$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/646c5cf2-6f09-397c-aa85-5164d230c503.roa File: 646c5cf2-6f09-397c-aa85-5164d230c503.roa (raw, json) Hash identifier: JgruOt9CK1hnWZKNR7/DFKLtsuu3wqQIhN2R19RtwBk= Subject key identifier: 0A:15:EB:F0:8B:75:71:10:DE:E4:41:39:CE:4F:C6:C5:57:3E:D1:1F Certificate issuer: /CN=044f7659-113e-4b3c-be9d-200821bc9a5b Certificate serial: 010D0C9F4328584A58CAFF3AE650E38A9FB0FD80 Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/646c5cf2-6f09-397c-aa85-5164d230c503.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 27364 IP address blocks: 72.23.0.0/19 maxlen: 19 72.23.32.0/19 maxlen: 19 72.23.64.0/19 maxlen: 19 72.23.96.0/19 maxlen: 19 72.23.128.0/19 maxlen: 19 72.23.160.0/19 maxlen: 19 72.23.192.0/19 maxlen: 19 72.23.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ca:ff:3a:e6:50:e3:8a:9f:b0:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=7b5bf943-7198-486c-8712-0a307931b7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4b:14:0f:d8:98:28:ad:86:6e:b2:2b:09:1d: 49:60:16:51:1f:24:ed:07:7f:a7:38:e3:9b:21:fc: 8c:fa:dc:3c:ab:ce:48:47:90:cb:7d:05:43:85:df: 6b:17:f8:83:dc:56:98:8a:57:71:2d:1d:ce:94:64: 7d:87:7e:ac:d6:99:6e:81:fc:6f:8a:30:80:e4:9c: 56:ca:0f:49:94:d6:4f:2b:68:d9:b9:da:79:5c:9d: 25:c2:3f:cb:db:f7:6d:f6:d9:da:f5:08:3f:4b:c6: 80:e4:16:8c:48:65:e5:66:2a:84:3c:b7:7e:60:f9: 34:ab:9d:6f:ea:d2:f0:5d:97:4a:e8:97:f8:aa:1c: af:57:1b:e8:ea:f5:14:55:49:eb:a2:2f:b0:00:7d: fd:9c:55:c2:20:ce:41:a2:fc:b8:8c:73:d3:68:27: 5f:c8:72:f8:93:70:70:5e:cb:f4:6b:dc:24:eb:12: 40:62:a9:66:d3:28:56:4b:27:b5:38:43:4c:37:73: 1e:99:8b:f9:a7:e8:2c:d7:f9:a3:15:c7:c0:3f:07: 09:e0:3a:f5:0b:c4:3c:39:33:e6:09:44:e0:66:37: 2d:3c:b4:91:a3:59:17:02:ab:b0:f8:7c:8a:ad:da: ff:87:7c:f8:3d:47:17:79:1b:f3:6c:04:7f:75:3c: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:15:EB:F0:8B:75:71:10:DE:E4:41:39:CE:4F:C6:C5:57:3E:D1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/646c5cf2-6f09-397c-aa85-5164d230c503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl X509v3 Authority Key Identifier: keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer sbgp-ipAddrBlock: critical IPv4: 72.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:4e:c2:7f:0d:92:90:06:ea:41:e4:8e:86:8a:b3:ba:b6:5f: ca:31:fe:11:f7:72:bb:dc:37:5d:e5:bf:53:08:50:6a:ce:12: b6:cc:fd:88:09:0a:dd:49:06:de:e1:02:a5:ac:a4:ab:63:a5: d0:4c:3a:ad:d8:49:6a:30:6f:d9:0f:03:bd:48:6e:21:27:34: 9c:a8:6f:9b:03:6b:b7:bc:ed:73:7d:c6:a8:3f:73:da:73:22: 58:34:a3:a0:9a:fb:12:e1:88:9f:81:73:00:85:7d:56:6d:d5: 7d:f2:55:86:79:a3:0c:d4:be:51:d5:67:cc:38:b0:33:ed:75: 1f:05:d5:42:ae:9b:6d:c4:8a:48:c3:f1:b3:9d:07:17:61:33: 8a:7e:73:8a:e1:44:90:b5:8b:25:1e:4c:dc:0a:b8:59:23:22: b4:46:9a:f7:d9:50:be:1a:96:2d:ca:12:10:7f:08:74:51:69: 5c:a5:9b:11:f2:fb:c6:24:89:01:7d:39:54:09:1e:e1:6f:29: 5b:df:4d:29:f1:11:d4:59:28:ee:0a:09:f0:bf:28:2a:0b:ce: 32:d2:53:f0:63:97:8b:f6:b6:7d:19:9f:b0:e3:cd:22:ba:51: de:a3:e6:52:cc:2e:19:4f:3a:48:3c:d6:44:aa:34:40:61:17: 7e:1a:a2:16 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpYyv865lDjip+w/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ0Zjc2NTktMTEzZS00YjNjLWJlOWQtMjAwODIxYmM5 YTViMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk N2I1YmY5NDMtNzE5OC00ODZjLTg3MTItMGEzMDc5MzFiN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0sUD9iYKK2GbrIrCR1JYBZRHyTtB3+nOOOb IfyM+tw8q85IR5DLfQVDhd9rF/iD3FaYildxLR3OlGR9h36s1plugfxvijCA5JxW yg9JlNZPK2jZudp5XJ0lwj/L2/dt9tna9Qg/S8aA5BaMSGXlZiqEPLd+YPk0q51v 6tLwXZdK6Jf4qhyvVxvo6vUUVUnroi+wAH39nFXCIM5Bovy4jHPTaCdfyHL4k3Bw Xsv0a9wk6xJAYqlm0yhWSye1OENMN3MemYv5p+gs1/mjFcfAPwcJ4Dr1C8Q8OTPm CUTgZjctPLSRo1kXAquw+HyKrdr/h3z4PUcXeRvzbAR/dTyGjQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAoV6/CLdXEQ3uRBOc5PxsVXPtEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNDRm NzY1OS0xMTNlLTRiM2MtYmU5ZC0yMDA4MjFiYzlhNWIvNjQ2YzVjZjItNmYwOS0z OTdjLWFhODUtNTE2NGQyMzBjNTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDQ0Zjc2NTktMTEzZS00YjNjLWJl OWQtMjAwODIxYmM5YTViLzA0NGY3NjU5LTExM2UtNGIzYy1iZTlkLTIwMDgyMWJj OWE1Yi5jcmwwHwYDVR0jBBgwFoAUw7o5dR9Nje8RX/3hFz1+7KaBgM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNDRmNzY1OS0xMTNlLTRiM2MtYmU5ZC0yMDA4 MjFiYzlhNWIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASBcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdE7Cfw2SkAbqQeSOhoqzurZfyjH+Efdyu9w3XeW/UwhQas4Stsz9iAkK 3UkG3uECpaykq2Ol0Ew6rdhJajBv2Q8DvUhuISc0nKhvmwNrt7ztc33GqD9z2nMi WDSjoJr7EuGIn4FzAIV9Vm3VffJVhnmjDNS+UdVnzDiwM+11HwXVQq6bbcSKSMPx s50HF2Ezin5ziuFEkLWLJR5M3Aq4WSMitEaa99lQvhqWLcoSEH8IdFFpXKWbEfL7 xiSJAX05VAke4W8pW99NKfER1Fko7goJ8L8oKgvOMtJT8GOXi/a2fRmfsOPNIrpR 3qPmUswuGU86SDzWRKo0QGEXfhqiFg== -----END CERTIFICATE-----Generated at Mon Jun 30 20:30:56 2025 by rpki-client