$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa File: ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa (raw, json) Hash identifier: O5hcZuM3uJ8riW75h0qUupc6cOWkMa+dyWsZsh6H7Nc= Subject key identifier: 1F:39:9D:0F:A0:D0:F1:3B:40:6D:89:B4:25:A0:BD:4C:E9:F5:30:9E Certificate issuer: /CN=117f0c8a-705e-440d-8160-752196eb04a2 Certificate serial: 010D0C9F4328584AD7D12812CF90CFF04E219B40 Authority key identifier: AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 72.22.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:28:12:cf:90:cf:f0:4e:21:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f0c8a-705e-440d-8160-752196eb04a2 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=cdd97bbb-6074-4ef4-b09a-9f47ec8de429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:b8:1c:35:85:4c:67:73:48:ae:53:1d:e5: a8:60:db:ab:97:42:be:56:67:e5:c5:a2:fa:5e:21: 54:b5:41:cd:dc:0e:8f:4f:5f:1b:16:bb:21:ea:5e: 56:17:83:61:30:8d:8c:c0:70:60:99:b8:54:ea:00: 2c:1a:59:7f:7d:67:44:c2:09:d0:20:e2:5a:82:dd: 4c:8c:69:5f:0b:1b:bc:a8:aa:6a:c4:1c:65:26:1d: f3:2c:39:24:9d:fb:a7:e2:1e:a9:2e:af:56:f6:e9: 1f:09:2f:eb:88:dd:86:2f:20:e2:6f:44:13:06:63: 57:68:e5:0d:a0:05:f1:31:f8:ad:18:2b:55:2d:e1: 3b:0f:45:c8:ab:c3:5a:a8:7a:f6:ee:a2:41:11:26: e0:29:db:60:0b:52:bf:bb:3f:48:e4:a9:2e:1b:fa: 12:16:dc:0c:9d:68:a1:f5:67:22:f1:be:26:45:d2: 66:6a:1b:1b:52:19:bc:88:f7:d0:c4:ae:bd:18:01: 85:ae:c9:8d:44:7c:61:06:21:41:fe:1f:3f:6a:ca: b0:99:48:3f:56:f2:23:76:e2:a6:6f:63:6f:2e:6c: d1:a2:ca:b9:80:23:25:6f:d4:0d:e5:a4:14:de:e5: 87:9f:84:3b:0e:85:bb:76:aa:65:4c:b4:bd:f2:6f: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:39:9D:0F:A0:D0:F1:3B:40:6D:89:B4:25:A0:BD:4C:E9:F5:30:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/ca6d5a6a-5a06-35d8-b5a0-d1c358877a89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2/117f0c8a-705e-440d-8160-752196eb04a2.crl X509v3 Authority Key Identifier: keyid:AD:1F:95:C8:65:81:E7:95:DA:8C:65:54:2B:44:6A:2E:92:C8:F7:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/117f0c8a-705e-440d-8160-752196eb04a2.cer sbgp-ipAddrBlock: critical IPv4: 72.22.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:04:2a:b5:a6:47:9e:81:de:98:a0:9e:b1:df:7f:07:c6:af: 5e:0e:9a:04:59:3b:9d:f0:6b:06:71:9f:fa:87:25:e8:d9:29: b0:5e:d6:72:e4:a4:4c:a8:c6:76:86:95:de:cf:c7:00:64:33: 8b:34:a3:69:43:9c:89:f3:0a:a6:e9:de:b5:87:04:c7:c5:5d: e1:bf:39:8d:6d:ba:3d:ee:41:13:e1:ae:d2:37:eb:3c:38:99: 5b:ee:9e:ab:c3:a4:6c:6b:b7:94:08:3c:cf:24:be:29:fa:fc: 27:3e:1a:8a:d5:85:9e:28:f6:53:a2:70:97:34:71:5a:9a:04: 0b:2c:5f:c5:c8:d8:cf:bb:7f:fa:d2:9c:fd:a1:4d:04:f6:13: c9:3d:cf:10:38:47:c4:54:d7:4b:76:2d:73:2c:5e:e5:03:5f: b4:49:2d:38:fd:d5:e7:bb:86:b6:37:eb:0b:0c:7b:24:df:42: 24:f2:57:7a:cd:72:c3:c5:17:06:f6:da:c3:86:1d:a2:01:17: 24:55:38:eb:75:bd:91:c2:21:9d:98:9a:b6:a0:96:db:5a:05: d3:65:16:a8:63:7c:02:27:71:a0:41:14:6d:54:6c:5a:ad:11: 75:2a:d8:24:0a:78:5a:34:5f:b3:97:93:de:10:8e:ee:ad:e4: 97:9e:70:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SgSz5DP8E4hm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTE3ZjBjOGEtNzA1ZS00NDBkLTgxNjAtNzUyMTk2ZWIw NGEyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk Y2RkOTdiYmItNjA3NC00ZWY0LWIwOWEtOWY0N2VjOGRlNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRS4HDWFTGdzSK5THeWoYNurl0K+VmflxaL6 XiFUtUHN3A6PT18bFrsh6l5WF4NhMI2MwHBgmbhU6gAsGll/fWdEwgnQIOJagt1M jGlfCxu8qKpqxBxlJh3zLDkknfun4h6pLq9W9ukfCS/riN2GLyDib0QTBmNXaOUN oAXxMfitGCtVLeE7D0XIq8NaqHr27qJBESbgKdtgC1K/uz9I5KkuG/oSFtwMnWih 9Wci8b4mRdJmahsbUhm8iPfQxK69GAGFrsmNRHxhBiFB/h8/asqwmUg/VvIjduKm b2NvLmzRosq5gCMlb9QN5aQU3uWHn4Q7DoW7dqplTLS98m9YtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB85nQ+g0PE7QG2JtCWgvUzp9TCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMTdm MGM4YS03MDVlLTQ0MGQtODE2MC03NTIxOTZlYjA0YTIvY2E2ZDVhNmEtNWEwNi0z NWQ4LWI1YTAtZDFjMzU4ODc3YTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTE3ZjBjOGEtNzA1ZS00NDBkLTgx NjAtNzUyMTk2ZWIwNGEyLzExN2YwYzhhLTcwNWUtNDQwZC04MTYwLTc1MjE5NmVi MDRhMi5jcmwwHwYDVR0jBBgwFoAUrR+VyGWB55XajGVUK0RqLpLI99gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMTdmMGM4YS03MDVlLTQ0MGQtODE2MC03NTIx OTZlYjA0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMEKrWmR56B3pignrHffwfGr14OmgRZO53wawZxn/qHJejZKbBe1nLk pEyoxnaGld7PxwBkM4s0o2lDnInzCqbp3rWHBMfFXeG/OY1tuj3uQRPhrtI36zw4 mVvunqvDpGxrt5QIPM8kvin6/Cc+GorVhZ4o9lOicJc0cVqaBAssX8XI2M+7f/rS nP2hTQT2E8k9zxA4R8RU10t2LXMsXuUDX7RJLTj91ee7hrY36wsMeyTfQiTyV3rN csPFFwb22sOGHaIBFyRVOOt1vZHCIZ2YmraglttaBdNlFqhjfAIncaBBFG1UbFqt EXUq2CQKeFo0X7OXk94Qju6t5JeecD0= -----END CERTIFICATE-----Generated at Sat Aug 23 06:41:03 2025 by rpki-client