$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa File: ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa (raw, json) Hash identifier: AINmFaEPQaOfaODo5Ay/+rdiispdc7+PnG/pu1rAl0E= Subject key identifier: 87:8C:74:AA:86:20:8F:A1:82:4C:17:9E:07:53:11:AD:99:6C:DE:D1 Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584A03A54A9F18E815F2B3C90000 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 397287 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4a:9f:18:e8:15:f2:b3:c9:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=6e86025d-b676-4bd6-bf41-0191324b5342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:3a:59:8a:40:81:68:d0:db:62:15:cb:ac: 6d:7f:8a:19:91:f6:8f:77:29:65:b2:24:22:02:77: 3a:1f:30:40:d4:17:93:73:f1:9a:a4:cb:d2:04:b0: 55:06:22:b9:49:e4:da:88:14:04:ac:9b:33:7f:25: 56:6b:86:87:c3:c0:96:56:db:ef:73:03:f3:fc:c3: d2:d7:5f:c5:fc:26:eb:e4:8b:e5:c0:e1:25:4e:b8: 13:01:f2:fd:56:b3:05:53:b9:ae:37:d1:55:05:01: d8:ea:2d:a9:ee:31:f4:44:3b:4b:fc:80:57:6f:1f: c6:88:c0:cb:da:ec:8a:e7:a7:2a:7d:f5:79:49:c9: 73:e8:1b:9b:3f:02:a8:a1:bd:60:8a:7f:6c:b1:71: aa:7a:8f:ff:d9:7e:46:f1:2e:7d:55:37:4e:d0:b4: 04:a9:09:3a:7a:88:89:3a:57:e3:64:d1:aa:32:e2: a3:98:29:06:46:f9:d7:c5:70:d6:36:0c:d1:d8:02: a8:7f:de:ce:38:1b:48:36:aa:cd:30:1e:a3:90:60: 99:66:ee:77:56:82:7d:5d:b8:9d:43:38:d7:f3:66: 4d:24:c7:37:64:28:70:31:62:63:0a:90:7d:54:e8: 11:2e:ce:ff:65:ca:59:88:53:34:73:22:f7:c5:a7: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8C:74:AA:86:20:8F:A1:82:4C:17:9E:07:53:11:AD:99:6C:DE:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:73:a1:2f:30:e4:ec:74:d7:00:9a:e1:a3:9c:f4:0f:07:0e: c3:c4:ce:29:bd:6a:d3:57:44:6a:59:0d:66:2c:e6:c4:30:0d: a4:5e:3f:d6:33:03:d3:ae:80:a2:bd:fe:26:ae:8c:7d:35:7e: 15:b0:01:74:a1:9a:39:ad:13:92:9b:d2:ea:c0:ee:66:fe:16: f4:46:7f:e9:cd:4b:a1:a4:8b:9f:5b:6f:10:75:d3:a6:2e:36: cf:5c:9c:99:07:12:94:76:d5:3e:6c:fc:42:8a:60:3b:de:36: a9:b8:7d:10:f8:bf:e6:13:50:4f:f1:32:38:a3:50:2d:93:26: d8:df:0c:61:fd:cf:28:58:ca:a5:d8:a9:e9:c8:c6:e8:8e:d5: 13:e8:33:c4:e2:36:60:b7:e0:4d:c7:56:98:85:53:41:b2:4e: 58:d1:0b:c8:07:de:47:74:57:f8:c6:b3:da:51:08:66:80:c2: 6b:d7:a3:bd:e2:85:98:be:79:2d:49:6f:54:ce:a0:47:8b:ea: b6:f9:2d:77:87:7f:8b:9a:12:04:59:66:45:9f:72:d2:77:40: cd:9c:ec:d5:06:fe:6d:f0:7f:59:b0:fc:df:5b:c5:db:1d:27: 56:8c:98:59:10:65:62:03:5b:85:7a:b2:4d:f9:5e:a6:4d:6d: 1c:0f:ef:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUqfGOgV8rPJAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NmU4NjAyNWQtYjY3Ni00YmQ2LWJmNDEtMDE5MTMyNGI1MzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBM6WYpAgWjQ22IVy6xtf4oZkfaPdyllsiQi Anc6HzBA1BeTc/GapMvSBLBVBiK5SeTaiBQErJszfyVWa4aHw8CWVtvvcwPz/MPS 11/F/Cbr5IvlwOElTrgTAfL9VrMFU7muN9FVBQHY6i2p7jH0RDtL/IBXbx/GiMDL 2uyK56cqffV5Sclz6BubPwKoob1gin9ssXGqeo//2X5G8S59VTdO0LQEqQk6eoiJ OlfjZNGqMuKjmCkGRvnXxXDWNgzR2AKof97OOBtINqrNMB6jkGCZZu53VoJ9Xbid QzjX82ZNJMc3ZChwMWJjCpB9VOgRLs7/ZcpZiFM0cyL3xaf2MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeMdKqGII+hgkwXngdTEa2ZbN7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvY2E3YTVmZTktNjA4ZC0z OTcwLThhZTktYzExNmFlOTU1ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNzoS8w5Ox01wCa4aOc9A8HDsPEzim9atNXRGpZDWYs5sQwDaReP9Yz A9OugKK9/iaujH01fhWwAXShmjmtE5Kb0urA7mb+FvRGf+nNS6Gki59bbxB106Yu Ns9cnJkHEpR21T5s/EKKYDveNqm4fRD4v+YTUE/xMjijUC2TJtjfDGH9zyhYyqXY qenIxuiO1RPoM8TiNmC34E3HVpiFU0GyTljRC8gH3kd0V/jGs9pRCGaAwmvXo73i hZi+eS1Jb1TOoEeL6rb5LXeHf4uaEgRZZkWfctJ3QM2c7NUG/m3wf1mw/N9bxdsd J1aMmFkQZWIDW4V6sk35XqZNbRwP73I= -----END CERTIFICATE-----Generated at Tue Jul 1 16:00:09 2025 by rpki-client