$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa File: 3f610126-c000-34a1-8bf7-08e6484877a2.roa (raw, json) Hash identifier: A97SOqdMo7Z78UZB8wBGcxEUBzhZl8Zd1xjVtkp6TQc= Subject key identifier: EA:5D:56:BC:7C:60:14:1E:1E:A1:41:41:35:92:44:49:28:F5:8E:64 Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F43285849E7ACFF211F86B52EABD5E980 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa Signing time: Mon 19 May 2025 12:34:07 +0000 ROA not before: Mon 19 May 2025 12:34:07 +0000 ROA not after: Sun 17 Aug 2025 12:34:07 +0000 asID: 22709 IP address blocks: 72.11.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ac:ff:21:1f:86:b5:2e:ab:d5:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: May 19 12:34:07 2025 GMT Not After : Aug 17 12:34:07 2025 GMT Subject: CN=a82d3aaa-7a52-42de-b504-1d8e7a83c9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:9a:ed:b0:76:30:65:54:d9:80:02:93:2c: 1b:56:4b:16:10:32:9f:50:30:6c:84:6b:46:92:56: c6:ff:01:f4:de:1c:55:b2:fa:e1:16:29:59:d8:01: e2:1b:0e:f0:25:24:01:09:96:3c:89:cb:3e:5e:2b: 2c:70:0b:7c:b7:1e:42:40:b2:f7:08:46:e8:ed:12: 58:a1:8d:59:b2:2b:4d:37:bf:9c:fc:58:6e:b6:64: 8e:b3:47:2d:bb:85:6a:79:bc:cf:a0:df:6a:11:f2: 6d:23:fe:30:b8:d1:84:3c:88:f4:a9:b3:95:7b:6c: da:ba:c4:3b:ad:28:24:a1:61:a3:3d:13:8c:7b:29: 43:71:ab:8b:69:a8:6a:d7:71:16:92:4b:18:a6:78: 43:3c:b9:19:51:20:01:5f:98:4b:df:f0:0b:96:e8: c3:a9:55:8b:94:9c:ce:35:29:5a:5e:22:0f:df:80: 40:50:29:5a:fa:78:dc:f9:20:a9:b8:9c:bb:54:5a: 7f:8f:cf:7e:0a:e2:ce:22:ab:77:b2:fc:3e:ed:a6: 7d:60:1c:49:c0:2b:c8:a5:8b:3e:70:9d:cd:b8:78: 74:5a:e6:67:0c:4a:37:56:1e:f0:af:93:a6:f6:ed: e2:c2:8c:e2:e9:67:8e:62:e5:22:2a:4c:2d:c7:ac: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5D:56:BC:7C:60:14:1E:1E:A1:41:41:35:92:44:49:28:F5:8E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/3f610126-c000-34a1-8bf7-08e6484877a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 72.11.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:24:08:9f:9d:26:fe:23:24:1f:4e:42:da:94:e7:e7:90:6e: 42:e6:bb:c1:bf:ba:be:61:6e:b8:b1:e7:6b:07:58:b9:d0:f2: 0d:bf:96:38:8c:60:a7:45:26:18:4d:37:83:b1:46:92:66:4f: 79:65:a2:25:a7:2a:d4:2a:a3:f9:8b:77:fb:8f:b3:86:b3:fd: 33:62:67:2c:74:04:f0:5e:25:eb:26:30:8b:53:bf:98:95:a0: 92:67:69:03:5a:3a:db:ea:53:44:ef:69:ab:90:b1:8a:59:17: 8b:9b:03:8e:8b:b6:b9:b9:ad:46:34:9b:b9:3e:43:d4:75:6f: a8:0b:0c:6b:fa:b3:9f:f7:d7:d3:d4:7b:d6:fe:2c:99:b6:0f: ae:d2:92:ba:94:a1:41:19:62:67:b6:a6:47:85:c4:15:45:b0: cd:56:70:07:a9:28:41:e3:4d:4f:31:2c:bb:74:13:97:db:98: 1e:f0:32:29:0c:6c:51:fe:5a:07:e4:50:80:f2:77:84:99:1b: 9a:b1:4f:08:61:85:d1:9f:b9:ce:f0:10:89:eb:c6:16:b4:4c: 2d:15:8a:99:fe:31:8c:ed:ac:30:bb:54:2b:ca:53:fd:61:18: 1b:f1:f5:67:70:bf:48:97:7e:c2:90:b1:d0:6f:0f:5e:4c:92: 39:68:3a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnrP8hH4a1LqvV6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDUxOTEyMzQwN1oXDTI1MDgxNzEyMzQwN1owLzEtMCsGA1UEAxMk YTgyZDNhYWEtN2E1Mi00MmRlLWI1MDQtMWQ4ZTdhODNjOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVqa7bB2MGVU2YACkywbVksWEDKfUDBshGtG klbG/wH03hxVsvrhFilZ2AHiGw7wJSQBCZY8ics+XisscAt8tx5CQLL3CEbo7RJY oY1ZsitNN7+c/FhutmSOs0ctu4VqebzPoN9qEfJtI/4wuNGEPIj0qbOVe2zausQ7 rSgkoWGjPROMeylDcauLaahq13EWkksYpnhDPLkZUSABX5hL3/ALlujDqVWLlJzO NSlaXiIP34BAUCla+njc+SCpuJy7VFp/j89+CuLOIqt3svw+7aZ9YBxJwCvIpYs+ cJ3NuHh0WuZnDEo3Vh7wr5Om9u3iwozi6WeOYuUiKkwtx6wXewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpdVrx8YBQeHqFBQTWSREko9Y5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvM2Y2MTAxMjYtYzAwMC0z NGExLThiZjctMDhlNjQ4NDg3N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYkCJ+dJv4jJB9OQtqU5+eQbkLmu8G/ur5hbrix52sHWLnQ8g2/ljiM YKdFJhhNN4OxRpJmT3lloiWnKtQqo/mLd/uPs4az/TNiZyx0BPBeJesmMItTv5iV oJJnaQNaOtvqU0TvaauQsYpZF4ubA46Ltrm5rUY0m7k+Q9R1b6gLDGv6s5/319PU e9b+LJm2D67SkrqUoUEZYme2pkeFxBVFsM1WcAepKEHjTU8xLLt0E5fbmB7wMikM bFH+WgfkUIDyd4SZG5qxTwhhhdGfuc7wEInrxha0TC0Vipn+MYztrDC7VCvKU/1h GBvx9Wdwv0iXfsKQsdBvD15MkjloOl8= -----END CERTIFICATE-----Generated at Wed Jun 18 05:32:36 2025 by rpki-client