$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa File: 7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa (raw, json) Hash identifier: fowzZrUqsSF/LvIF0WDpRmT8bo59MwbGWEJRI4zIa4o= Subject key identifier: 1D:C8:60:A2:9D:32:61:CD:ED:4D:EE:EB:65:88:4F:36:1C:1E:29:8E Certificate issuer: /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Certificate serial: 010D0C9F43285849E7AD294C847D14225D7EC980 Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa Signing time: Mon 19 May 2025 12:34:27 +0000 ROA not before: Mon 19 May 2025 12:34:27 +0000 ROA not after: Sun 17 Aug 2025 12:34:27 +0000 asID: 22709 IP address blocks: 72.11.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ad:29:4c:84:7d:14:22:5d:7e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7 Validity Not Before: May 19 12:34:27 2025 GMT Not After : Aug 17 12:34:27 2025 GMT Subject: CN=715317a5-1dfa-4324-9f91-c4c82567ad14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:6b:e2:4e:46:f1:95:a7:9a:2a:a4:cc:fa: 97:86:7a:bf:ec:fa:0d:01:27:f0:39:9a:16:7a:ca: 72:f3:f2:a8:d4:fe:c2:42:1d:56:7b:d6:9c:05:4d: a6:4d:53:5d:8d:71:d0:0f:4b:95:81:c9:0b:a5:51: 30:83:fb:f3:13:5c:8d:95:c0:9d:45:91:c7:de:05: 77:3c:4a:a0:27:77:94:d2:b3:ad:ed:cd:a3:01:93: be:23:e1:75:1a:8e:49:4b:0d:63:7e:56:d5:84:8b: 3c:b2:a7:9f:9d:98:0f:ef:de:66:d4:75:68:c9:37: d3:d6:68:09:fa:7f:0a:a4:a4:30:ca:07:c6:ca:b1: 76:3b:ce:e5:25:ac:3b:95:48:30:2e:3b:23:30:e6: cb:39:84:32:18:88:4c:d7:55:31:81:d7:26:1d:c1: 86:57:8a:b5:67:bb:8e:2a:8b:22:42:c5:7a:55:b1: ab:ad:08:a7:cc:4d:6c:3e:8f:8a:c8:90:b7:66:23: d3:a6:50:13:7e:c1:d5:6e:b8:7c:ad:4f:92:74:e2: 7c:4c:ca:d2:ce:4d:81:f2:05:3d:aa:4f:b7:e0:2e: b9:9a:c8:5d:ff:ac:0b:3c:ec:34:ec:3d:4d:f4:97: a3:f8:51:33:bf:a8:f3:b2:bb:73:a3:0c:eb:db:be: 13:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C8:60:A2:9D:32:61:CD:ED:4D:EE:EB:65:88:4F:36:1C:1E:29:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7fa6a004-4a51-39dc-9216-c1cf65f856c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl X509v3 Authority Key Identifier: keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer sbgp-ipAddrBlock: critical IPv4: 72.11.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:36:6e:dc:65:c8:ff:27:f7:04:a1:ff:f6:49:00:15:22:49: a4:55:01:53:e9:bd:1b:56:bc:a6:49:a2:4d:70:0f:19:57:84: 34:19:0e:c2:2e:ee:db:9e:27:a7:d4:1e:ef:0d:cc:39:05:7d: c7:64:f8:55:12:f4:79:5e:6b:b9:0f:cc:92:0f:d2:5c:85:cf: 50:3a:2a:c2:5f:5f:b2:be:9c:ef:82:59:63:78:31:75:02:2d: b2:fc:df:93:83:6b:a8:06:42:f3:ad:67:e9:ad:03:18:4b:fa: a7:d9:5d:74:31:41:ee:62:24:ac:1f:95:91:6f:f0:9e:54:9e: b0:6b:4a:1f:60:4c:ba:b7:0a:11:a0:db:5a:ba:88:2d:5c:29: 4e:2e:58:5c:97:9c:d6:15:d7:20:aa:32:31:3c:8d:f1:7d:eb: 21:5a:f1:4e:ab:e0:f7:c7:25:04:68:40:1b:62:01:b6:db:70: c6:27:04:5e:9a:03:e5:ca:91:31:f9:ff:57:c0:a8:7c:ca:2d: aa:87:cb:6a:72:a5:4b:21:8f:fa:e5:f3:d6:7e:cd:5b:ce:5b: 36:8e:2c:5c:9a:6d:92:60:65:bb:a1:71:de:26:18:ea:02:82: 71:1a:1e:9c:41:ed:23:00:c1:24:27:45:e0:e2:50:f3:d5:9d: 40:4e:fa:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnrSlMhH0UIl1+yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2MDMtZjJkMDljZmI1 ZmE3MB4XDTI1MDUxOTEyMzQyN1oXDTI1MDgxNzEyMzQyN1owLzEtMCsGA1UEAxMk NzE1MzE3YTUtMWRmYS00MzI0LTlmOTEtYzRjODI1NjdhZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqRr4k5G8ZWnmiqkzPqXhnq/7PoNASfwOZoW espy8/Ko1P7CQh1We9acBU2mTVNdjXHQD0uVgckLpVEwg/vzE1yNlcCdRZHH3gV3 PEqgJ3eU0rOt7c2jAZO+I+F1Go5JSw1jflbVhIs8sqefnZgP795m1HVoyTfT1mgJ +n8KpKQwygfGyrF2O87lJaw7lUgwLjsjMObLOYQyGIhM11UxgdcmHcGGV4q1Z7uO KosiQsV6VbGrrQinzE1sPo+KyJC3ZiPTplATfsHVbrh8rU+SdOJ8TMrSzk2B8gU9 qk+34C65mshd/6wLPOw07D1N9Jej+FEzv6jzsrtzowzr274T+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3IYKKdMmHN7U3u62WITzYcHimOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5 YTRjMC1iODhiLTRjZjUtODYwMy1mMmQwOWNmYjVmYTcvN2ZhNmEwMDQtNGE1MS0z OWRjLTkyMTYtYzFjZjY1Zjg1NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNlOWE0YzAtYjg4Yi00Y2Y1LTg2 MDMtZjJkMDljZmI1ZmE3L2EzZTlhNGMwLWI4OGItNGNmNS04NjAzLWYyZDA5Y2Zi NWZhNy5jcmwwHwYDVR0jBBgwFoAU8HKPkEcdsCoGHpgpE5pGA72MWJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2U5YTRjMC1iODhiLTRjZjUtODYwMy1mMmQw OWNmYjVmYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC82btxlyP8n9wSh//ZJABUiSaRVAVPpvRtWvKZJok1wDxlXhDQZDsIu 7tueJ6fUHu8NzDkFfcdk+FUS9Hlea7kPzJIP0lyFz1A6KsJfX7K+nO+CWWN4MXUC LbL835ODa6gGQvOtZ+mtAxhL+qfZXXQxQe5iJKwflZFv8J5UnrBrSh9gTLq3ChGg 21q6iC1cKU4uWFyXnNYV1yCqMjE8jfF96yFa8U6r4PfHJQRoQBtiAbbbcMYnBF6a A+XKkTH5/1fAqHzKLaqHy2pypUshj/rl89Z+zVvOWzaOLFyabZJgZbuhcd4mGOoC gnEaHpxB7SMAwSQnReDiUPPVnUBO+pM= -----END CERTIFICATE-----Generated at Mon Jun 16 23:03:52 2025 by rpki-client