$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57dec78d-5a0c-3e0d-bc8b-60990e30a59a.roa File: 57dec78d-5a0c-3e0d-bc8b-60990e30a59a.roa (raw, json) Hash identifier: 7xm5s9Q7LefeDV9xgO72rOsiFQpjEZoMzCdNfKlQ8Yw= Subject key identifier: 70:37:3B:B5:98:49:D1:19:3B:F6:5B:B8:69:16:B8:F9:54:EE:F8:49 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584A9E9654981E56824C19B1DEC0 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57dec78d-5a0c-3e0d-bc8b-60990e30a59a.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 33363 IP address blocks: 71.44.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:54:98:1e:56:82:4c:19:b1:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=e8d28ed2-4939-4b88-8850-1ab3b232305d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:54:9f:22:67:16:1d:3f:25:d8:12:39:cf: 3b:8b:87:8e:9f:7f:83:49:f6:7d:80:72:d8:a8:45: ae:35:88:13:ba:62:60:1e:55:8d:99:f1:24:ae:da: 8c:7b:50:2a:62:d7:c3:f9:ca:fb:6d:42:91:77:bb: 32:1b:43:76:08:cf:46:a7:96:9c:35:61:0a:dc:2b: 50:9d:f1:61:54:9e:8c:50:4a:89:4b:1b:9f:20:87: 1e:62:7c:c7:f4:65:75:ec:82:1d:ff:8a:95:94:41: 9b:36:7e:2f:4a:cc:d8:66:a3:c2:d4:df:7b:1e:cd: 55:ca:21:79:0d:d1:b8:41:68:94:9f:3f:31:87:6e: 32:d7:59:84:9b:ec:29:3a:a5:61:50:92:f1:48:e0: 42:c4:8e:11:a1:74:b5:6d:b5:65:70:d9:2a:15:4c: 22:ca:6b:e6:c9:db:c6:c9:57:ff:9b:48:1b:04:df: e8:49:40:10:d5:1b:36:1f:74:26:9e:13:f9:75:7b: c2:4f:d6:49:0a:78:9c:a7:3a:44:5c:1a:5d:93:de: 9a:f9:59:c3:65:d5:87:61:a1:6a:cf:c2:7b:7d:e2: 50:fd:99:73:38:91:d9:e0:dd:57:15:88:0b:9a:53: c1:94:3b:32:60:e2:a3:63:97:75:53:fd:f0:5f:23: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:37:3B:B5:98:49:D1:19:3B:F6:5B:B8:69:16:B8:F9:54:EE:F8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/57dec78d-5a0c-3e0d-bc8b-60990e30a59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:de:5c:c1:aa:5c:ba:80:39:e3:1c:cf:07:d4:c2:94:e9:8b: 7a:5c:28:fe:a5:d6:4c:0c:ef:04:1c:a1:a5:65:d3:83:b2:8d: cc:f9:c6:d1:d6:9d:f8:f8:5c:84:f4:13:67:dc:83:91:41:06: 95:d5:c0:ab:66:ac:e1:99:4c:63:fb:ac:75:7c:0e:b9:8b:f4: d8:26:74:96:cb:fb:71:e6:2b:67:73:98:ea:8e:40:cf:99:90: 5d:d9:a6:7e:4c:30:e2:86:66:19:52:c8:a2:29:15:3e:61:28: c9:9a:71:25:2a:0e:80:b2:11:b1:fc:fa:a8:b3:cf:e7:fd:dc: 6b:5a:ea:f0:e6:96:9a:3d:fd:8f:a9:0d:44:c3:e8:34:84:96: 97:ff:56:16:67:aa:d9:de:c4:4e:7a:57:ce:a8:7e:2c:bd:20: c8:a7:bb:7c:45:2f:d9:83:e0:54:a2:f6:09:2b:34:21:8e:b1: f4:15:55:25:b7:2e:41:d7:20:2c:c2:25:7e:f6:14:39:c2:49: 27:37:bc:6b:1a:b3:14:0a:be:0f:a7:34:ca:ad:56:93:8a:b5: a5:8d:17:39:08:8c:ed:36:8e:c8:a8:b9:ee:02:49:b6:41:8d: 28:8f:58:3c:67:cd:91:a5:6b:5c:9e:27:8b:de:e8:19:33:54: 5b:82:fd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqellSYHlaCTBmx3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk ZThkMjhlZDItNDkzOS00Yjg4LTg4NTAtMWFiM2IyMzIzMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtutUnyJnFh0/JdgSOc87i4eOn3+DSfZ9gHLY qEWuNYgTumJgHlWNmfEkrtqMe1AqYtfD+cr7bUKRd7syG0N2CM9Gp5acNWEK3CtQ nfFhVJ6MUEqJSxufIIceYnzH9GV17IId/4qVlEGbNn4vSszYZqPC1N97Hs1VyiF5 DdG4QWiUnz8xh24y11mEm+wpOqVhUJLxSOBCxI4RoXS1bbVlcNkqFUwiymvmydvG yVf/m0gbBN/oSUAQ1Rs2H3QmnhP5dXvCT9ZJCnicpzpEXBpdk96a+VnDZdWHYaFq z8J7feJQ/ZlzOJHZ4N1XFYgLmlPBlDsyYOKjY5d1U/3wXyMsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA3O7WYSdEZO/ZbuGkWuPlU7vhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNTdkZWM3OGQtNWEwYy0z ZTBkLWJjOGItNjA5OTBlMzBhNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRyxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFneXMGqXLqAOeMczwfUwpTpi3pcKP6l1kwM7wQcoaVl04Oyjcz5xtHW nfj4XIT0E2fcg5FBBpXVwKtmrOGZTGP7rHV8DrmL9NgmdJbL+3HmK2dzmOqOQM+Z kF3Zpn5MMOKGZhlSyKIpFT5hKMmacSUqDoCyEbH8+qizz+f93Gta6vDmlpo9/Y+p DUTD6DSElpf/VhZnqtnexE56V86ofiy9IMinu3xFL9mD4FSi9gkrNCGOsfQVVSW3 LkHXICzCJX72FDnCSSc3vGsasxQKvg+nNMqtVpOKtaWNFzkIjO02jsioue4CSbZB jSiPWDxnzZGla1yeJ4ve6BkzVFuC/Qo= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:24 2025 by rpki-client