$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa File: b029c412-754d-3db3-b3ab-d20f6b3bda34.roa (raw, json) Hash identifier: kxE3IfAl9PY0U4HIRu263vqqEN/bF5lZI+oojLarNNM= Subject key identifier: 7E:80:4D:E1:57:1B:96:03:2B:10:C3:1E:85:70:3B:1A:6F:A1:33:73 Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F4328584A1E2AA77702BB91AA2D3EF700 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 32097 IP address blocks: 72.18.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a7:77:02:bb:91:aa:2d:3e:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=8a4ef122-f779-41c9-bc1a-dcf6b2cbc3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:f8:8b:8b:86:5b:4d:38:d7:27:1a:c6:50: 80:af:0d:8b:40:91:db:3b:d4:ac:77:9f:3b:61:6f: 89:68:41:6c:0a:b9:4c:05:dd:90:17:da:77:91:3a: e5:b1:0f:f6:c0:e3:bb:bf:03:7f:4e:6a:e7:05:14: 51:44:bd:54:d6:5e:74:47:41:7f:e2:27:45:fd:1c: 0e:2a:dc:3a:9b:9c:cf:0f:f2:90:db:6f:c8:eb:12: b2:64:ae:35:14:b3:e7:0d:65:d9:42:da:9b:b5:30: 6d:58:5e:a3:a5:02:84:11:f7:37:a6:bb:ea:2f:95: 7c:90:3a:c1:8c:b3:ef:83:ad:84:b3:45:dd:63:76: 35:2e:60:d6:08:57:ef:10:1e:04:c6:40:14:cd:13: 8c:85:30:95:e0:a7:db:12:9d:e1:37:68:24:4e:a8: 16:4d:72:3f:11:bc:22:75:06:75:ad:41:df:21:fe: b2:6b:76:d1:d8:83:31:ac:77:8d:9e:62:11:3d:d7: 96:4a:e7:f0:10:ac:d7:fb:1b:7d:e3:e8:61:69:94: f4:25:49:a7:56:25:15:0e:0a:a3:c7:8a:e5:ab:5b: 89:23:35:a7:fc:44:bc:8e:86:99:3d:57:2d:e6:72: 1b:2a:db:cb:ce:92:8f:5b:12:d2:6e:47:36:16:50: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:80:4D:E1:57:1B:96:03:2B:10:C3:1E:85:70:3B:1A:6F:A1:33:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/b029c412-754d-3db3-b3ab-d20f6b3bda34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 72.18.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e8:c1:1d:18:ba:35:e8:51:7f:6b:2a:11:b8:b9:4a:1c:aa: a8:85:77:20:cf:9a:8c:9e:7a:90:f2:4f:d6:07:fd:2e:5a:64: 13:6c:34:8b:6a:31:27:a7:18:0d:dd:74:79:ff:ee:e0:bd:d3: 56:59:74:d4:59:dd:61:02:f3:62:93:4d:55:dd:c5:c9:f0:5b: 89:19:c0:a5:ef:9b:76:95:f0:50:7c:be:e6:60:34:5c:48:49: ec:8d:90:53:46:22:1e:ed:54:07:28:2e:81:5b:33:e8:2f:5d: 77:d3:10:6c:2c:27:59:e1:70:c3:a7:9d:dc:f4:c8:8c:73:81: 05:8a:6f:7a:4d:d7:88:13:24:d1:b4:e3:d4:6c:31:65:8d:a8: 46:f2:44:b7:39:65:6d:de:1b:78:1a:30:85:e4:8a:d9:ef:7f: 5f:72:c9:6c:a1:38:0d:68:41:4e:b3:72:ec:36:14:24:19:29: 7a:f0:44:11:98:0c:92:52:bb:f6:f3:33:54:0d:d0:7b:7f:59: 96:80:a2:b5:8e:fe:c5:16:d7:8e:2d:62:a1:6a:f8:2a:c5:76: af:da:ee:70:66:97:2e:9f:e6:f1:a6:b4:f3:49:69:ac:c6:e7: 30:8b:fc:37:ca:67:db:13:a6:f4:75:5e:d6:c3:7e:79:c2:45: 47:e1:94:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqd3AruRqi0+9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk OGE0ZWYxMjItZjc3OS00MWM5LWJjMWEtZGNmNmIyY2JjM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjb4i4uGW0041ycaxlCArw2LQJHbO9Ssd587 YW+JaEFsCrlMBd2QF9p3kTrlsQ/2wOO7vwN/TmrnBRRRRL1U1l50R0F/4idF/RwO Ktw6m5zPD/KQ22/I6xKyZK41FLPnDWXZQtqbtTBtWF6jpQKEEfc3prvqL5V8kDrB jLPvg62Es0XdY3Y1LmDWCFfvEB4ExkAUzROMhTCV4KfbEp3hN2gkTqgWTXI/Ebwi dQZ1rUHfIf6ya3bR2IMxrHeNnmIRPdeWSufwEKzX+xt94+hhaZT0JUmnViUVDgqj x4rlq1uJIzWn/ES8joaZPVct5nIbKtvLzpKPWxLSbkc2FlCuQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6ATeFXG5YDKxDDHoVwOxpvoTNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvYjAyOWM0MTItNzU0ZC0z ZGIzLWIzYWItZDIwZjZiM2JkYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTowR0YujXoUX9rKhG4uUocqqiFdyDPmoyeepDyT9YH/S5aZBNsNItq MSenGA3ddHn/7uC901ZZdNRZ3WEC82KTTVXdxcnwW4kZwKXvm3aV8FB8vuZgNFxI SeyNkFNGIh7tVAcoLoFbM+gvXXfTEGwsJ1nhcMOnndz0yIxzgQWKb3pN14gTJNG0 49RsMWWNqEbyRLc5ZW3eG3gaMIXkitnvf19yyWyhOA1oQU6zcuw2FCQZKXrwRBGY DJJSu/bzM1QN0Ht/WZaAorWO/sUW144tYqFq+CrFdq/a7nBmly6f5vGmtPNJaazG 5zCL/DfKZ9sTpvR1XtbDfnnCRUfhlP8= -----END CERTIFICATE-----Generated at Tue Jul 1 10:01:41 2025 by rpki-client