$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa File: ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa (raw, json) Hash identifier: kStxDiwdBIIXK/JOYk3Kpi/2jYPaxJYO97+WRxEAvAw= Subject key identifier: E8:62:B2:BD:A2:2A:12:DF:E2:E1:99:CE:46:DE:81:6D:AA:43:B6:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584AADF131E2BB67250A42AE3080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 0 IP address blocks: 72.13.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:31:e2:bb:67:25:0a:42:ae:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=a805cc56-c048-4212-aa56-eb4b4ea25d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:62:7f:1c:0d:82:72:97:0f:9c:02:d0:95: af:c7:c8:a0:60:32:96:26:01:3e:d1:a8:26:01:95: d4:01:4b:b4:64:d8:3d:94:52:7f:a3:e1:5f:a4:d5: 7c:f4:8d:6b:19:3e:4f:25:69:c4:e0:89:5b:05:c1: b5:0c:cf:d7:bd:5d:2e:4c:fc:9c:14:2f:50:f2:fe: ad:cd:4c:02:a5:06:26:a1:f1:08:b4:40:5f:71:c1: ec:2d:d4:0b:ec:ea:52:00:b9:bb:4a:53:77:7d:fb: 09:bf:f0:45:4a:dd:5b:6a:3d:45:19:7c:ff:b1:98: 47:de:84:66:03:db:6e:7d:d3:46:c5:27:07:ac:29: 7c:87:8d:98:ed:30:76:5d:c2:88:78:1b:13:05:ee: 9e:62:75:4f:0b:db:c9:4e:ea:63:6e:48:ee:d7:f0: 66:7a:ba:4d:e6:ab:44:1e:22:fe:16:b8:eb:b5:25: c5:67:43:10:90:a0:ca:b4:e7:c6:a6:dc:be:5e:89: 65:5f:b0:63:27:cf:13:8c:65:d9:4b:31:59:90:96: 8f:f4:09:05:35:95:0c:f6:e0:c9:e3:a3:11:54:8b: bf:3f:c0:d4:46:33:c5:eb:75:18:ca:8a:34:7e:d1: d2:c9:c6:9f:b9:49:42:bb:c6:1b:be:24:46:ba:bb: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:62:B2:BD:A2:2A:12:DF:E2:E1:99:CE:46:DE:81:6D:AA:43:B6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec3a7ed3-c4df-3b82-a795-7f2c454a62f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 72.13.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a0:aa:1d:2a:9b:e9:08:3a:ed:17:7c:9d:56:81:1a:5a:17: e6:8e:53:18:33:be:5f:8a:a2:62:d9:c0:93:dc:30:42:35:c7: 84:83:dd:2f:b0:0b:77:25:1f:0d:33:38:a9:cb:c0:7e:22:02: 46:1b:12:60:4c:24:82:6a:7f:92:39:c1:ab:3a:c1:12:58:38: 51:26:e7:ae:51:b7:a4:21:fa:f8:0d:8c:4e:e1:52:ea:3d:2a: d7:e6:9f:24:47:63:64:57:2b:08:14:68:38:82:33:0d:89:e5: 60:7d:4c:5d:5b:96:84:ff:0d:f8:b4:cc:f6:85:5c:45:5d:a5: 36:c0:ca:bb:e9:ea:fe:7a:13:a9:d5:55:6a:e1:13:6c:6b:a2: 00:10:81:0d:ef:2a:07:a0:47:8e:e1:39:b4:7d:62:1b:27:e7: 6b:14:31:5c:a9:cd:c9:4f:27:03:22:c5:4f:2d:55:4f:36:74: 09:36:f6:0d:07:70:3e:bd:dd:40:64:ab:30:78:59:bf:79:2a: ff:aa:5b:15:0b:ff:4b:ed:56:ec:b6:56:52:50:d6:79:9b:7f: eb:cb:f5:50:65:21:ca:6f:da:62:e9:d9:ea:78:53:ab:aa:90: bb:f7:d3:4b:d9:96:37:58:11:da:bd:77:26:08:ca:d6:11:7f: 35:45:4d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8THiu2clCkKuMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YTgwNWNjNTYtYzA0OC00MjEyLWFhNTYtZWI0YjRlYTI1ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiZifxwNgnKXD5wC0JWvx8igYDKWJgE+0agm AZXUAUu0ZNg9lFJ/o+FfpNV89I1rGT5PJWnE4IlbBcG1DM/XvV0uTPycFC9Q8v6t zUwCpQYmofEItEBfccHsLdQL7OpSALm7SlN3ffsJv/BFSt1baj1FGXz/sZhH3oRm A9tufdNGxScHrCl8h42Y7TB2XcKIeBsTBe6eYnVPC9vJTupjbkju1/BmerpN5qtE HiL+FrjrtSXFZ0MQkKDKtOfGpty+XollX7BjJ88TjGXZSzFZkJaP9AkFNZUM9uDJ 46MRVIu/P8DURjPF63UYyoo0ftHSycafuUlCu8YbviRGurshGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhisr2iKhLf4uGZzkbegW2qQ7ZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWMzYTdlZDMtYzRkZi0z YjgyLWE3OTUtN2YyYzQ1NGE2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACugqh0qm+kIOu0XfJ1WgRpaF+aOUxgzvl+KomLZwJPcMEI1x4SD3S+w C3clHw0zOKnLwH4iAkYbEmBMJIJqf5I5was6wRJYOFEm565Rt6Qh+vgNjE7hUuo9 KtfmnyRHY2RXKwgUaDiCMw2J5WB9TF1bloT/Dfi0zPaFXEVdpTbAyrvp6v56E6nV VWrhE2xrogAQgQ3vKgegR47hObR9Yhsn52sUMVypzclPJwMixU8tVU82dAk29g0H cD693UBkqzB4Wb95Kv+qWxUL/0vtVuy2VlJQ1nmbf+vL9VBlIcpv2mLp2ep4U6uq kLv300vZljdYEdq9dyYIytYRfzVFTYY= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:14 2025 by rpki-client