$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json) Hash identifier: +0ND1zEdjlypUAvnUq7fGYcijy8mbKMRaop+mNfLt7c= Subject key identifier: A2:D4:8C:F9:BD:49:B0:77:FB:24:00:80:4B:B2:3D:AE:7C:58:06:1C Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584A331AF8AACDCB5F5D3B858080 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 11550 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:f8:aa:cd:cb:5f:5d:3b:85:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=c4bfc137-320b-4642-afd6-485e4dd3e1e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c8:45:96:e0:57:86:4e:07:8c:e1:70:1f:81: 7d:6a:a8:a9:a6:d7:38:e3:21:e5:f3:b2:d1:ef:83: 49:af:e5:cb:06:56:23:10:82:75:3c:e7:26:05:0a: b6:e3:c0:46:ce:9c:7b:c3:a9:c1:e3:1a:3f:2f:fd: 2f:e3:36:26:64:be:59:f7:13:f4:f6:a3:95:d5:24: d3:be:4d:cf:e5:09:a1:cc:a6:ca:8b:07:81:89:3d: f1:8a:f2:ed:df:76:d2:4c:6f:5f:54:5c:27:36:a1: 46:af:62:5b:71:ec:78:f9:99:38:74:27:71:69:76: 39:69:88:df:29:33:a9:fe:2c:73:c7:aa:68:b2:b4: 86:47:84:dd:04:6f:22:d2:a7:ca:15:b8:82:85:e9: 21:89:9a:48:70:36:12:e3:e7:df:58:36:cb:11:ac: 89:93:95:d3:7b:88:38:6f:82:40:22:b4:0e:53:7b: ce:79:91:f2:0f:96:60:da:2e:fd:ae:2a:50:3a:e1: 8f:a3:42:93:f4:a6:3b:32:a5:be:bd:f2:ba:69:55: 7c:9c:8f:1a:50:af:fc:0e:ec:b8:cc:27:bf:54:3c: 94:9b:17:0f:ca:49:9f:a9:3c:b5:3c:89:2c:26:67: 77:42:5f:cb:06:72:ad:02:4b:37:35:2f:cd:d7:3d: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D4:8C:F9:BD:49:B0:77:FB:24:00:80:4B:B2:3D:AE:7C:58:06:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:66:04:3b:2e:6a:d4:40:4d:30:a6:8a:a4:69:a1:57:29:50: fb:8d:90:26:0f:81:58:38:55:d3:f2:87:0c:55:12:66:7e:eb: 52:43:03:7a:ee:1e:88:30:d6:dc:d8:1f:d9:66:dd:8b:e4:5d: f6:0c:8e:6e:2c:bf:4a:63:00:20:e0:a0:59:14:ae:3b:84:44: 9f:dd:c0:74:87:89:fa:9e:2b:da:c2:71:8d:88:58:3d:b1:75: 3e:80:ee:19:52:62:c5:bd:4d:a9:08:b3:3d:4e:66:66:3e:58: 85:bc:27:02:aa:9f:5f:22:47:f2:1a:6e:5a:ce:14:f3:e9:15: 82:f4:f7:ab:92:66:fe:31:62:ea:39:6b:7a:99:79:76:13:3b: 96:50:f3:5c:b0:45:7f:c8:f2:65:44:1b:74:37:fc:aa:06:fa: 08:68:8e:c4:31:86:1f:4e:9a:be:6f:d4:9f:09:30:a1:ad:0c: 7c:96:c1:59:b9:77:07:2f:0e:20:1a:af:f0:a1:d3:25:09:98: fd:2a:74:72:51:f2:c6:ad:80:83:34:ae:16:52:80:b2:09:20: b6:8e:8a:2c:5f:5d:b1:e8:28:da:a2:25:08:01:8f:1b:04:0a: c7:cd:dd:57:2f:11:65:89:71:57:28:6b:fd:57:14:19:8e:23: b1:e2:ac:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGviqzctfXTuFgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YzRiZmMxMzctMzIwYi00NjQyLWFmZDYtNDg1ZTRkZDNlMWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8hFluBXhk4HjOFwH4F9aqipptc44yHl87LR 74NJr+XLBlYjEIJ1POcmBQq248BGzpx7w6nB4xo/L/0v4zYmZL5Z9xP09qOV1STT vk3P5QmhzKbKiweBiT3xivLt33bSTG9fVFwnNqFGr2Jbcex4+Zk4dCdxaXY5aYjf KTOp/ixzx6posrSGR4TdBG8i0qfKFbiChekhiZpIcDYS4+ffWDbLEayJk5XTe4g4 b4JAIrQOU3vOeZHyD5Zg2i79ripQOuGPo0KT9KY7MqW+vfK6aVV8nI8aUK/8Duy4 zCe/VDyUmxcPykmfqTy1PIksJmd3Ql/LBnKtAks3NS/N1z0PKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLUjPm9SbB3+yQAgEuyPa58WAYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZGZiODEwMWUtZWMyYS0z NmU1LThjYmUtNTc2YmI4YzEyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJmBDsuatRATTCmiqRpoVcpUPuNkCYPgVg4VdPyhwxVEmZ+61JDA3ru Hogw1tzYH9lm3YvkXfYMjm4sv0pjACDgoFkUrjuERJ/dwHSHifqeK9rCcY2IWD2x dT6A7hlSYsW9TakIsz1OZmY+WIW8JwKqn18iR/IablrOFPPpFYL096uSZv4xYuo5 a3qZeXYTO5ZQ81ywRX/I8mVEG3Q3/KoG+ghojsQxhh9Omr5v1J8JMKGtDHyWwVm5 dwcvDiAar/Ch0yUJmP0qdHJR8satgIM0rhZSgLIJILaOiixfXbHoKNqiJQgBjxsE CsfN3VcvEWWJcVcoa/1XFBmOI7HirGs= -----END CERTIFICATE-----Generated at Sun Jun 15 17:18:52 2025 by rpki-client