$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/290a3fd8-729f-3345-afb3-8ad7258b7193.roa File: 290a3fd8-729f-3345-afb3-8ad7258b7193.roa (raw, json) Hash identifier: KVuTvMsPU6vWSrQDyFSn559qJ+EnJCtv7v4AbvQksw4= Subject key identifier: 0D:A0:4B:1B:69:AC:8D:05:D8:A9:7A:ED:D2:3E:30:27:D4:D0:44:6E Certificate issuer: /CN=72be6912-a48b-441b-9ee6-94aa6da03275 Certificate serial: 010D0C9F4328584ACC2F423EA9AD8FF88B5B2360 Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/290a3fd8-729f-3345-afb3-8ad7258b7193.roa Signing time: Sat 09 Aug 2025 09:00:53 +0000 ROA not before: Sat 09 Aug 2025 09:00:53 +0000 ROA not after: Fri 07 Nov 2025 10:00:53 +0000 asID: 401879 IP address blocks: 216.180.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:2f:42:3e:a9:ad:8f:f8:8b:5b:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275 Validity Not Before: Aug 9 09:00:53 2025 GMT Not After : Nov 7 10:00:53 2025 GMT Subject: CN=0b79ce7f-2881-4d29-95c4-3aa7b8c76be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:20:b9:9c:30:93:78:33:b7:af:98:70:59: 69:3e:e4:ed:47:78:dc:74:06:dc:75:f2:87:ea:69: c7:19:d1:4c:2f:7c:92:5e:32:54:28:fe:6f:26:5c: 48:a2:bf:98:9f:b9:b0:d0:7f:f8:5b:1c:7c:3f:83: 57:ce:2a:a2:9f:f1:26:57:13:39:be:db:f1:b1:df: 48:4f:75:35:79:76:4a:b8:d9:f4:f6:c5:a7:c2:50: 1b:17:a0:d5:b3:9f:26:3d:32:2e:a6:7a:b7:8b:9b: 55:7f:8c:20:ed:78:6d:bb:88:73:98:23:80:8d:48: fa:97:09:6f:bd:c9:b3:8b:8c:22:03:6a:7d:1b:0b: d8:03:94:66:c0:30:68:a6:f2:c5:cf:cf:d7:12:fb: c9:b1:20:6a:38:4f:45:38:4d:d8:c7:a1:b9:bb:54: af:a4:51:9e:ec:0b:5c:22:46:e3:ce:d4:1a:11:55: 14:37:eb:cf:7f:35:79:7f:5a:47:51:07:d5:74:c4: 01:96:17:a9:79:65:e5:ad:31:32:69:a8:e6:ae:c7: e5:ae:55:d2:67:88:7c:f3:65:a6:ea:08:7e:3b:6e: c9:44:7b:2d:84:ee:b7:d5:63:c4:ba:0a:e1:31:b0: 6d:df:3a:3a:76:b5:ee:5c:71:cd:2d:81:d1:57:63: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A0:4B:1B:69:AC:8D:05:D8:A9:7A:ED:D2:3E:30:27:D4:D0:44:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/290a3fd8-729f-3345-afb3-8ad7258b7193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl X509v3 Authority Key Identifier: keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer sbgp-ipAddrBlock: critical IPv4: 216.180.