$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa File: 42695a1a-7905-32c3-8305-6a9c579ab1a0.roa (raw, json) Hash identifier: yP6D9vc29dAL0VV1lgEe7bChiePrDWLSrAJkj5HWwSk= Subject key identifier: ED:75:AC:7F:64:47:22:04:3B:BB:1B:6E:2F:8E:E5:83:30:75:5B:33 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584AA85BB096E812A997246F1300 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 54032 IP address blocks: 72.233.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b0:96:e8:12:a9:97:24:6f:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=38065527-eef1-48f6-8e5e-d1434e88824c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:79:73:8c:70:6c:f6:55:ad:12:ea:3b:18: 7c:9f:23:35:51:39:38:83:fd:18:80:03:a6:db:7d: e1:04:a3:ae:d5:81:06:31:d6:52:d0:6b:58:e5:57: a6:f9:eb:b4:12:b6:10:62:fb:73:52:ad:f7:86:94: 77:82:22:98:e0:1e:88:2b:05:42:e1:fe:00:15:84: db:91:b4:85:8e:77:38:4e:3f:7d:f0:c7:f0:4b:84: 8f:19:95:ac:ab:f1:b2:f7:80:a8:b8:80:f8:a2:1b: b6:a1:86:01:d7:d4:1c:7e:e1:42:ea:3b:b6:dc:11: 5a:35:65:c1:ba:c6:c4:74:a9:69:80:5a:1b:7a:0d: ee:2b:b5:e6:7e:3f:eb:21:5e:a0:a5:d7:eb:14:67: 3c:c0:c2:87:fe:7f:b6:0d:32:03:cb:53:ee:31:40: a9:70:7d:7a:7a:90:9c:90:a7:40:bf:bf:7a:94:72: 77:18:96:1f:45:77:76:bc:9c:ce:11:a7:ea:66:b0: d5:bc:e5:c4:9c:f7:c9:1b:7e:17:8a:fe:f2:63:74: c5:e5:dd:58:0d:4f:6f:d9:83:5b:f3:b5:3f:fa:5c: c0:e1:70:94:24:01:89:39:2e:84:13:ce:3a:e1:2d: 5b:73:db:a3:8e:01:89:e5:63:18:c5:71:2b:52:a7: e9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:75:AC:7F:64:47:22:04:3B:BB:1B:6E:2F:8E:E5:83:30:75:5B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/42695a1a-7905-32c3-8305-6a9c579ab1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e3:c5:8a:ac:97:98:c5:af:33:a1:0d:37:7e:8c:da:23:ea: 3c:e8:11:75:9f:82:6b:5f:7e:fe:e3:ea:e4:07:ea:3e:19:40: 2f:d3:6d:6b:e6:1a:88:7f:ee:3f:32:11:d8:7b:91:bd:60:00: fd:53:36:3c:2f:c1:64:9b:6f:c5:6d:74:2a:32:31:b3:c9:8c: bf:59:29:77:c9:4f:aa:ac:c5:e6:56:3c:4f:87:5e:fc:82:b7: 8f:72:de:39:14:f9:68:c9:b1:cb:f1:5b:ef:f8:87:ea:ed:60: 69:eb:26:7f:eb:6c:14:ce:35:dc:a9:5c:36:20:87:6c:b3:89: aa:63:68:13:80:c5:c1:bf:6f:8b:0e:21:e1:9c:44:bb:0a:3a: c9:5c:7a:28:d7:9e:6b:bc:15:e3:33:b4:53:6e:53:07:7f:df: 6e:ef:2d:86:2f:8b:75:4c:8a:77:04:56:87:12:ec:7a:83:0b: c3:6a:45:5a:be:5c:7b:fb:fc:8f:a4:da:d1:83:85:14:d4:43: 73:78:43:e6:f4:52:7a:41:b2:48:e3:22:42:cf:8c:4a:f7:c4: 96:7e:03:bd:b2:a0:99:99:f2:91:0a:8b:d5:53:44:61:ba:09: 39:10:62:27:5e:bc:3f:f0:94:17:41:44:c6:4a:7f:30:d2:6d: c9:bb:5e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7CW6BKplyRvEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk MzgwNjU1MjctZWVmMS00OGY2LThlNWUtZDE0MzRlODg4MjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgZ5c4xwbPZVrRLqOxh8nyM1UTk4g/0YgAOm 233hBKOu1YEGMdZS0GtY5Vem+eu0ErYQYvtzUq33hpR3giKY4B6IKwVC4f4AFYTb kbSFjnc4Tj998MfwS4SPGZWsq/Gy94CouID4ohu2oYYB19QcfuFC6ju23BFaNWXB usbEdKlpgFobeg3uK7Xmfj/rIV6gpdfrFGc8wMKH/n+2DTIDy1PuMUCpcH16epCc kKdAv796lHJ3GJYfRXd2vJzOEafqZrDVvOXEnPfJG34Xiv7yY3TF5d1YDU9v2YNb 87U/+lzA4XCUJAGJOS6EE8464S1bc9ujjgGJ5WMYxXErUqfpiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO11rH9kRyIEO7sbbi+O5YMwdVszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvNDI2OTVhMWEtNzkwNS0z MmMzLTgzMDUtNmE5YzU3OWFiMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSOmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/jxYqsl5jFrzOhDTd+jNoj6jzoEXWfgmtffv7j6uQH6j4ZQC/TbWvm Goh/7j8yEdh7kb1gAP1TNjwvwWSbb8VtdCoyMbPJjL9ZKXfJT6qsxeZWPE+HXvyC t49y3jkU+WjJscvxW+/4h+rtYGnrJn/rbBTONdypXDYgh2yziapjaBOAxcG/b4sO IeGcRLsKOslceijXnmu8FeMztFNuUwd/327vLYYvi3VMincEVocS7HqDC8NqRVq+ XHv7/I+k2tGDhRTUQ3N4Q+b0UnpBskjjIkLPjEr3xJZ+A72yoJmZ8pEKi9VTRGG6 CTkQYidevD/wlBdBRMZKfzDSbcm7XpE= -----END CERTIFICATE-----Generated at Mon Aug 4 18:36:38 2025 by rpki-client