$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa File: 1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa (raw, json) Hash identifier: nbIkTTlvGNOG1fPKOetud91sO6hjctENG7L3nbs4ij4= Subject key identifier: 70:44:BB:50:C5:1E:31:32:06:9B:3C:16:8D:30:19:43:FE:8A:FE:FF Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584AA85BB6F3EED4117899990080 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 54032 IP address blocks: 72.233.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b6:f3:ee:d4:11:78:99:99:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=895f7de6-5da1-49f0-b49a-a0802caeb888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:12:db:db:e6:a1:6e:99:17:77:6a:ab:52: 51:ca:c8:f5:74:0a:09:95:37:49:aa:23:b5:06:27: 3d:78:dd:29:69:92:5b:23:59:69:4d:db:91:88:16: ae:2e:03:5e:19:ce:b5:86:f9:44:9b:5f:cb:e1:81: a9:38:96:ce:81:c3:5b:3d:df:a9:a0:c2:b6:16:89: 88:c1:7d:34:17:7b:3c:a4:05:03:97:18:ef:f8:a0: 43:36:2c:ad:30:3d:ba:e0:9e:ff:58:c3:ac:89:cc: 75:c5:4e:a5:43:e2:e2:57:33:72:58:36:2f:22:39: 62:a7:41:ab:bc:31:e8:1c:7e:f7:32:53:c0:2c:3b: 84:6c:3f:8b:c9:de:da:a5:72:f2:a8:73:ff:77:7c: 1d:c7:f5:7e:7f:f8:c1:49:bf:62:0b:66:a1:0b:da: 6f:00:06:c3:5a:5b:d7:88:69:20:89:29:4e:56:dc: 7f:c9:27:f3:af:bd:30:28:24:55:fd:e5:80:fe:6a: 4d:21:b2:03:a4:34:5f:0b:22:be:15:89:1f:0f:cf: 32:78:05:0b:8d:ae:8e:c8:1b:98:aa:68:bc:5d:22: cc:a4:c7:20:26:f5:25:20:36:e9:62:43:a5:35:20: 37:e0:3f:22:d9:bb:1d:0e:14:05:76:1a:99:3e:e8: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:44:BB:50:C5:1E:31:32:06:9B:3C:16:8D:30:19:43:FE:8A:FE:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/1a5229b4-06b9-31c6-8c41-9ccc8d07627c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a1:7e:20:00:aa:27:be:e7:da:80:23:8b:d5:3e:97:4d:3a: ec:58:71:cb:ee:46:12:18:d5:ce:03:93:80:1c:52:21:d6:1d: d8:29:dd:93:7f:2d:94:3d:45:4b:34:08:56:e8:73:ac:d8:86: 8d:ed:8f:5a:19:d2:d5:c1:36:f5:10:11:29:74:44:e1:75:84: e0:95:4a:ed:6f:7c:13:ff:6b:22:31:ad:91:66:81:ba:91:24: 14:69:52:24:2f:86:8f:e8:63:cc:8d:97:e0:4b:f6:71:13:c4: 86:12:8b:09:1c:45:2e:a0:28:4a:af:fb:53:c3:66:0a:a6:87: 07:7f:5e:55:45:25:c2:e7:4d:7b:b9:f4:b8:73:eb:22:84:7b: 09:1c:11:15:af:f2:9e:f8:c1:90:46:9c:2e:3d:20:fb:05:b3: 4e:b6:33:5c:b2:68:da:85:4a:3a:5a:69:ac:2e:26:25:bc:c9: 29:33:ea:31:bf:34:75:93:3b:ee:46:d6:08:f9:7e:3b:d6:8b: f9:3c:24:84:b1:bc:77:dd:2d:ea:81:3f:a1:87:07:fd:da:71: 4d:a8:ef:fe:6f:41:3e:a8:2b:c7:2e:c8:9a:b8:f6:8f:3a:bd: e2:0a:57:d1:f1:3f:72:5e:36:83:f8:69:8e:7a:0b:1b:6d:d0: 5b:c7:4a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7bz7tQReJmZAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ODk1ZjdkZTYtNWRhMS00OWYwLWI0OWEtYTA4MDJjYWViODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/cS29vmoW6ZF3dqq1JRysj1dAoJlTdJqiO1 Bic9eN0paZJbI1lpTduRiBauLgNeGc61hvlEm1/L4YGpOJbOgcNbPd+poMK2FomI wX00F3s8pAUDlxjv+KBDNiytMD264J7/WMOsicx1xU6lQ+LiVzNyWDYvIjlip0Gr vDHoHH73MlPALDuEbD+Lyd7apXLyqHP/d3wdx/V+f/jBSb9iC2ahC9pvAAbDWlvX iGkgiSlOVtx/ySfzr70wKCRV/eWA/mpNIbIDpDRfCyK+FYkfD88yeAULja6OyBuY qmi8XSLMpMcgJvUlIDbpYkOlNSA34D8i2bsdDhQFdhqZPuiZDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBEu1DFHjEyBps8Fo0wGUP+iv7/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMWE1MjI5YjQtMDZiOS0z MWM2LThjNDEtOWNjYzhkMDc2MjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEahfiAAqie+59qAI4vVPpdNOuxYccvuRhIY1c4Dk4AcUiHWHdgp3ZN/ LZQ9RUs0CFboc6zYho3tj1oZ0tXBNvUQESl0ROF1hOCVSu1vfBP/ayIxrZFmgbqR JBRpUiQvho/oY8yNl+BL9nETxIYSiwkcRS6gKEqv+1PDZgqmhwd/XlVFJcLnTXu5 9Lhz6yKEewkcERWv8p74wZBGnC49IPsFs062M1yyaNqFSjpaaawuJiW8ySkz6jG/ NHWTO+5G1gj5fjvWi/k8JISxvHfdLeqBP6GHB/3acU2o7/5vQT6oK8cuyJq49o86 veIKV9HxP3JeNoP4aY56Cxtt0FvHSg4= -----END CERTIFICATE-----Generated at Mon Aug 4 18:27:24 2025 by rpki-client