$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bfb6bd8-0185-3ea1-9861-0a2a0d143ab6.roa File: 5bfb6bd8-0185-3ea1-9861-0a2a0d143ab6.roa (raw, json) Hash identifier: 8jh0nXOvIlBy7Gfo+9DjNjhXMWnvcLbGFPgPTzLe/sc= Subject key identifier: A9:85:0A:9C:4E:0D:9B:9D:84:08:4B:12:87:57:7C:CC:A2:8B:A6:50 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AB65103462102737F91B3FC00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bfb6bd8-0185-3ea1-9861-0a2a0d143ab6.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 395793 IP address blocks: 72.13.227.0/24 maxlen: 24 72.13.232.0/24 maxlen: 24 72.13.241.0/24 maxlen: 24 72.13.243.0/24 maxlen: 24 72.13.246.0/24 maxlen: 24 72.13.249.0/24 maxlen: 24 72.13.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:51:03:46:21:02:73:7f:91:b3:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=d8a62dbd-aee2-4b24-ab06-2dbf79bd0965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:68:e1:83:09:0e:48:b2:0f:de:fd:f4:8e: 13:09:9a:0c:e1:23:a4:1f:be:61:6d:a2:b5:fe:d3: 2f:03:78:25:6f:14:f2:4b:3d:4e:ea:a7:82:f8:62: 7e:15:29:b1:23:3a:c6:9a:00:c1:f0:7e:8b:ac:f0: 06:05:76:9c:85:98:d4:a7:db:50:76:b2:66:15:08: 48:6f:8a:c1:78:df:8d:3f:e0:b3:d7:e5:9a:45:06: 3f:d9:08:70:61:b2:92:d0:88:f0:bd:f4:eb:b9:dc: 5f:74:f8:70:2b:5c:4a:8b:10:2f:b3:e0:05:6b:24: d0:80:c2:cd:62:bb:10:9c:1f:09:bc:a2:b8:39:38: e1:63:7d:09:be:95:20:6e:24:5a:5c:4d:87:3d:a9: 0d:f2:9a:15:b1:75:9a:6c:67:c3:49:e9:51:83:8f: a5:8c:6f:7b:6f:7b:3b:43:4f:a5:b2:d6:54:69:7f: 1e:af:27:a1:78:d3:0e:b0:57:db:ca:fa:ad:1b:c7: 7e:cb:99:9f:39:79:bf:64:d8:56:00:5b:f7:a3:b6: 4e:ce:59:f1:c5:96:b9:e4:33:5a:f1:7f:62:ad:f9: 5c:01:11:3a:d8:1d:9e:34:e1:86:d4:f1:ce:ae:d9: b1:37:2d:77:1d:23:fe:40:ea:d9:33:40:12:2f:0c: 01:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:85:0A:9C:4E:0D:9B:9D:84:08:4B:12:87:57:7C:CC:A2:8B:A6:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5bfb6bd8-0185-3ea1-9861-0a2a0d143ab6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.13.227.0/24 72.13.232.0/24 72.13.241.0/24 72.13.243.0/24 72.13.246.0/24 72.13.249.0/24 72.13.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b1:00:46:24:ca:ef:f0:08:45:3a:2b:8b:0a:d9:85:ec:c3: 1c:69:cf:71:1f:a5:8f:48:6e:61:5d:ed:f0:80:a4:9a:3c:c6: dc:a8:f2:3d:69:d1:e9:62:d9:7c:14:b7:03:5f:60:52:f5:b5: 79:4e:c4:57:82:5d:70:66:8b:58:cf:42:78:a8:e5:61:6c:a1: 9a:e8:df:37:73:1f:50:fb:10:f6:15:22:fc:9c:fc:1a:58:e6: dc:d9:de:e6:8d:4c:d9:43:4a:ab:9a:17:c1:7f:91:13:e3:66: a0:13:fe:6d:57:d1:20:c1:d7:f3:9d:9f:26:2b:b1:ee:c8:29: c3:de:3f:d4:9c:a3:43:82:95:3b:a2:ec:59:40:dc:d9:27:5a: 4a:f9:55:c0:af:2c:f1:e7:46:0c:8e:fd:75:61:3a:58:72:79: 26:c5:3e:1d:89:cb:7f:7d:62:4a:26:46:26:9f:20:59:64:4d: 71:ef:c0:ef:56:54:24:11:ec:e4:a9:d1:dd:e8:31:b0:d2:a9: 92:90:d5:32:61:44:52:f3:93:78:5a:b1:50:c1:e9:93:1a:10: e8:2d:ff:a4:20:8b:8b:75:ce:72:7a:4a:df:29:6e:7b:45:cb: 41:4b:ee:29:45:22:42:fd:e3:50:df:5c:9c:74:a7:27:a3:f6: 43:33:e1:15 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEq2UQNGIQJzf5Gz/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDhhNjJkYmQtYWVlMi00YjI0LWFiMDYtMmRiZjc5YmQwOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHxo4YMJDkiyD9799I4TCZoM4SOkH75hbaK1 /tMvA3glbxTySz1O6qeC+GJ+FSmxIzrGmgDB8H6LrPAGBXachZjUp9tQdrJmFQhI b4rBeN+NP+Cz1+WaRQY/2QhwYbKS0IjwvfTrudxfdPhwK1xKixAvs+AFayTQgMLN YrsQnB8JvKK4OTjhY30JvpUgbiRaXE2HPakN8poVsXWabGfDSelRg4+ljG97b3s7 Q0+lstZUaX8eryeheNMOsFfbyvqtG8d+y5mfOXm/ZNhWAFv3o7ZOzlnxxZa55DNa 8X9irflcARE62B2eNOGG1PHOrtmxNy13HSP+QOrZM0ASLwwBVwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFKmFCpxODZudhAhLEodXfMyii6ZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWJmYjZiZDgtMDE4NS0z ZWExLTk4NjEtMGEyYTBkMTQzYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQASA3jAwQA SA3oAwQASA3xAwQASA3zAwQASA32AwQASA35AwQASA38MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJaxAEYk yu/wCEU6K4sK2YXswxxpz3EfpY9IbmFd7fCApJo8xtyo8j1p0eli2XwUtwNfYFL1 tXlOxFeCXXBmi1jPQnio5WFsoZro3zdzH1D7EPYVIvyc/BpY5tzZ3uaNTNlDSqua F8F/kRPjZqAT/m1X0SDB1/OdnyYrse7IKcPeP9Sco0OClTui7FlA3NknWkr5VcCv LPHnRgyO/XVhOlhyeSbFPh2Jy399YkomRiafIFlkTXHvwO9WVCQR7OSp0d3oMbDS qZKQ1TJhRFLzk3hasVDB6ZMaEOgt/6Qgi4t1znJ6St8pbntFy0FL7ilFIkL941Df XJx0pyej9kMz4RU= -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:01 2025 by rpki-client