$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa File: 4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa (raw, json) Hash identifier: dp7/9ItbBzxm+nTf4FHQWcGOzhBIYu9OJdMyP4viH3Y= Subject key identifier: 25:31:29:06:91:24:22:DD:F1:0A:D6:FA:3D:BB:11:C2:9C:46:11:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A549B12DB02B1C91663C83A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 30036 IP address blocks: 72.255.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:12:db:02:b1:c9:16:63:c8:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=392bcb9d-c5e2-4749-913e-cacca6b99760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:0f:67:46:58:e0:db:47:a9:cc:cd:1e:92: ce:a7:c7:33:6c:b2:b7:a3:66:5d:44:30:b2:3c:ab: 09:1f:5b:09:db:97:58:b6:ca:d6:82:71:96:38:0c: e4:cb:1f:ca:e6:d9:6c:c7:13:07:72:2c:a9:a1:62: ba:58:9a:42:fe:8f:ab:2d:b7:7f:17:ea:8c:bc:83: cf:6f:ad:7e:de:71:d7:93:58:be:73:6e:4b:db:82: 20:89:af:11:d6:87:58:fa:bf:7a:e3:c9:77:e1:bc: c2:13:a9:87:4a:81:a4:d4:b6:77:6b:f9:99:85:51: 61:cd:66:00:b0:24:72:1a:b3:34:8c:8d:33:ee:3d: 0d:39:af:93:47:07:24:58:2e:50:86:13:c1:77:f1: 70:df:16:dc:aa:ab:41:8b:38:9a:c5:ee:3d:f3:9a: c5:9e:d8:2e:e2:d1:0b:94:21:24:ec:02:8f:ee:db: 13:f2:63:67:32:da:46:80:f7:51:41:d8:17:ca:a1: b8:63:0a:e7:59:9c:b5:84:4f:07:2f:34:66:97:69: 62:12:f1:e6:cc:b8:da:38:0a:8e:a9:89:5e:df:8d: 20:1b:68:83:07:65:3c:0a:41:1d:05:05:29:15:bb: 0f:22:24:4f:60:6f:a0:b9:b8:15:c5:1c:04:4f:9c: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:29:06:91:24:22:DD:F1:0A:D6:FA:3D:BB:11:C2:9C:46:11:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4df751e4-aa4f-3e8c-80b5-9aba8ebe0e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:54:e0:bc:44:cc:18:2d:c7:4b:0e:a8:22:f6:21:e5:29:0f: 4b:22:7e:53:a4:e7:63:62:74:6b:21:00:d8:ee:8d:55:e8:16: e4:f6:3f:5f:3a:82:c4:7c:32:6d:58:5f:bc:fc:e6:f4:9a:61: 97:00:6c:f0:f5:f5:6e:e6:e9:fc:11:6d:6d:ac:0a:bc:42:62: 49:d5:74:d9:2c:6a:ae:d6:3e:91:14:f0:13:2d:59:f2:46:7a: 73:94:e3:c6:3e:db:95:a4:db:a1:e3:a8:da:43:1f:3f:47:5e: da:88:1e:22:56:69:af:45:25:9d:b2:25:ea:7d:48:2c:4e:99: 2c:b2:73:04:25:b8:c9:e7:bc:65:25:28:e7:dd:3a:7b:08:8a: e3:58:55:6e:c2:35:e6:4c:82:5e:7a:44:8c:88:e3:bb:26:24: 89:2d:d6:e1:e0:01:be:df:33:ae:74:04:d0:25:42:d2:7b:43: 00:f7:da:f0:86:69:2d:48:01:46:ec:d8:2a:6a:0f:5c:a1:0b: 1d:b7:b8:67:13:54:a2:35:6b:d7:9d:3c:ad:9b:4a:be:55:6b: 88:ea:1b:d7:07:be:3b:00:3b:b1:41:05:80:7d:de:a8:c2:73: d6:46:3f:8f:5b:dd:15:de:c4:b6:1b:87:08:92:d5:33:68:94: f7:a7:be:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxLbArHJFmPIOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk MzkyYmNiOWQtYzVlMi00NzQ5LTkxM2UtY2FjY2E2Yjk5NzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAMPZ0ZY4NtHqczNHpLOp8czbLK3o2ZdRDCy PKsJH1sJ25dYtsrWgnGWOAzkyx/K5tlsxxMHciypoWK6WJpC/o+rLbd/F+qMvIPP b61+3nHXk1i+c25L24Igia8R1odY+r9648l34bzCE6mHSoGk1LZ3a/mZhVFhzWYA sCRyGrM0jI0z7j0NOa+TRwckWC5QhhPBd/Fw3xbcqqtBiziaxe4985rFntgu4tEL lCEk7AKP7tsT8mNnMtpGgPdRQdgXyqG4YwrnWZy1hE8HLzRml2liEvHmzLjaOAqO qYle340gG2iDB2U8CkEdBQUpFbsPIiRPYG+gubgVxRwET5wAgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUxKQaRJCLd8QrW+j27EcKcRhG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGRmNzUxZTQtYWE0Zi0z ZThjLTgwYjUtOWFiYThlYmUwZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlU4LxEzBgtx0sOqCL2IeUpD0siflOk52NidGshANjujVXoFuT2P186 gsR8Mm1YX7z85vSaYZcAbPD19W7m6fwRbW2sCrxCYknVdNksaq7WPpEU8BMtWfJG enOU48Y+25Wk26HjqNpDHz9HXtqIHiJWaa9FJZ2yJep9SCxOmSyycwQluMnnvGUl KOfdOnsIiuNYVW7CNeZMgl56RIyI47smJIkt1uHgAb7fM650BNAlQtJ7QwD32vCG aS1IAUbs2CpqD1yhCx23uGcTVKI1a9edPK2bSr5Va4jqG9cHvjsAO7FBBYB93qjC c9ZGP49b3RXexLYbhwiS1TNolPenvsY= -----END CERTIFICATE-----Generated at Mon Jun 30 13:20:43 2025 by rpki-client