$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa File: e15131cc-650e-3c36-9991-f449603d4fc4.roa (raw, json) Hash identifier: txF20yCHWggq9Kqk4+s1rnnjLBCsSZ+v7Lnb6wQddP4= Subject key identifier: BA:EA:D3:3D:E5:16:27:C1:1B:00:74:12:DE:FF:5B:90:26:2E:B8:CC Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584A9FFBAC1B16DD20D2F69AF034 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 21547 IP address blocks: 72.12.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:ac:1b:16:dd:20:d2:f6:9a:f0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=e387d4e0-44e6-4a3a-ab2c-88ae13ee0e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2b:4c:b9:4a:f0:39:a7:1b:97:7d:82:e0:d7: 4f:98:e5:67:03:ea:78:e5:bd:44:5f:d3:72:b3:80: a9:08:4e:b0:ca:21:eb:12:14:65:19:fe:e4:ca:a1: 06:a2:f7:ca:9a:86:fe:2d:73:3c:3f:e9:dd:d2:d8: 2c:92:16:bc:48:fb:42:b6:ab:9a:94:7a:1a:50:09: 26:aa:37:60:2c:28:e2:47:57:ee:9f:15:72:76:64: b7:9c:df:35:9d:77:4c:41:01:06:c3:c9:e6:90:63: ef:75:7e:2d:b5:e6:82:39:56:1a:11:59:48:2c:d8: 8a:62:38:36:37:eb:8f:07:b3:82:ca:96:f1:3c:94: 4e:fa:c2:b5:07:0c:de:7f:3f:33:ec:e7:f2:db:83: 4b:71:6e:de:06:db:09:5c:f6:cc:8e:d4:d5:22:8d: 1f:78:59:06:c3:43:9f:9f:41:08:18:e9:a5:6e:4d: 32:9b:99:c6:78:3d:2a:d5:b2:68:c3:77:ae:f6:56: eb:18:bc:a1:d7:ef:e9:b4:e7:62:ac:32:3c:16:25: 73:1c:f8:03:dd:72:e0:d1:b2:71:d0:86:21:cc:a5: 5b:81:36:50:2a:83:2c:2a:ea:83:9a:53:3a:f1:1b: bf:e9:2f:32:6f:f5:a7:33:eb:97:0c:4b:a5:5f:6c: 56:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EA:D3:3D:E5:16:27:C1:1B:00:74:12:DE:FF:5B:90:26:2E:B8:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/e15131cc-650e-3c36-9991-f449603d4fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 72.12.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:83:79:77:3f:67:96:be:5b:79:48:35:89:57:3b:8c:20:d1: 9e:b7:d0:ae:55:82:a2:da:9d:01:7d:a2:18:0a:9e:57:16:49: 32:36:70:26:f8:28:97:f4:d9:65:0b:62:82:33:f7:27:be:1b: fd:9e:9e:57:85:77:12:54:20:16:0a:0c:b5:17:e0:43:41:8b: 7b:c6:a4:1b:16:05:36:14:78:dc:65:74:f0:66:af:85:1f:d6: 8f:1f:c1:d1:28:13:3c:9b:51:e0:0d:b0:5d:3f:6f:a0:df:cf: b3:ec:18:8a:5b:3e:9d:75:01:b5:53:bc:9b:84:ba:a9:59:02: f4:57:88:5c:7e:99:67:6f:ec:23:55:8d:b3:70:09:e5:f6:bf: 1b:73:f4:7d:6d:09:ef:f6:a9:61:06:71:ad:2b:ce:f5:50:2d: d0:48:0b:54:13:a6:ae:96:78:f5:0d:1b:6d:73:23:c1:46:e9: 1c:d0:f6:3f:9b:3d:cd:72:2c:01:ba:2e:af:c2:c4:14:36:34: e0:7b:70:eb:a7:1b:4d:0b:1c:24:f7:39:54:ad:39:f3:3d:b5: d3:43:42:10:c8:8d:5e:21:7a:bc:bf:eb:e8:fc:88:62:3d:a0: 7f:f2:d0:ae:45:d9:28:b4:2e:6f:dd:80:9b:05:9f:28:f7:58: c2:bb:82:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6wbFt0g0vaa8DQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZTM4N2Q0ZTAtNDRlNi00YTNhLWFiMmMtODhhZTEzZWUwZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgitMuUrwOacbl32C4NdPmOVnA+p45b1EX9Ny s4CpCE6wyiHrEhRlGf7kyqEGovfKmob+LXM8P+nd0tgskha8SPtCtqualHoaUAkm qjdgLCjiR1funxVydmS3nN81nXdMQQEGw8nmkGPvdX4tteaCOVYaEVlILNiKYjg2 N+uPB7OCypbxPJRO+sK1Bwzefz8z7Ofy24NLcW7eBtsJXPbMjtTVIo0feFkGw0Of n0EIGOmlbk0ym5nGeD0q1bJow3eu9lbrGLyh1+/ptOdirDI8FiVzHPgD3XLg0bJx 0IYhzKVbgTZQKoMsKuqDmlM68Ru/6S8yb/WnM+uXDEulX2xWvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrq0z3lFifBGwB0Et7/W5AmLrjMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvZTE1MTMxY2MtNjUwZS0z YzM2LTk5OTEtZjQ0OTYwM2Q0ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiDeXc/Z5a+W3lINYlXO4wg0Z630K5VgqLanQF9ohgKnlcWSTI2cCb4 KJf02WULYoIz9ye+G/2enleFdxJUIBYKDLUX4ENBi3vGpBsWBTYUeNxldPBmr4Uf 1o8fwdEoEzybUeANsF0/b6Dfz7PsGIpbPp11AbVTvJuEuqlZAvRXiFx+mWdv7CNV jbNwCeX2vxtz9H1tCe/2qWEGca0rzvVQLdBIC1QTpq6WePUNG21zI8FG6RzQ9j+b Pc1yLAG6Lq/CxBQ2NOB7cOunG00LHCT3OVStOfM9tdNDQhDIjV4hery/6+j8iGI9 oH/y0K5F2Si0Lm/dgJsFnyj3WMK7ggg= -----END CERTIFICATE-----Generated at Thu Aug 7 20:28:06 2025 by rpki-client