$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa File: ab8aed72-03d9-3336-891c-beaf500c0618.roa (raw, json) Hash identifier: 1IJPK9KwxAyFwjMsvzkndO/cfG0cp9/uPNsp579HVpA= Subject key identifier: 5B:87:8C:28:26:B6:25:DF:A7:AE:AD:90:9B:05:8B:86:14:93:6A:D6 Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584AE4610FD73B38AD6B33D43740 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 32524 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0f:d7:3b:38:ad:6b:33:d4:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=7dddafeb-3853-4d82-81ec-be03db59d458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:65:38:cd:ea:08:e7:fd:7c:00:d4:9e:82: e3:7f:50:7b:d4:8d:10:ea:e1:92:30:61:7b:c2:84: d8:c6:c6:97:f6:df:f1:48:71:e5:42:86:ee:0f:27: 88:3a:0c:b0:46:4e:db:0c:11:78:8e:33:1c:17:b5: 3f:02:69:ba:d7:c1:61:c2:d8:05:41:82:2c:c3:ad: b2:1f:d8:28:0c:7a:03:c1:8a:f0:c6:35:0f:24:51: 82:25:ef:bf:78:49:8c:9e:de:a0:e2:5d:b3:56:ed: 3d:4f:d4:56:fc:19:f7:0c:d6:73:ac:71:7e:3a:81: b1:59:be:5a:38:22:f3:04:8f:43:f5:09:a3:cb:47: 2c:72:73:85:5c:a4:af:6e:7a:3a:66:8e:34:8d:af: c1:c5:13:d1:54:11:62:e4:8c:1b:9c:65:90:1d:4d: 77:6d:e3:f1:51:01:da:17:d8:dd:e6:8a:76:26:11: a3:8d:1c:53:de:3b:95:56:9a:70:fd:84:f7:7c:fe: 1a:c2:89:db:c4:31:a3:36:be:1f:8b:60:c5:28:01: 46:36:7e:e0:ce:33:af:83:99:5b:d1:65:4d:b5:4d: 6d:6d:18:13:e5:a9:0a:d9:71:c7:35:c3:67:7a:4f: 2c:82:45:1b:83:27:6b:e0:4a:f0:4a:75:39:d4:62: 36:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:87:8C:28:26:B6:25:DF:A7:AE:AD:90:9B:05:8B:86:14:93:6A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ab8aed72-03d9-3336-891c-beaf500c0618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ff:d0:d4:ef:9c:c1:5f:c6:9d:52:6d:d2:77:6d:29:f2:f5: 7f:ad:3d:be:70:8a:d8:5d:16:b8:a2:e5:e9:b5:57:9a:c4:9a: 29:76:c4:f3:c8:f8:fe:dd:37:6b:41:ba:bf:29:3e:3a:61:cb: 10:e7:ce:8b:37:43:3e:22:18:68:4f:5d:09:09:25:db:0f:8c: 02:86:29:ad:d2:46:ce:01:d9:f8:68:3c:b4:8e:35:d5:d3:9e: 50:af:2f:60:4d:50:e6:0f:57:d2:d2:6c:18:b6:7b:f5:02:1e: ca:bd:60:bd:25:8f:ab:16:ae:9d:bb:26:4a:fb:35:81:a5:7c: 8d:5a:4b:b8:39:03:59:26:ff:ac:f9:b3:c6:a1:72:cb:1d:84: ce:f7:99:ca:68:72:8b:5a:27:03:d4:77:02:25:a3:dc:ab:66: a3:be:c0:ca:fb:b1:19:31:37:bd:75:97:9c:ed:71:31:3d:c2: d1:a7:a9:a7:1f:3b:c0:e7:91:20:6c:1a:50:c3:08:a4:7c:8c: 28:8a:97:f0:d3:19:f6:bb:19:04:5d:f9:82:84:da:29:dc:13: 32:fd:72:8a:b5:59:65:e1:03:0a:73:f6:f5:88:ee:ae:fb:8b: c5:31:91:f8:11:39:34:a7:0d:c5:54:69:60:e5:a1:c9:c1:36: bc:55:14:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ/XOzitazPUN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk N2RkZGFmZWItMzg1My00ZDgyLTgxZWMtYmUwM2RiNTlkNDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUhlOM3qCOf9fADUnoLjf1B71I0Q6uGSMGF7 woTYxsaX9t/xSHHlQobuDyeIOgywRk7bDBF4jjMcF7U/Amm618FhwtgFQYIsw62y H9goDHoDwYrwxjUPJFGCJe+/eEmMnt6g4l2zVu09T9RW/Bn3DNZzrHF+OoGxWb5a OCLzBI9D9Qmjy0cscnOFXKSvbno6Zo40ja/BxRPRVBFi5IwbnGWQHU13bePxUQHa F9jd5op2JhGjjRxT3juVVppw/YT3fP4awonbxDGjNr4fi2DFKAFGNn7gzjOvg5lb 0WVNtU1tbRgT5akK2XHHNcNnek8sgkUbgydr4ErwSnU51GI2zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuHjCgmtiXfp66tkJsFi4YUk2rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvYWI4YWVkNzItMDNkOS0z MzM2LTg5MWMtYmVhZjUwMGMwNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr/0NTvnMFfxp1SbdJ3bSny9X+tPb5withdFrii5em1V5rEmil2xPPI +P7dN2tBur8pPjphyxDnzos3Qz4iGGhPXQkJJdsPjAKGKa3SRs4B2fhoPLSONdXT nlCvL2BNUOYPV9LSbBi2e/UCHsq9YL0lj6sWrp27Jkr7NYGlfI1aS7g5A1km/6z5 s8ahcssdhM73mcpocotaJwPUdwIlo9yrZqO+wMr7sRkxN711l5ztcTE9wtGnqacf O8DnkSBsGlDDCKR8jCiKl/DTGfa7GQRd+YKE2incEzL9coq1WWXhAwpz9vWI7q77 i8UxkfgROTSnDcVUaWDlocnBNrxVFLs= -----END CERTIFICATE-----Generated at Sat Aug 23 22:12:16 2025 by rpki-client