$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa File: f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa (raw, json) Hash identifier: bmYZnWmEhEdeXJwlVyTpeh0nDR4QmDSNTIYccA8ehBw= Subject key identifier: 84:D0:58:60:C5:5C:B8:A9:02:23:9B:20:B0:6E:AC:4C:F7:2B:33:93 Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Certificate serial: 010D0C9F4328584AA85BB6DF4B74ED7D70C54B40 Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 54032 IP address blocks: 72.233.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b6:df:4b:74:ed:7d:70:c5:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=4a4d6a99-a09c-465b-b79a-74607bb93311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:84:e6:b3:38:3a:f7:0f:92:7f:4b:d8:5e: 38:99:00:51:5b:cb:82:ff:4e:75:6b:e5:6e:16:15: 58:46:d4:8c:e7:37:0b:49:a8:b2:d9:ae:42:63:bf: 19:1f:17:78:ba:a0:02:ad:cc:a6:de:e0:dc:5c:f2: 0f:67:6f:77:ab:b4:35:7f:17:78:f7:4f:35:7c:bb: f1:34:e9:d4:bd:8c:6e:59:7b:e3:59:c8:cd:c3:ed: bf:f6:be:63:23:f5:d5:72:4a:da:b2:ae:c9:0c:d7: 7a:a0:b4:a4:81:6c:b6:0e:b1:d4:72:7d:ee:90:a5: 21:5e:22:ce:b0:47:81:5a:63:5b:18:34:c8:2e:1e: 51:bf:40:1f:f1:cf:69:e4:d0:7f:26:97:7b:94:e8: 3f:76:0f:cd:55:8d:7a:3a:59:3a:4a:e1:b9:7d:3c: 7a:a7:b4:f5:10:9c:7d:c4:aa:50:7b:ab:29:97:bf: 09:b0:fb:d5:db:09:da:1a:0d:5a:2b:f3:34:08:36: 22:c2:8f:c5:94:8d:91:73:b4:55:23:f9:0c:26:a9: c7:21:e8:88:2b:c4:d7:38:16:c2:5a:4e:79:d0:f7: 80:73:fe:13:4b:4b:76:b7:86:49:95:e2:82:f9:e7: 61:ed:e5:e0:aa:90:db:53:90:12:d7:49:b1:5c:c9: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:58:60:C5:5C:B8:A9:02:23:9B:20:B0:6E:AC:4C:F7:2B:33:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/f9ef45c4-b067-3aba-ad8c-9697f3f7c1d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl X509v3 Authority Key Identifier: keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer sbgp-ipAddrBlock: critical IPv4: 72.233.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2e:63:a7:3c:0f:d4:e9:36:8e:ef:b4:ea:b3:86:48:c0:bb: c8:29:90:c9:89:5e:03:13:da:6b:e2:e0:a7:71:45:89:6d:eb: a0:8d:e5:03:bc:df:29:61:0d:19:6c:ab:cc:a6:d7:90:f7:fd: 09:7c:53:b6:c2:75:aa:22:b1:9e:d1:3b:45:1e:ab:85:39:8a: 01:b1:af:a5:47:7c:cf:e5:3c:4d:32:56:dc:10:81:47:8d:56: 13:61:b7:02:33:1b:43:b2:cb:d8:86:07:4e:b3:72:3e:dc:de: 6a:46:3b:f2:72:86:e7:48:f8:bc:9a:c6:43:98:cc:56:a0:e1: 69:f0:a3:e1:4e:8a:ea:4f:19:5e:f0:18:69:c2:f7:d7:bb:14: a2:e1:b6:c6:8c:a8:6e:4c:b4:1f:9c:0c:1d:ef:c6:47:d4:ef: bc:7c:a8:19:e3:93:bd:59:e6:dd:10:02:44:49:35:3d:79:a5: ce:5f:a3:45:cf:e1:87:2d:cb:26:68:94:47:13:9c:87:79:ea: 51:b7:db:6c:08:a8:df:34:31:26:b1:d1:ca:80:cf:a9:e6:e4: 20:16:e9:86:1e:9c:f4:43:c8:ba:b7:4b:d8:49:e7:b4:3d:2a: 43:b9:93:6a:a5:60:65:37:a5:1a:e8:e2:d7:55:e4:4d:f3:40: eb:26:b6:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7bfS3TtfXDFS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMz NzNmMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk NGE0ZDZhOTktYTA5Yy00NjViLWI3OWEtNzQ2MDdiYjkzMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCSE5rM4OvcPkn9L2F44mQBRW8uC/051a+Vu FhVYRtSM5zcLSaiy2a5CY78ZHxd4uqACrcym3uDcXPIPZ293q7Q1fxd49081fLvx NOnUvYxuWXvjWcjNw+2/9r5jI/XVckrasq7JDNd6oLSkgWy2DrHUcn3ukKUhXiLO sEeBWmNbGDTILh5Rv0Af8c9p5NB/Jpd7lOg/dg/NVY16Olk6SuG5fTx6p7T1EJx9 xKpQe6spl78JsPvV2wnaGg1aK/M0CDYiwo/FlI2Rc7RVI/kMJqnHIeiIK8TXOBbC Wk550PeAc/4TS0t2t4ZJleKC+edh7eXgqpDbU5AS10mxXMly8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITQWGDFXLipAiObILBurEz3KzOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lOWJi YjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvZjllZjQ1YzQtYjA2Ny0z YWJhLWFkOGMtOTY5N2YzZjdjMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTliYmIwNmEtZTc1Yi00MWNiLWI5 ZGEtMmNiMjhmNGMzNzNmL2U5YmJiMDZhLWU3NWItNDFjYi1iOWRhLTJjYjI4ZjRj MzczZi5jcmwwHwYDVR0jBBgwFoAUFO956WnzBTifjFrePYU31ZjFdQswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2Iy OGY0YzM3M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESOmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIuY6c8D9TpNo7vtOqzhkjAu8gpkMmJXgMT2mvi4KdxRYlt66CN5QO8 3ylhDRlsq8ym15D3/Ql8U7bCdaoisZ7RO0Ueq4U5igGxr6VHfM/lPE0yVtwQgUeN VhNhtwIzG0Oyy9iGB06zcj7c3mpGO/JyhudI+LyaxkOYzFag4Wnwo+FOiupPGV7w GGnC99e7FKLhtsaMqG5MtB+cDB3vxkfU77x8qBnjk71Z5t0QAkRJNT15pc5fo0XP 4YctyyZolEcTnId56lG322wIqN80MSax0cqAz6nm5CAW6YYenPRDyLq3S9hJ57Q9 KkO5k2qlYGU3pRro4tdV5E3zQOsmtsc= -----END CERTIFICATE-----Generated at Mon Aug 4 18:14:34 2025 by rpki-client