$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/84a4a6f6-9f4b-397a-a064-06f849917dea.roa File: 84a4a6f6-9f4b-397a-a064-06f849917dea.roa (raw, json) Hash identifier: AxYsx/kZ0xQ++C86+0KP+472+XDJnmm/3zDbKRM9/xA= Subject key identifier: 87:45:CF:2C:FD:F4:86:E6:A6:26:A9:9C:62:C0:17:16:C1:4E:5D:75 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584A549B141793E813FF868A9FA0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/84a4a6f6-9f4b-397a-a064-06f849917dea.roa Signing time: Fri 27 Jun 2025 13:01:05 +0000 ROA not before: Fri 27 Jun 2025 13:01:05 +0000 ROA not after: Thu 25 Sep 2025 13:01:05 +0000 asID: 19905 IP address blocks: 72.255.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:9b:14:17:93:e8:13:ff:86:8a:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 27 13:01:05 2025 GMT Not After : Sep 25 13:01:05 2025 GMT Subject: CN=4a7f78d3-6d74-4ef0-a91d-e5dc284698c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:94:f5:d9:d6:c9:d6:4a:09:64:07:3e:66: 9e:84:47:b5:e3:a1:27:4a:50:d6:93:a6:99:fb:80: d3:6b:a5:7e:b7:9a:78:ee:1b:e1:29:32:d1:07:b2: 1b:57:7d:5c:20:d6:07:2d:2d:ba:ba:31:e1:b7:41: e0:0d:4c:6b:cc:6f:bb:f7:0a:bf:c6:b3:5b:04:73: 53:05:78:05:33:31:f4:7e:9e:da:95:13:30:74:06: 72:91:6f:67:92:2a:aa:2e:5d:66:dc:df:7b:ba:91: c9:25:2b:17:ec:c7:35:5f:bd:d0:79:3e:cd:a7:10: cd:7b:8d:17:68:a4:b8:69:e6:86:42:88:97:75:6f: f9:2b:b2:f4:de:00:73:2e:9c:93:51:a2:91:9b:7e: 80:8c:46:ec:d4:50:2a:62:4c:c8:79:3d:6d:af:ca: 5c:87:c0:dc:4d:20:72:ea:23:44:90:80:7d:da:68: 57:8e:b1:75:9d:a2:83:82:fa:a2:35:c3:4d:2d:f5: 67:84:a1:4d:fd:c2:0c:bd:18:83:34:61:8c:1f:19: 64:22:90:fe:d7:aa:fa:df:5a:86:31:77:a6:77:35: 71:97:84:37:7e:0b:68:54:77:1f:87:e2:20:5c:10: db:4d:a2:8f:4c:35:92:ae:15:2a:37:6c:f9:0f:d8: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:45:CF:2C:FD:F4:86:E6:A6:26:A9:9C:62:C0:17:16:C1:4E:5D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/84a4a6f6-9f4b-397a-a064-06f849917dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:57:f0:f9:3a:58:42:18:66:bb:4d:6d:c9:9a:7d:a3:ec:13: 9c:36:62:a3:3e:a8:d6:3f:7e:a2:7f:f0:7f:9f:80:58:0f:0b: ab:a7:82:b3:93:53:14:63:5e:18:97:7d:b4:75:8c:a1:db:b4: af:0b:e9:76:79:5a:1d:85:35:54:f7:30:04:87:98:2d:68:e4: 37:7d:15:b8:5d:b1:de:3b:0a:17:23:a5:40:f4:3b:3e:4d:f8: ca:b3:e4:ec:f5:fc:ed:00:3b:20:49:0f:81:13:9d:0a:17:c7: 54:db:ba:10:22:44:a5:36:86:46:7f:c6:c8:b0:78:98:ca:99: cc:ba:fd:10:03:95:dd:fc:32:c4:28:a0:4b:40:9c:31:d0:a0: 1c:32:9b:e3:79:58:60:2e:b6:ff:13:96:bf:66:b8:20:32:35: 29:2d:14:9d:c9:79:69:b2:36:1f:b2:5e:93:a4:51:36:67:64: 8f:de:d1:1b:c8:61:de:e1:af:b0:03:f1:ff:60:cc:73:82:39: 21:e2:9e:cb:87:3f:b1:72:2e:3b:51:53:67:73:03:ce:64:57: 13:9b:be:90:33:07:b8:7d:41:7e:73:c3:47:d6:67:0f:9b:be: 49:6b:78:c3:02:36:62:23:be:be:aa:a9:b5:02:20:97:2e:b3: 50:5a:b8:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxQXk+gT/4aKn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk NGE3Zjc4ZDMtNmQ3NC00ZWYwLWE5MWQtZTVkYzI4NDY5OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZuU9dnWydZKCWQHPmaehEe146EnSlDWk6aZ +4DTa6V+t5p47hvhKTLRB7IbV31cINYHLS26ujHht0HgDUxrzG+79wq/xrNbBHNT BXgFMzH0fp7alRMwdAZykW9nkiqqLl1m3N97upHJJSsX7Mc1X73QeT7NpxDNe40X aKS4aeaGQoiXdW/5K7L03gBzLpyTUaKRm36AjEbs1FAqYkzIeT1tr8pch8DcTSBy 6iNEkIB92mhXjrF1naKDgvqiNcNNLfVnhKFN/cIMvRiDNGGMHxlkIpD+16r631qG MXemdzVxl4Q3fgtoVHcfh+IgXBDbTaKPTDWSrhUqN2z5D9g3lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdFzyz99IbmpiapnGLAFxbBTl11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODRhNGE2ZjYtOWY0Yi0z OTdhLWEwNjQtMDZmODQ5OTE3ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBX8Pk6WEIYZrtNbcmafaPsE5w2YqM+qNY/fqJ/8H+fgFgPC6ungrOT UxRjXhiXfbR1jKHbtK8L6XZ5Wh2FNVT3MASHmC1o5Dd9Fbhdsd47ChcjpUD0Oz5N +Mqz5Oz1/O0AOyBJD4ETnQoXx1TbuhAiRKU2hkZ/xsiweJjKmcy6/RADld38MsQo oEtAnDHQoBwym+N5WGAutv8Tlr9muCAyNSktFJ3JeWmyNh+yXpOkUTZnZI/e0RvI Yd7hr7AD8f9gzHOCOSHinsuHP7FyLjtRU2dzA85kVxObvpAzB7h9QX5zw0fWZw+b vklreMMCNmIjvr6qqbUCIJcus1BauB0= -----END CERTIFICATE-----Generated at Tue Jul 1 09:10:19 2025 by rpki-client