$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f67f281c-80a5-332c-92a7-f440054718bd.roa File: f67f281c-80a5-332c-92a7-f440054718bd.roa (raw, json) Hash identifier: bUIgiR1dgV5A9Wa8Cj30y6UIlYGovXiupgU1rrpnkxM= Subject key identifier: BA:EA:41:C3:C0:90:1E:77:E2:38:D4:D5:7D:84:1F:58:38:3D:4A:7C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849DC8FA2D577C995F3B7328680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f67f281c-80a5-332c-92a7-f440054718bd.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 30036 IP address blocks: 72.255.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:a2:d5:77:c9:95:f3:b7:32:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=a76d9027-23b5-4f35-a3a6-2d7ac0ac7353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:fb:e3:f8:bb:33:0c:d3:be:78:56:a4:56: 98:b1:51:2f:9c:ac:a7:e1:93:5e:b0:be:c4:75:65: c1:84:85:1b:4c:6a:62:66:25:94:18:2b:59:46:f3: 6f:7f:8c:b0:22:5c:04:e1:fb:a7:70:57:69:f4:fb: 98:e6:59:1b:b5:62:01:4c:df:45:c5:d7:da:d6:32: 1a:c1:8c:a6:74:86:3b:2c:11:c7:80:2d:80:ed:65: d5:9e:80:4a:62:09:dd:da:90:e5:6d:41:5f:b2:22: 6d:6b:23:d9:64:eb:21:10:1c:5b:fa:8e:ed:d7:5e: 39:6d:d4:78:8f:68:0c:4d:ad:c4:23:5a:98:83:dd: 03:42:ee:8c:2c:0e:ca:b4:a8:07:a7:1b:d5:47:fb: 6e:bc:58:bc:5d:60:27:75:bb:db:54:50:6f:95:f7: 76:18:2b:c2:4a:ab:f6:0a:15:00:b2:fe:97:58:d2: 6a:f5:ec:1e:04:46:e5:ad:11:23:83:24:3f:6d:af: 7f:9d:1e:52:e2:42:68:3d:80:26:2f:60:73:c3:0d: f7:e4:53:b6:31:b3:40:50:04:a4:17:6f:a5:59:2d: 59:c7:95:c7:aa:0e:95:bc:d4:9f:a5:f5:00:7c:d6: 87:a2:dd:74:b8:81:f9:df:0b:2b:b2:85:5f:90:25: e5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EA:41:C3:C0:90:1E:77:E2:38:D4:D5:7D:84:1F:58:38:3D:4A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f67f281c-80a5-332c-92a7-f440054718bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 72.255.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:58:06:b2:d6:c2:e6:43:72:4e:eb:a8:1e:91:59:31:6e:d0: 77:18:7b:54:79:a7:96:a5:19:bc:9e:d5:62:fb:1a:55:2f:ab: 24:3c:a2:21:e3:57:07:b5:75:62:4d:4d:e6:af:e7:65:5f:af: a6:9d:2b:1c:69:c7:08:6d:54:1d:5e:fd:7e:27:65:6c:53:1e: 7f:38:2d:7c:69:32:a5:57:98:3c:63:54:99:98:ab:75:c7:7d: 3e:9d:84:16:d4:aa:6d:4b:d6:c8:2a:fe:05:dc:5c:bd:62:39: 6d:70:28:5d:3b:28:d0:1a:18:0a:32:8b:c7:01:60:04:47:90: 8a:09:3e:75:dc:fa:c1:25:88:25:e3:ea:19:72:15:0e:6c:6f: 15:30:95:f7:9f:db:80:5b:77:08:6d:49:d5:c6:4a:58:43:4a: 18:6f:eb:d5:ef:0f:4e:f3:ef:31:a4:35:78:ce:20:c7:14:d5: 73:19:09:98:6c:30:e8:63:a7:21:b3:3c:dd:34:55:c2:17:a5: 78:db:ef:f4:41:c2:09:18:81:11:25:28:5b:41:65:8b:b6:cc: e6:1c:d5:ba:1c:72:b5:fb:bd:4f:a9:de:cd:b8:98:d8:79:e0: 79:cf:30:d0:17:5e:03:c8:68:49:1f:fa:3d:73:2b:78:94:1b: 10:9c:8c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj6LVd8mV87cyhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YTc2ZDkwMjctMjNiNS00ZjM1LWEzYTYtMmQ3YWMwYWM3MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqn74/i7MwzTvnhWpFaYsVEvnKyn4ZNesL7E dWXBhIUbTGpiZiWUGCtZRvNvf4ywIlwE4funcFdp9PuY5lkbtWIBTN9Fxdfa1jIa wYymdIY7LBHHgC2A7WXVnoBKYgnd2pDlbUFfsiJtayPZZOshEBxb+o7t1145bdR4 j2gMTa3EI1qYg90DQu6MLA7KtKgHpxvVR/tuvFi8XWAndbvbVFBvlfd2GCvCSqv2 ChUAsv6XWNJq9eweBEblrREjgyQ/ba9/nR5S4kJoPYAmL2Bzww335FO2MbNAUASk F2+lWS1Zx5XHqg6VvNSfpfUAfNaHot10uIH53wsrsoVfkCXljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrqQcPAkB534jjU1X2EH1g4PUp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjY3ZjI4MWMtODBhNS0z MzJjLTkyYTctZjQ0MDA1NDcxOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASP94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtYBrLWwuZDck7rqB6RWTFu0HcYe1R5p5alGbye1WL7GlUvqyQ8oiHj Vwe1dWJNTeav52Vfr6adKxxpxwhtVB1e/X4nZWxTHn84LXxpMqVXmDxjVJmYq3XH fT6dhBbUqm1L1sgq/gXcXL1iOW1wKF07KNAaGAoyi8cBYARHkIoJPnXc+sEliCXj 6hlyFQ5sbxUwlfef24BbdwhtSdXGSlhDShhv69XvD07z7zGkNXjOIMcU1XMZCZhs MOhjpyGzPN00VcIXpXjb7/RBwgkYgRElKFtBZYu2zOYc1boccrX7vU+p3s24mNh5 4HnPMNAXXgPIaEkf+j1zK3iUGxCcjII= -----END CERTIFICATE-----Generated at Mon Jun 30 14:25:14 2025 by rpki-client