGwTNcMpQ1ceeGkFMW2+/Obw60ExLi4qcRFiLEVGvaQCRRSYyn6gL 5CAZI/aFc99ixTgoN202oLymrm5eLCNE3K0Yj6aq21ZrHb/7hNyQS9OfYM7X50jS +9jKnHnOVlFlh70UTFNqp63cvI6QPIcGdSNRCziME3oRJeZG96/xPdDykqbIpwoW C3gIy/EyvsQQGJPco7eUXyxVwfeBHg+6RF2xSUNDRqGIqYpj20Pz3HH5T6vm8dNm F+FQ3aQFMbFzLChQ3swXeKFPL+Pb2sE= -----END CERTIFICATE-----Generated at Wed Aug 6 04:06:01 2025 by rpki-client