$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f32a53-1b21-3122-a63b-dd807f35cd21.roa File: a8f32a53-1b21-3122-a63b-dd807f35cd21.roa (raw, json) Hash identifier: 9mnapcJlQw7XNeInpjuXypvQdR2ZHAPjfITXAUf90WE= Subject key identifier: C8:87:4D:FA:6A:16:01:AC:91:80:4D:DA:E6:24:08:2E:33:03:23:CF Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AA6F6222AA65186872FDD9220 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f32a53-1b21-3122-a63b-dd807f35cd21.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 64200 IP address blocks: 72.1.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:22:2a:a6:51:86:87:2f:dd:92:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=c8774ebd-3e6e-47da-b248-da0f7d704f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:4c:a4:a1:b1:3e:1a:8e:35:29:5b:b6:96: 4c:d1:7f:ae:52:30:39:30:02:f8:59:44:2b:09:ac: 55:3a:e9:34:0c:fa:3b:f5:ce:86:f1:09:9c:20:09: 43:b6:0c:c3:18:86:ff:f7:a7:d1:e9:6b:b4:ca:3f: c7:9a:66:a3:48:a9:b6:2d:4c:e3:5c:e3:35:d6:9e: fa:f9:6a:8c:a6:28:72:ef:91:03:5a:61:51:b1:5a: 7f:e3:e4:f7:b4:e5:49:4f:e6:0e:af:4b:4b:c9:e5: 0e:16:2f:a2:c1:56:38:8e:9c:9b:c8:52:14:6a:bb: d2:c3:19:2a:c7:c2:8b:cb:20:63:f1:7e:df:77:ed: fd:6b:03:ff:f8:f9:78:63:70:51:53:74:1e:c9:1e: 96:1f:22:c0:7b:5f:21:3e:bc:9c:c5:27:a1:0a:d9: dc:71:f1:70:4c:69:be:bf:af:82:14:e7:1b:fb:cd: 28:f1:03:07:cc:a7:19:83:ce:69:5c:f3:d4:cc:fc: b8:02:ad:37:ed:0b:71:44:1b:05:23:8e:9d:85:35: 35:bf:8b:59:a9:fd:0a:c2:91:4f:7d:f5:ce:d9:d4: dd:60:02:97:08:0f:88:02:68:9b:26:59:8c:33:91: d2:fc:18:ac:a8:0f:18:aa:75:49:8d:21:10:d5:fc: 52:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:87:4D:FA:6A:16:01:AC:91:80:4D:DA:E6:24:08:2E:33:03:23:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a8f32a53-1b21-3122-a63b-dd807f35cd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:21:84:49:49:5a:a8:a3:7d:3a:35:63:c9:72:23:6c:d3:75: 15:43:84:81:33:c8:c5:90:31:5b:35:2b:84:43:26:79:40:0d: 94:87:ae:79:ae:7e:62:7d:c9:6d:76:23:c0:c7:30:c3:8e:26: 44:8b:f9:a6:81:44:0d:8c:47:2d:c1:9c:b3:ba:fa:73:e3:37: 01:fd:c6:e6:4a:47:c1:5e:f7:10:31:11:a0:17:f2:4e:db:f1: 55:d6:37:e5:bd:23:82:8e:21:2e:e8:4b:96:73:67:96:05:cb: a0:a0:d7:30:e7:58:66:26:54:82:5c:cd:a9:eb:63:92:dd:66: 5d:7a:2c:42:aa:17:a0:21:ff:c2:f2:41:ae:21:55:2b:28:cf: b6:3a:6f:1c:14:64:3a:ed:c1:1b:70:49:91:b0:a3:0f:64:8e: 18:96:38:14:3d:6e:de:be:b1:db:89:a5:32:16:20:69:70:83: 9c:68:6e:79:92:e5:95:b7:ee:8d:e3:1b:80:e5:cf:b5:86:9a: 45:34:86:9c:07:f2:73:ee:2d:39:40:7d:89:ac:03:84:f0:e2: c9:d9:bd:0d:86:11:52:17:cb:13:50:68:b1:e5:fd:1d:9a:df: 06:39:c0:3f:64:3b:63:b5:d9:ff:2d:d5:10:f7:47:6f:34:dc: e2:bf:af:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9iIqplGGhy/dkiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk Yzg3NzRlYmQtM2U2ZS00N2RhLWIyNDgtZGEwZjdkNzA0ZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/lMpKGxPhqONSlbtpZM0X+uUjA5MAL4WUQr CaxVOuk0DPo79c6G8QmcIAlDtgzDGIb/96fR6Wu0yj/HmmajSKm2LUzjXOM11p76 +WqMpihy75EDWmFRsVp/4+T3tOVJT+YOr0tLyeUOFi+iwVY4jpybyFIUarvSwxkq x8KLyyBj8X7fd+39awP/+Pl4Y3BRU3QeyR6WHyLAe18hPrycxSehCtnccfFwTGm+ v6+CFOcb+80o8QMHzKcZg85pXPPUzPy4Aq037QtxRBsFI46dhTU1v4tZqf0KwpFP ffXO2dTdYAKXCA+IAmibJlmMM5HS/BisqA8YqnVJjSEQ1fxSTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiHTfpqFgGskYBN2uYkCC4zAyPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYThmMzJhNTMtMWIyMS0z MTIyLWE2M2ItZGQ4MDdmMzVjZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSAG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEghhElJWqijfTo1Y8lyI2zTdRVDhIEzyMWQMVs1K4RDJnlADZSHrnmu fmJ9yW12I8DHMMOOJkSL+aaBRA2MRy3BnLO6+nPjNwH9xuZKR8Fe9xAxEaAX8k7b 8VXWN+W9I4KOIS7oS5ZzZ5YFy6Cg1zDnWGYmVIJczanrY5LdZl16LEKqF6Ah/8Ly Qa4hVSsoz7Y6bxwUZDrtwRtwSZGwow9kjhiWOBQ9bt6+sduJpTIWIGlwg5xobnmS 5ZW37o3jG4Dlz7WGmkU0hpwH8nPuLTlAfYmsA4Tw4snZvQ2GEVIXyxNQaLHl/R2a 3wY5wD9kO2O12f8t1RD3R2803OK/r/Y= -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:35 2025 by rpki-client