$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa File: c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa (raw, json) Hash identifier: gvwRVtBLF73b3R894UsZGjmbSSirUZACYQQdgK4AlFk= Subject key identifier: 91:48:5C:88:F4:EC:9C:DB:95:DF:CF:3E:9B:B4:7C:BA:4B:58:07:99 Certificate issuer: /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Certificate serial: 010D0C9F4328584AC0163F30A0CA47B660EA4A80 Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 399629 IP address blocks: 72.5.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3f:30:a0:ca:47:b6:60:ea:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=b37cbbf0-7fc6-4918-ae20-8550753ee9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:2d:a6:0a:b2:e1:8f:32:bc:0d:ca:e2:68: a1:1d:21:31:d0:4d:9b:32:a9:7d:19:25:54:c4:52: a0:24:9f:7c:ec:85:41:16:20:ea:2c:01:eb:b6:f3: 8d:ba:5a:47:6c:bc:5f:36:0b:58:c6:14:a4:00:85: e2:53:04:df:9c:d6:3b:60:fb:38:6e:95:60:78:71: 78:d2:0a:ae:67:0d:d6:f4:ec:7c:d5:da:80:20:27: c8:4d:72:48:ef:90:44:16:95:c7:dd:29:b0:43:d8: 7f:21:0f:d9:21:49:7b:dd:9f:d2:97:40:a5:86:ed: 9a:e5:17:8c:9e:7c:34:07:ca:2a:42:c5:ca:d2:7f: 8e:c9:45:c8:83:02:12:07:68:36:75:a5:6b:75:26: 2e:0a:4c:76:de:95:0f:9d:d1:39:a0:5e:af:f8:61: 1c:8e:d9:36:56:1b:0f:cc:90:72:79:4d:f4:d7:65: 4a:39:50:9f:77:10:c1:e6:93:61:32:4f:07:a5:a6: f4:86:a1:d9:2b:08:f9:1b:5e:69:b0:74:d5:34:31: 93:62:27:1e:96:49:73:00:29:20:4e:1d:d1:16:18: 0f:73:d1:47:ed:4e:f4:3d:e7:97:dc:34:fb:1e:47: 0d:5f:b6:e1:4a:c7:0a:e8:93:4c:67:cd:f3:4c:d9: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:48:5C:88:F4:EC:9C:DB:95:DF:CF:3E:9B:B4:7C:BA:4B:58:07:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/c1cab7b4-572c-35b0-b6b6-fb2a86feece4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl X509v3 Authority Key Identifier: keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer sbgp-ipAddrBlock: critical IPv4: 72.5.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:54:1b:c1:cf:a2:0a:61:11:d1:cc:06:50:9c:44:71:ff:76: 00:b2:cb:40:8e:25:0a:ed:1c:a0:e7:33:38:37:7a:ca:39:20: ad:8e:82:a7:ae:04:db:7b:f1:4e:f6:29:3e:79:34:dc:98:8e: a9:5e:df:16:eb:21:ec:e3:68:a6:76:c2:96:d5:5d:8a:89:2b: c4:b1:d8:76:ae:82:1e:cc:e9:ab:a5:8c:9d:2a:e2:0b:a3:1a: b9:22:1d:b4:30:49:d0:03:14:0c:27:8a:d3:e5:81:62:ee:40: a2:71:1d:05:ff:33:ac:c5:23:64:a3:1b:67:8c:2e:63:59:9c: 4c:d5:1d:bc:fa:44:bb:c2:e2:1a:a6:ff:59:f3:d0:e4:be:46: f9:bc:6d:38:37:c8:95:3a:48:6c:5e:33:fd:50:8f:83:f2:e2: 55:49:f8:26:59:81:ba:a3:16:99:42:7a:e0:6f:08:30:25:2f: 4a:62:9a:c0:65:13:c3:0e:ab:2a:fb:94:3f:0e:9f:d3:d8:9f: 51:16:be:48:f7:93:54:be:54:82:e9:9d:1c:43:79:9d:de:51: 3b:eb:b0:c6:6a:ad:f4:43:5d:6d:8d:2c:94:9d:23:2f:ca:6b: 7e:41:9b:c5:50:b5:18:61:39:01:fa:cd:05:71:d5:a3:51:65: bf:71:93:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj8woMpHtmDqSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm MTAzMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjM3Y2JiZjAtN2ZjNi00OTE4LWFlMjAtODU1MDc1M2VlOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCgtpgqy4Y8yvA3K4mihHSEx0E2bMql9GSVU xFKgJJ987IVBFiDqLAHrtvONulpHbLxfNgtYxhSkAIXiUwTfnNY7YPs4bpVgeHF4 0gquZw3W9Ox81dqAICfITXJI75BEFpXH3SmwQ9h/IQ/ZIUl73Z/Sl0Clhu2a5ReM nnw0B8oqQsXK0n+OyUXIgwISB2g2daVrdSYuCkx23pUPndE5oF6v+GEcjtk2VhsP zJByeU3012VKOVCfdxDB5pNhMk8Hpab0hqHZKwj5G15psHTVNDGTYicelklzACkg Th3RFhgPc9FH7U70PeeX3DT7HkcNX7bhSscK6JNMZ83zTNmCCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFIXIj07Jzbld/PPpu0fLpLWAeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvYzFjYWI3YjQtNTcyYy0z NWIwLWI2YjYtZmIyYTg2ZmVlY2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4 Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSAUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZUG8HPogphEdHMBlCcRHH/dgCyy0COJQrtHKDnMzg3eso5IK2Ogqeu BNt78U72KT55NNyYjqle3xbrIezjaKZ2wpbVXYqJK8Sx2Haugh7M6auljJ0q4guj GrkiHbQwSdADFAwnitPlgWLuQKJxHQX/M6zFI2SjG2eMLmNZnEzVHbz6RLvC4hqm /1nz0OS+Rvm8bTg3yJU6SGxeM/1Qj4Py4lVJ+CZZgbqjFplCeuBvCDAlL0pimsBl E8MOqyr7lD8On9PYn1EWvkj3k1S+VILpnRxDeZ3eUTvrsMZqrfRDXW2NLJSdIy/K a35Bm8VQtRhhOQH6zQVx1aNRZb9xk+4= -----END CERTIFICATE-----Generated at Tue Aug 5 16:42:57 2025 by rpki-client