$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02de7a05-1f30-3a2d-bd25-61dc5cac1ddc.roa File: 02de7a05-1f30-3a2d-bd25-61dc5cac1ddc.roa (raw, json) Hash identifier: MiNq4mmMe5yGFRyCjn68rM6TU9Htn3xDVZEToWJUd3I= Subject key identifier: D3:6C:05:10:98:B8:2B:C2:97:14:59:18:0B:C2:E9:D2:A6:D1:37:D5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584AB91BEFD1C7EC2DF7A88CBF40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02de7a05-1f30-3a2d-bd25-61dc5cac1ddc.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 63450 IP address blocks: 72.52.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ef:d1:c7:ec:2d:f7:a8:8c:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=4be7b03c-d454-42f1-8d36-af85a4dfb236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:d1:c3:fc:be:14:d8:8e:9e:1c:f7:94:fa: b7:ee:b9:7f:80:08:7f:ec:a2:c0:64:9c:0c:e2:8e: af:be:2e:f8:9b:ab:59:c7:71:f6:cc:04:33:cb:0a: f4:45:5e:91:cb:49:a7:74:91:bb:ec:d8:50:18:82: 22:3d:f3:36:64:48:7d:b1:96:cb:8c:03:77:d9:bf: 78:bf:66:46:93:e8:21:19:1e:33:57:dd:f9:b1:6d: d4:a3:39:b2:0d:33:58:65:5b:65:d5:f1:e2:7a:ab: 2b:5b:8d:28:a8:c0:50:ed:ac:92:81:22:a2:52:66: f6:06:92:aa:18:6d:e6:c1:45:1d:5c:f3:03:ba:f5: d1:42:67:d4:c2:46:d1:da:86:38:3e:e8:42:7f:6a: bf:ec:c9:72:df:8f:3f:a4:28:55:d5:97:37:26:90: 57:5b:6d:a9:f6:af:13:ad:24:bc:d8:4a:c9:1f:71: 1d:85:86:9c:82:24:e3:fe:df:6b:7c:69:c7:63:18: 9a:10:e5:9d:2e:15:d9:6a:f2:98:65:1f:11:3b:7a: 07:a5:c8:66:54:9f:f8:b5:e1:6a:23:1a:10:28:22: 8a:06:d7:71:0f:8f:cd:51:1e:9f:67:0c:e1:3c:bc: 7e:32:23:fb:44:da:5a:bd:8f:55:34:ba:33:cc:9e: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6C:05:10:98:B8:2B:C2:97:14:59:18:0B:C2:E9:D2:A6:D1:37:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02de7a05-1f30-3a2d-bd25-61dc5cac1ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv4: 72.52.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d3:a3:2c:e8:2b:50:ac:93:36:68:89:35:1d:0f:0d:c4:c9: 4a:76:fc:32:98:84:05:f4:2c:b0:bd:fa:1d:33:50:ac:d2:f8: eb:a1:18:c1:17:56:c5:2a:3a:30:8d:c1:22:15:96:56:a6:38: 28:72:92:b0:96:94:d1:93:ca:d3:13:09:f6:83:e1:e5:9b:b6: 74:22:71:31:20:5c:b7:40:b9:64:ff:8f:b8:3f:21:cb:2b:c4: c2:47:c6:9b:a9:97:7b:eb:40:65:50:cb:55:59:a0:98:0d:a3: bf:be:04:34:9d:be:60:d8:c0:9b:01:f2:aa:9c:bf:4f:d4:67: 1c:cb:3a:57:8b:d6:57:4c:05:e4:91:a1:7e:13:b3:36:da:c5: 95:ea:d2:9a:27:d7:66:58:bb:04:77:0e:4e:7c:38:4a:5f:7c: bd:b3:53:5a:98:aa:2d:cf:68:18:6d:6f:89:a0:37:84:03:10: 76:59:d4:93:80:af:99:a2:5a:ad:fc:cd:d7:5e:a5:6c:68:a1: c3:3d:52:f2:9d:5d:b7:a2:f2:51:c3:1e:d2:7e:ac:ad:a6:b3: 3f:ee:c9:6b:7b:7b:fa:5b:3c:fa:a8:ba:bd:7f:d7:37:8f:9d: 22:52:82:5c:9e:87:e3:98:1e:e1:e1:eb:bf:49:32:98:a4:f0: 01:35:fa:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G+/Rx+wt96iMv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NGJlN2IwM2MtZDQ1NC00MmYxLThkMzYtYWY4NWE0ZGZiMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64/Rw/y+FNiOnhz3lPq37rl/gAh/7KLAZJwM 4o6vvi74m6tZx3H2zAQzywr0RV6Ry0mndJG77NhQGIIiPfM2ZEh9sZbLjAN32b94 v2ZGk+ghGR4zV935sW3UozmyDTNYZVtl1fHieqsrW40oqMBQ7aySgSKiUmb2BpKq GG3mwUUdXPMDuvXRQmfUwkbR2oY4PuhCf2q/7Mly348/pChV1Zc3JpBXW22p9q8T rSS82ErJH3EdhYacgiTj/t9rfGnHYxiaEOWdLhXZavKYZR8RO3oHpchmVJ/4teFq IxoQKCKKBtdxD4/NUR6fZwzhPLx+MiP7RNpavY9VNLozzJ794wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNsBRCYuCvClxRZGAvC6dKm0TfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDJkZTdhMDUtMWYzMC0z YTJkLWJkMjUtNjFkYzVjYWMxZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/ToyzoK1CskzZoiTUdDw3EyUp2/DKYhAX0LLC9+h0zUKzS+OuhGMEX VsUqOjCNwSIVllamOChykrCWlNGTytMTCfaD4eWbtnQicTEgXLdAuWT/j7g/Icsr xMJHxpupl3vrQGVQy1VZoJgNo7++BDSdvmDYwJsB8qqcv0/UZxzLOleL1ldMBeSR oX4TszbaxZXq0pon12ZYuwR3Dk58OEpffL2zU1qYqi3PaBhtb4mgN4QDEHZZ1JOA r5miWq38zddepWxoocM9UvKdXbei8lHDHtJ+rK2msz/uyWt7e/pbPPqour1/1zeP nSJSglyeh+OYHuHh679JMpik8AE1+jE= -----END CERTIFICATE-----Generated at Mon Aug 4 07:39:29 2025 by rpki-client