$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa File: 0f216025-08f0-3ed8-84c5-9f7904503c8e.roa (raw, json) Hash identifier: 7mpYOX9wxaaISVbQw7/FmWFDogcknMXJ9HvgXnEwXm8= Subject key identifier: 71:7C:A8:67:DC:D1:A2:A0:05:89:B9:0D:D7:A3:CB:BC:14:28:7B:E4 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584AA85BA3B6EEDE23AC547AB300 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 14717 IP address blocks: 72.21.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:a3:b6:ee:de:23:ac:54:7a:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=9b04c345-cc73-4b5b-8fbf-89b864d691db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:65:d8:18:80:ba:32:26:d0:a3:e2:8e:fd:bf: 6d:63:4c:ed:b7:65:6a:94:8f:17:85:8c:7f:44:e2: 93:8d:b8:76:1f:5c:bf:bc:6a:0b:e9:83:b2:51:9d: 17:39:6a:d0:bc:46:a8:39:20:69:a1:eb:4a:72:d1: 8b:ea:67:63:56:3d:e8:05:b7:e5:d9:98:4a:a9:52: 5a:bb:b0:78:08:1a:19:81:f7:83:94:97:62:81:e4: 8d:0e:23:eb:c0:3a:cd:58:04:1f:da:f0:6b:e2:63: 10:5e:ae:6f:bb:52:00:cf:cd:03:c5:bb:fe:e5:f0: 60:45:7e:f2:25:7d:a2:01:73:84:4b:89:ab:34:d7: bd:72:6d:a4:c6:93:fd:35:2d:f9:c8:6c:8d:fc:ed: b7:50:94:1c:ac:c5:6d:cb:e7:2f:a3:5b:de:4b:64: 2a:66:5d:37:72:86:f3:5a:e1:aa:ac:4f:e9:31:ba: 86:b4:7b:3c:19:32:5c:4b:b6:e1:42:d5:cd:e7:1d: c7:45:57:4f:94:d9:2e:7c:28:4f:83:d8:1e:0e:61: a2:8c:b2:68:3d:b8:04:98:03:17:de:60:21:d5:1f: 08:1d:b0:48:3c:16:6d:dc:c3:bf:91:a4:67:7b:8a: 6d:3a:fb:f8:52:53:31:45:e9:0a:54:9a:da:11:d0: 60:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7C:A8:67:DC:D1:A2:A0:05:89:B9:0D:D7:A3:CB:BC:14:28:7B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/0f216025-08f0-3ed8-84c5-9f7904503c8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:15:5c:ec:9d:e1:ba:82:8e:97:1d:3e:f1:bc:99:ca:d8:a2: 3e:3a:17:58:b1:f3:dd:97:62:0b:79:b6:eb:4e:57:39:10:8e: d0:19:6d:c5:80:b9:bd:ce:df:eb:e9:e5:44:12:88:bc:9e:92: 6d:3f:9b:72:48:4c:d9:07:df:8f:28:c2:8f:89:6f:a4:16:d6: c6:ac:18:2a:37:71:1f:6f:db:32:2e:fe:76:bb:b1:13:56:bd: f4:03:1f:32:70:40:89:cd:97:a3:1c:1a:67:00:cd:10:79:c5: 7b:08:67:27:49:b8:ab:a9:8c:a7:af:ad:18:0b:9f:1d:6b:21: c7:6b:22:c6:95:48:ba:1c:78:74:dc:12:04:a5:ec:1a:47:57: 85:95:20:13:2d:2f:09:c0:42:3a:c3:e5:b0:e7:85:1a:96:b2: 59:73:3f:95:09:ef:fa:3a:2b:cd:c1:ea:92:16:af:82:75:12: 67:76:a9:61:be:fe:ff:6f:3c:0f:fc:4f:81:ea:68:b6:f7:d5: 27:54:4c:bb:28:73:08:cf:5a:b1:04:2a:45:63:d0:ca:73:c4: e5:89:df:8d:5d:5b:a5:b2:f7:02:e3:e1:1b:f7:83:ef:6e:8b: af:7a:48:3e:58:d4:58:f6:af:4d:11:96:8d:50:57:10:4e:fb: 82:07:a0:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6O27t4jrFR6swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk OWIwNGMzNDUtY2M3My00YjViLThmYmYtODliODY0ZDY5MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWXYGIC6MibQo+KO/b9tY0ztt2VqlI8XhYx/ ROKTjbh2H1y/vGoL6YOyUZ0XOWrQvEaoOSBpoetKctGL6mdjVj3oBbfl2ZhKqVJa u7B4CBoZgfeDlJdigeSNDiPrwDrNWAQf2vBr4mMQXq5vu1IAz80Dxbv+5fBgRX7y JX2iAXOES4mrNNe9cm2kxpP9NS35yGyN/O23UJQcrMVty+cvo1veS2QqZl03cobz WuGqrE/pMbqGtHs8GTJcS7bhQtXN5x3HRVdPlNkufChPg9geDmGijLJoPbgEmAMX 3mAh1R8IHbBIPBZt3MO/kaRne4ptOvv4UlMxRekKVJraEdBg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF8qGfc0aKgBYm5Ddejy7wUKHvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMGYyMTYwMjUtMDhmMC0z ZWQ4LTg0YzUtOWY3OTA0NTAzYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSBWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwVXOyd4bqCjpcdPvG8mcrYoj46F1ix892XYgt5tutOVzkQjtAZbcWA ub3O3+vp5UQSiLyekm0/m3JITNkH348owo+Jb6QW1sasGCo3cR9v2zIu/na7sRNW vfQDHzJwQInNl6McGmcAzRB5xXsIZydJuKupjKevrRgLnx1rIcdrIsaVSLoceHTc EgSl7BpHV4WVIBMtLwnAQjrD5bDnhRqWsllzP5UJ7/o6K83B6pIWr4J1Emd2qWG+ /v9vPA/8T4HqaLb31SdUTLsocwjPWrEEKkVj0MpzxOWJ341dW6Wy9wLj4Rv3g+9u i696SD5Y1Fj2r00Rlo1QVxBO+4IHoLE= -----END CERTIFICATE-----Generated at Wed Aug 6 09:43:32 2025 by rpki-client