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:90:34:cd:18:4c:d6:26:7b:2e:05:45:f3:93:c4:d5:06:d2: 02:39:c2:73:e8:3c:01:1f:18:7c:86:cd:c1:4f:9e:aa:c0:01: bf:32:8b:6a:b5:e1:42:4a:e1:a3:7a:75:25:cc:95:12:24:b5: 18:1b:4a:c8:ae:60:ed:86:c5:41:c8:77:68:d2:d6:85:7a:50: 9e:43:7c:c8:b5:a1:01:25:9d:ea:5b:2c:4f:d5:f1:30:58:c5: c3:9b:e6:81:ce:b1:57:a7:cd:aa:0f:1b:00:88:84:7f:21:ed: 5c:cc:c3:5d:fe:d6:49:a4:c1:2b:76:dd:3b:30:69:1f:5a:72: c9:e7:d7:2a:e5:c4:93:11:09:0a:d5:0d:45:43:0d:15:64:59: cf:89:12:91:87:b0:60:d1:78:12:8a:9d:0f:f1:99:b4:ec:3b: 0b:97:79:e2:72:0f:ec:c7:4e:a5:7b:89:90:6e:9f:a8:9a:a5: b8:e5:bf:a9:c8:f7:08:e6:68:f2:08:51:da:e2:29:99:66:b4: 26:31:61:d2:e6:4e:cb:8a:52:a9:fe:d4:f0:be:d2:2d:cb:2b: eb:61:27:9f:bd:bf:f0:a0:19:c0:14:44:40:fc:2f:c0:75:7a: 73:05:97:6d:4a:fc:27:d1:40:89:5e:07:09:04:e9:ba:22:79: 24:a9:24:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErML0I+qa2P+ItbI2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiZTY5MTItYTQ4Yi00NDFiLTllZTYtOTRhYTZkYTAz Mjc1MB4XDTI1MDgwOTA5MDA1M1oXDTI1MTEwNzEwMDA1M1owLzEtMCsGA1UEAxMk MGI3OWNlN2YtMjg4MS00ZDI5LTk1YzQtM2FhN2I4Yzc2YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10cguZwwk3gzt6+YcFlpPuTtR3jcdAbcdfKH 6mnHGdFML3ySXjJUKP5vJlxIor+Yn7mw0H/4Wxx8P4NXziqin/EmVxM5vtvxsd9I T3U1eXZKuNn09sWnwlAbF6DVs58mPTIupnq3i5tVf4wg7Xhtu4hzmCOAjUj6lwlv vcmzi4wiA2p9GwvYA5RmwDBopvLFz8/XEvvJsSBqOE9FOE3Yx6G5u1SvpFGe7Atc IkbjztQaEVUUN+vPfzV5f1pHUQfVdMQBlhepeWXlrTEyaajmrsflrlXSZ4h882Wm 6gh+O27JRHsthO631WPEugrhMbBt3zo6drXuXHHNLYHRV2PXEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2gSxtprI0F2Kl67dI+MCfU0ERuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83MmJl NjkxMi1hNDhiLTQ0MWItOWVlNi05NGFhNmRhMDMyNzUvMjkwYTNmZDgtNzI5Zi0z MzQ1LWFmYjMtOGFkNzI1OGI3MTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzJiZTY5MTItYTQ4Yi00NDFiLTll ZTYtOTRhYTZkYTAzMjc1LzcyYmU2OTEyLWE0OGItNDQxYi05ZWU2LTk0YWE2ZGEw MzI3NS5jcmwwHwYDVR0jBBgwFoAUoU1WbC8yzneHx9LMOrMYtGeb/IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83MmJlNjkxMi1hNDhiLTQ0MWItOWVlNi05NGFh NmRhMDMyNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGQNM0YTNYmey4FRfOTxNUG0gI5wnPoPAEfGHyGzcFPnqrAAb8yi2q1 4UJK4aN6dSXMlRIktRgbSsiuYO2GxUHId2jS1oV6UJ5DfMi1oQElnepbLE/V8TBY xcOb5oHOsVenzaoPGwCIhH8h7VzMw13+1kmkwSt23TswaR9acsnn1yrlxJMRCQrV DUVDDRVkWc+JEpGHsGDReBKKnQ/xmbTsOwuXeeJyD+zHTqV7iZBun6iapbjlv6nI 9wjmaPIIUdriKZlmtCYxYdLmTsuKUqn+1PC+0i3LK+thJ5+9v/CgGcAURED8L8B1 enMFl21K/CfRQIleBwkE6boieSSpJCE= -----END CERTIFICATE-----Generated at Tue Aug 12 22:39:55 2025 by rpki-client