$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa File: b029c412-754d-3db3-b3ab-d20f6b3bda34.roa (raw, json) Hash identifier: MfmUDYWcnEXEFJkGOwGjsm63NZ0efPMRlsTc6se/hYc= Subject key identifier: 40:8F:3E:59:29:9C:16:5D:DE:57:EA:26:C1:29:40:D9:D1:9F:C0:80 Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F4328584AFEE6A4ACDABEFD58ECC99C80 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 32097 IP address blocks: 72.18.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a4:ac:da:be:fd:58:ec:c9:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=7d7518da-cec8-46cf-8998-97b2faa03ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:36:a9:2f:e4:20:9b:b5:c9:ce:38:ab:c3: c2:8e:8c:08:f5:da:fc:37:24:33:63:6b:65:42:99: 21:f7:ed:91:37:ef:81:8e:77:2c:11:78:77:08:7b: 8c:92:f5:ca:66:32:79:58:b4:9f:3a:a6:b1:6d:82: d8:f2:59:59:73:8e:39:7c:7e:c0:98:85:df:0e:7b: 58:51:55:9a:ff:c8:ca:6b:cb:c3:e0:f0:15:d5:a3: cf:59:d4:b4:6e:ea:e1:64:e4:f2:02:2f:30:ec:cf: 69:63:02:6e:ec:3a:91:d8:46:bc:56:dd:7f:b1:0a: 8a:d2:d7:c0:9e:36:89:86:12:de:dd:94:09:86:4b: 23:3d:c3:78:7f:62:01:1f:8c:57:3d:66:45:5f:cc: b9:9c:b2:cf:9e:28:e7:a3:5a:8e:73:0c:d5:c9:d8: 7b:30:32:51:6f:ad:12:f5:bb:85:6f:88:a4:db:7b: 09:13:76:7a:36:ad:e5:80:82:96:5c:b2:e3:1b:19: 0b:5f:e7:b0:f2:91:74:e6:02:32:f8:d7:62:ba:9f: 72:2c:c3:a8:3a:ba:6e:18:c0:6f:24:8e:7f:0a:74: f0:75:6c:1b:59:1f:28:5d:12:9c:92:c9:7c:e1:62: 0f:de:4f:8e:b9:9f:bd:26:c0:0d:e8:81:71:34:ec: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8F:3E:59:29:9C:16:5D:DE:57:EA:26:C1:29:40:D9:D1:9F:C0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 72.18.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:66:6e:de:f4:18:3b:cb:e6:a8:5e:a8:88:e6:c2:8d:5c:9f: 1c:31:0d:40:e4:b0:08:d7:21:e4:03:3e:54:72:ac:0c:50:23: c4:fa:00:43:ed:ce:6e:96:26:f1:88:aa:44:0e:e3:63:52:a9: dc:12:3a:9a:f2:4e:69:b4:70:6b:37:80:00:44:3f:f9:b4:6a: c0:5b:f7:01:33:ba:33:fb:d5:5d:83:56:35:08:46:1d:f7:83: 5d:07:f6:85:9b:b9:7b:47:a4:2a:91:9e:59:d3:bd:dd:5d:7c: a1:f2:5f:f1:ba:35:e9:e5:3f:ee:61:e6:55:64:90:f2:e6:62: c7:7c:91:ea:db:64:87:e4:38:80:e5:7b:c8:54:72:cb:a3:2a: af:ba:2b:db:f0:75:f2:30:86:ac:41:1f:37:0d:f8:f3:c6:30: 1c:fc:21:c5:e7:05:ad:3f:4d:f0:86:21:0a:fe:27:d5:3a:0d: a7:71:12:c0:3f:d4:04:03:e2:e8:4a:91:db:1a:6c:32:5f:03: 39:56:ae:f1:b4:24:c3:16:e3:af:25:90:26:b8:8d:43:ff:81: 62:02:35:32:b3:ec:da:9d:cc:95:cf:3f:8b:1b:97:a5:24:b4: 9b:bd:07:02:02:61:db:ff:ab:63:ca:03:a2:13:6a:d2:fb:08: f9:a7:77:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qSs2r79WOzJnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk N2Q3NTE4ZGEtY2VjOC00NmNmLTg5OTgtOTdiMmZhYTAzZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKE2qS/kIJu1yc44q8PCjowI9dr8NyQzY2tl Qpkh9+2RN++BjncsEXh3CHuMkvXKZjJ5WLSfOqaxbYLY8llZc445fH7AmIXfDntY UVWa/8jKa8vD4PAV1aPPWdS0burhZOTyAi8w7M9pYwJu7DqR2Ea8Vt1/sQqK0tfA njaJhhLe3ZQJhksjPcN4f2IBH4xXPWZFX8y5nLLPnijno1qOcwzVydh7MDJRb60S 9buFb4ik23sJE3Z6Nq3lgIKWXLLjGxkLX+ew8pF05gIy+Ndiup9yLMOoOrpuGMBv JI5/CnTwdWwbWR8oXRKcksl84WIP3k+OuZ+9JsAN6IFxNOw62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECPPlkpnBZd3lfqJsEpQNnRn8CAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYjAyOWM0MTItNzU0ZC0z ZGIzLWIzYWItZDIwZjZiM2JkYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNmbt70GDvL5qheqIjmwo1cnxwxDUDksAjXIeQDPlRyrAxQI8T6AEPt zm6WJvGIqkQO42NSqdwSOpryTmm0cGs3gABEP/m0asBb9wEzujP71V2DVjUIRh33 g10H9oWbuXtHpCqRnlnTvd1dfKHyX/G6NenlP+5h5lVkkPLmYsd8kerbZIfkOIDl e8hUcsujKq+6K9vwdfIwhqxBHzcN+PPGMBz8IcXnBa0/TfCGIQr+J9U6DadxEsA/ 1AQD4uhKkdsabDJfAzlWrvG0JMMW468lkCa4jUP/gWICNTKz7NqdzJXPP4sbl6Uk tJu9BwICYdv/q2PKA6ITatL7CPmnd1g= -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:12 2025 by rpki-client