$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa File: 7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa (raw, json) Hash identifier: 5clWWtcMDJqEucIfD1lj/U++mv1bxYlnr6wdNI6HdRU= Subject key identifier: F8:5D:A9:7D:92:09:62:7D:94:59:45:F6:82:C6:92:3E:CA:E6:4C:E1 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584A7A4B4602AD93D72EE5F5BF80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 394437 IP address blocks: 72.20.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:46:02:ad:93:d7:2e:e5:f5:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=182f8eb0-3e59-4c4f-bf7e-dac00952f3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:eb:32:31:80:69:fc:3c:52:08:a2:ce:2c:aa: cd:c8:6d:59:5d:78:bf:38:69:86:88:2c:a6:fe:39: c8:26:1e:1b:fc:bf:93:d1:78:c7:50:75:55:6e:91: 09:eb:89:a8:14:97:4e:06:ce:a6:85:36:08:23:1a: ab:45:79:ca:e5:d3:ff:d8:90:07:0a:f4:13:74:f2: ba:fe:b0:71:f3:14:1d:cb:55:b8:60:36:f2:ac:bf: f5:92:ef:c1:4d:10:c6:85:73:42:fc:68:17:6c:35: b0:e7:a8:12:46:e5:0d:08:dd:d6:98:45:f2:a6:5c: 56:91:f8:67:32:8a:b6:5f:2d:94:9f:86:35:fe:e0: 55:11:97:09:dc:95:7c:88:c5:1c:57:ef:e1:26:cf: d0:35:5d:68:78:50:02:82:89:79:8d:af:23:3f:31: 70:24:c9:f3:c7:f1:23:76:61:fa:dc:93:e9:d9:80: 4d:99:83:7c:76:c2:28:ab:33:01:89:33:46:42:0a: 14:ea:12:87:6f:3a:fa:9e:ce:41:d6:a6:0f:67:7e: b1:23:f1:9a:b5:db:91:de:60:d7:22:e9:a6:a4:38: 8b:46:1e:62:aa:be:1b:92:72:3a:36:7a:0d:a9:aa: 9f:9f:65:54:9d:9d:16:d0:43:b1:8e:c7:a2:6f:b2: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5D:A9:7D:92:09:62:7D:94:59:45:F6:82:C6:92:3E:CA:E6:4C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7ecb8e5d-b8f3-3922-a526-de371ecf4eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5c:e4:c3:6a:37:07:0d:c5:c9:30:78:75:6e:4f:0d:cf:3a: 79:a2:bd:61:14:b5:a5:a8:5b:da:6b:bf:3e:86:57:a5:8b:d2: df:4d:17:58:1c:12:e7:8b:ec:46:ab:5c:f9:31:c9:a7:5e:6e: 44:da:64:20:52:af:8c:2d:60:63:b8:39:40:b3:b1:cc:e0:94: 27:6e:23:69:07:4f:37:46:a5:0d:50:d7:09:a7:da:b9:c8:8f: ba:c9:f5:1b:19:aa:2c:49:7c:2d:30:f1:25:eb:96:28:4a:40: 83:49:52:53:e1:b6:61:74:20:b1:7e:b1:e7:50:81:a4:93:66: 4f:40:c5:0e:1e:d0:98:3c:4f:a7:b1:2f:a4:89:51:4c:b5:23: 78:ac:87:db:b1:f5:c1:62:86:69:a2:1f:22:58:6c:6b:cf:d3: 9d:ae:a4:92:1d:9a:9f:85:e2:ec:e5:09:b3:d2:c0:03:6a:1e: 78:95:ae:28:d1:74:61:36:30:03:c0:44:8f:76:c8:0d:da:47: 46:f4:08:1e:e9:49:5a:8f:7d:1f:3c:d4:c3:89:cc:40:0f:bf: 68:ae:45:df:9e:1a:33:0c:f9:03:bc:30:5f:8a:85:1c:6c:ed: 8e:a2:77:cc:9e:40:09:df:25:fe:81:71:c8:4c:08:1f:19:9f: 5f:d7:cd:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0YCrZPXLuX1v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MTgyZjhlYjAtM2U1OS00YzRmLWJmN2UtZGFjMDA5NTJmM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlesyMYBp/DxSCKLOLKrNyG1ZXXi/OGmGiCym /jnIJh4b/L+T0XjHUHVVbpEJ64moFJdOBs6mhTYIIxqrRXnK5dP/2JAHCvQTdPK6 /rBx8xQdy1W4YDbyrL/1ku/BTRDGhXNC/GgXbDWw56gSRuUNCN3WmEXyplxWkfhn Moq2Xy2Un4Y1/uBVEZcJ3JV8iMUcV+/hJs/QNV1oeFACgol5ja8jPzFwJMnzx/Ej dmH63JPp2YBNmYN8dsIoqzMBiTNGQgoU6hKHbzr6ns5B1qYPZ36xI/GatduR3mDX IummpDiLRh5iqr4bknI6NnoNqaqfn2VUnZ0W0EOxjseib7JfhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhdqX2SCWJ9lFlF9oLGkj7K5kzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvN2VjYjhlNWQtYjhmMy0z OTIyLWE1MjYtZGUzNzFlY2Y0ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtc5MNqNwcNxckweHVuTw3POnmivWEUtaWoW9prvz6GV6WL0t9NF1gc EueL7EarXPkxyadebkTaZCBSr4wtYGO4OUCzsczglCduI2kHTzdGpQ1Q1wmn2rnI j7rJ9RsZqixJfC0w8SXrlihKQINJUlPhtmF0ILF+sedQgaSTZk9AxQ4e0Jg8T6ex L6SJUUy1I3ish9ux9cFihmmiHyJYbGvP052upJIdmp+F4uzlCbPSwANqHniVrijR dGE2MAPARI92yA3aR0b0CB7pSVqPfR881MOJzEAPv2iuRd+eGjMM+QO8MF+KhRxs 7Y6id8yeQAnfJf6BcchMCB8Zn1/Xza8= -----END CERTIFICATE-----Generated at Thu Aug 7 02:04:44 2025 by rpki-client