$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa File: 2382a434-cda8-3060-a542-ba56e0e0f17b.roa (raw, json) Hash identifier: 0xXVzXAE+ANWzLKc09oTPsJ8LDWUy1TVHAD/uReF1vU= Subject key identifier: A6:06:DB:B3:E3:0B:22:4B:4E:2D:B3:0B:04:CE:B4:A0:20:0D:4B:3B Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F620EC7B3E686DB83A9180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6079 IP address blocks: 72.1.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:20:ec:7b:3e:68:6d:b8:3a:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=a41339dc-300f-4631-a749-d03e554ff4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:eb:1a:08:6d:84:fb:91:b6:38:8e:a0:e3:77: b5:09:88:5d:89:ff:7c:2a:77:c0:57:ae:67:1c:d5: ec:dc:4a:a5:1e:2e:b7:68:0b:92:c8:36:57:e2:bd: 95:b8:76:98:25:f0:89:cf:ac:12:de:6e:f1:37:64: bc:2c:dd:6c:01:35:ab:e9:c7:4e:26:31:d0:33:4b: 8a:7a:da:17:46:22:73:c4:dc:11:e8:9f:f2:56:c1: b2:d9:ad:f5:ec:30:18:88:6a:cd:01:0f:62:9d:53: 62:af:94:1a:9a:f6:e3:35:15:3f:2d:1c:15:32:28: cf:b6:ef:36:92:3f:85:8a:d0:e1:3e:2d:03:64:5d: 0c:bf:d3:fa:7e:34:52:5d:57:8f:45:c9:4c:51:02: 80:ca:b1:c6:8e:5c:fd:47:4f:92:eb:ec:e2:57:ad: fe:5d:6b:bc:19:5d:34:b2:24:34:71:a3:4b:58:4a: 73:76:78:6a:a7:f8:a3:b3:16:d3:8b:75:cb:b3:20: 73:4f:d2:3e:18:24:7b:17:dc:2b:30:dc:b8:63:b5: 4f:f0:1f:62:9e:3e:cc:29:8d:76:72:5c:ad:dd:3c: 8f:ab:5e:0b:31:69:a7:8e:be:5e:ee:5d:be:87:32: 12:0e:16:69:8e:c0:46:7d:24:d9:7d:10:43:39:eb: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:06:DB:B3:E3:0B:22:4B:4E:2D:B3:0B:04:CE:B4:A0:20:0D:4B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2382a434-cda8-3060-a542-ba56e0e0f17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:35:67:63:a0:51:58:6f:65:9a:ed:c1:6d:f1:37:55:73:d6: 5b:32:5e:05:23:d5:0c:81:06:f7:df:d7:24:c2:6f:13:4b:3e: 3b:f7:58:b1:b7:d5:82:d3:2a:45:08:4d:6f:32:03:4d:ae:93: 6d:0c:c6:bf:d7:33:55:26:b9:d5:ce:53:44:1a:b2:52:a3:0f: 2e:11:49:72:7d:74:f4:96:b7:05:cb:b7:b2:de:c5:da:7d:3c: 0b:0d:b9:97:43:22:b4:32:63:bf:22:4c:d3:5a:5a:e7:57:64: 2e:8b:2c:d5:28:62:e2:f5:07:0b:40:95:95:e5:4c:0f:14:80: 5c:ea:2d:c9:62:f2:5f:12:c5:a1:15:05:94:34:48:bd:95:25: 50:e2:47:26:a3:a0:61:52:9e:61:72:50:ad:b3:5a:17:4b:6a: 00:46:ad:ca:da:30:a2:5b:b1:27:16:54:ae:03:0e:fb:83:7a: 2f:18:f6:c0:11:e1:47:5e:7c:d0:92:d6:46:92:be:b4:28:6d: 0c:8d:11:4c:10:ee:e3:1a:f4:74:3f:b6:df:8b:9b:13:81:ab: 2b:32:09:6b:07:a0:d9:cc:11:46:5a:d1:1d:27:1f:b3:8b:3f: 7c:d2:25:45:ad:b3:b8:ad:bd:4e:24:fe:73:de:25:76:e6:5a: 19:ae:22:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9iDsez5obbg6kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YTQxMzM5ZGMtMzAwZi00NjMxLWE3NDktZDAzZTU1NGZmNGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+saCG2E+5G2OI6g43e1CYhdif98KnfAV65n HNXs3EqlHi63aAuSyDZX4r2VuHaYJfCJz6wS3m7xN2S8LN1sATWr6cdOJjHQM0uK etoXRiJzxNwR6J/yVsGy2a317DAYiGrNAQ9inVNir5QamvbjNRU/LRwVMijPtu82 kj+FitDhPi0DZF0Mv9P6fjRSXVePRclMUQKAyrHGjlz9R0+S6+ziV63+XWu8GV00 siQ0caNLWEpzdnhqp/ijsxbTi3XLsyBzT9I+GCR7F9wrMNy4Y7VP8B9inj7MKY12 clyt3TyPq14LMWmnjr5e7l2+hzISDhZpjsBGfSTZfRBDOethZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYG27PjCyJLTi2zCwTOtKAgDUs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjM4MmE0MzQtY2RhOC0z MDYwLWE1NDItYmE1NmUwZTBmMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSAGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ1Z2OgUVhvZZrtwW3xN1Vz1lsyXgUj1QyBBvff1yTCbxNLPjv3WLG3 1YLTKkUITW8yA02uk20Mxr/XM1UmudXOU0QaslKjDy4RSXJ9dPSWtwXLt7Lexdp9 PAsNuZdDIrQyY78iTNNaWudXZC6LLNUoYuL1BwtAlZXlTA8UgFzqLcli8l8SxaEV BZQ0SL2VJVDiRyajoGFSnmFyUK2zWhdLagBGrcraMKJbsScWVK4DDvuDei8Y9sAR 4UdefNCS1kaSvrQobQyNEUwQ7uMa9HQ/tt+LmxOBqysyCWsHoNnMEUZa0R0nH7OL P3zSJUWts7itvU4k/nPeJXbmWhmuIlo= -----END CERTIFICATE-----Generated at Sun Aug 10 03:51:12 2025 by rpki-client