$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/2a6cfdb2-edb2-39bf-8076-af67fbcb6fb2.roa File: 2a6cfdb2-edb2-39bf-8076-af67fbcb6fb2.roa (raw, json) Hash identifier: CARJInwUYTdim1aPGPIoTid1oVOYT2JNFWwi07ErM8I= Subject key identifier: 66:87:22:B7:DB:4C:AA:F9:83:C5:BE:F6:2A:5F:80:BB:1E:FD:C9:1A Certificate issuer: /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Certificate serial: 010D0C9F4328584AEE44C5FF58C4BC14BACF5500 Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/2a6cfdb2-edb2-39bf-8076-af67fbcb6fb2.roa Signing time: Thu 21 Aug 2025 14:01:43 +0000 ROA not before: Thu 21 Aug 2025 14:01:43 +0000 ROA not after: Wed 19 Nov 2025 15:01:43 +0000 asID: 46320 IP address blocks: 216.234.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:44:c5:ff:58:c4:bc:14:ba:cf:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Validity Not Before: Aug 21 14:01:43 2025 GMT Not After : Nov 19 15:01:43 2025 GMT Subject: CN=1254c262-b507-46b2-a731-22e72e2365cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:27:ef:06:f6:2b:3c:0a:4e:68:da:01:1a: 54:2f:ff:56:4b:45:7c:dd:a4:8c:90:eb:f5:a3:d2: 22:c5:b2:ff:cb:2b:0f:47:fc:d8:eb:44:3b:4c:80: 7c:2c:eb:be:d0:7c:3a:73:11:0e:85:f7:f6:53:3d: c8:dc:10:f9:f9:28:7e:ea:36:7b:7a:9f:3f:65:82: 3f:d8:76:c0:09:de:96:86:01:6e:18:d1:55:e7:a4: 53:fc:62:4c:be:fd:07:b0:82:d5:19:e9:72:a4:e8: db:c1:ae:98:dc:2a:e8:f7:9f:04:34:22:5f:6a:eb: 14:d2:32:2d:c0:5e:0f:d5:0e:c2:b8:aa:b2:f1:93: 71:e8:15:de:23:59:f3:8b:a9:5c:40:a1:8b:79:7f: 18:ff:c3:37:ed:7d:5f:ac:9e:c3:21:fd:7e:a9:36: 9a:62:8d:88:1b:77:9c:b8:d0:ab:52:cb:1b:8b:28: 18:66:83:b9:5c:50:5b:ea:fc:01:99:3e:39:dd:91: f7:2c:07:d2:4b:3b:21:91:9d:1e:c6:bd:94:9d:3d: b1:a7:20:67:7a:ca:80:90:76:0d:c6:99:f7:6b:61: fd:73:75:a3:33:40:b6:03:0b:c6:2e:eb:ac:72:59: 80:26:55:ed:a0:ee:ad:36:1f:0c:42:a3:e8:90:62: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:87:22:B7:DB:4C:AA:F9:83:C5:BE:F6:2A:5F:80:BB:1E:FD:C9:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/2a6cfdb2-edb2-39bf-8076-af67fbcb6fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl X509v3 Authority Key Identifier: keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer sbgp-ipAddrBlock: critical IPv4: 216.234.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:33:5b:fe:c9:63:32:7e:ee:f7:a8:9d:9c:8f:e2:00:ba:58: 68:6c:60:f5:a7:ec:36:65:a9:3d:f2:73:97:56:62:b5:6a:ef: 2a:0e:8e:17:83:8b:42:b2:e9:16:4b:0f:9d:bd:d8:83:88:be: 22:b1:9a:17:90:ff:b0:6c:92:0e:08:24:b2:d1:51:02:79:9e: 13:30:3b:00:70:5b:c7:d8:e7:42:cf:1f:5b:65:56:4b:e9:09: 85:f2:ad:b5:38:21:88:3c:6a:f1:24:0d:b8:39:0d:4b:be:d7: 95:43:ce:0b:85:1e:20:ab:e9:74:b7:51:f1:c6:65:79:c5:4e: 70:11:4f:a6:2a:f4:82:d5:29:40:b6:18:a5:b6:8e:8a:4b:8b: ff:41:1d:41:cd:e2:39:6c:cd:29:43:c5:8c:e1:08:09:fc:c9: 9f:01:ac:89:64:6b:24:3d:1a:57:1c:56:30:d6:7e:84:2e:f7: ed:ad:9d:ae:73:a9:f9:27:91:c4:58:34:35:81:c6:e7:c2:0a: bb:73:68:1a:49:5c:20:81:6f:e9:38:bc:e7:38:b3:71:0b:10: 4e:b8:6d:55:d4:8c:37:9e:b5:99:3b:94:07:0d:c7:ca:8c:0d: d4:10:70:6c:35:21:9f:f6:64:03:5e:46:4a:d7:6f:b7:e3:24: 3b:35:66:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruRMX/WMS8FLrPVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiMTczNDMtZDJmMS00OWNlLWJhOTItMjJmMTNjZmJj MGQwMB4XDTI1MDgyMTE0MDE0M1oXDTI1MTExOTE1MDE0M1owLzEtMCsGA1UEAxMk MTI1NGMyNjItYjUwNy00NmIyLWE3MzEtMjJlNzJlMjM2NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqMn7wb2KzwKTmjaARpUL/9WS0V83aSMkOv1 o9IixbL/yysPR/zY60Q7TIB8LOu+0Hw6cxEOhff2Uz3I3BD5+Sh+6jZ7ep8/ZYI/ 2HbACd6WhgFuGNFV56RT/GJMvv0HsILVGelypOjbwa6Y3Cro958ENCJfausU0jIt wF4P1Q7CuKqy8ZNx6BXeI1nzi6lcQKGLeX8Y/8M37X1frJ7DIf1+qTaaYo2IG3ec uNCrUssbiygYZoO5XFBb6vwBmT453ZH3LAfSSzshkZ0exr2UnT2xpyBnesqAkHYN xpn3a2H9c3WjM0C2AwvGLuusclmAJlXtoO6tNh8MQqPokGLJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaHIrfbTKr5g8W+9ipfgLse/ckaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIx NzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYxM2NmYmMwZDAvMmE2Y2ZkYjItZWRiMi0z OWJmLTgwNzYtYWY2N2ZiY2I2ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzJiMTczNDMtZDJmMS00OWNlLWJh OTItMjJmMTNjZmJjMGQwLzcyYjE3MzQzLWQyZjEtNDljZS1iYTkyLTIyZjEzY2Zi YzBkMC5jcmwwHwYDVR0jBBgwFoAUoybRn8spmYSXTnzi26U8HqczzBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIxNzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYx M2NmYmMwZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMzW/7JYzJ+7veonZyP4gC6WGhsYPWn7DZlqT3yc5dWYrVq7yoOjheD i0Ky6RZLD5292IOIviKxmheQ/7Bskg4IJLLRUQJ5nhMwOwBwW8fY50LPH1tlVkvp CYXyrbU4IYg8avEkDbg5DUu+15VDzguFHiCr6XS3UfHGZXnFTnART6Yq9ILVKUC2 GKW2jopLi/9BHUHN4jlszSlDxYzhCAn8yZ8BrIlkayQ9GlccVjDWfoQu9+2tna5z qfknkcRYNDWBxufCCrtzaBpJXCCBb+k4vOc4s3ELEE64bVXUjDeetZk7lAcNx8qM DdQQcGw1IZ/2ZANeRkrXb7fjJDs1ZqA= -----END CERTIFICATE-----Generated at Sun Aug 24 00:29:43 2025 by rpki-client