$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e2894d67-f8d1-375a-9f79-28ec44c203fa.roa File: e2894d67-f8d1-375a-9f79-28ec44c203fa.roa (raw, json) Hash identifier: LR5MruvD5ht64AOP4VOYaDEDsFY/dhnkjMKUSHIV4MY= Subject key identifier: 4F:BC:56:FB:B5:C2:83:E1:00:B3:3C:20:D0:55:13:36:02:C0:A3:34 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584AECC12BC8F5BBB0336FDDF200 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e2894d67-f8d1-375a-9f79-28ec44c203fa.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 21859 IP address blocks: 128.14.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2b:c8:f5:bb:b0:33:6f:dd:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=040b325a-4e8c-437b-98ef-9a5185ba881e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:6e:b1:a0:46:e9:6b:b9:81:0d:8e:95:75: 80:d2:72:88:67:ac:36:6d:a0:07:7c:7b:86:02:f4: 13:d2:8a:8b:fb:1e:5b:ad:85:f4:71:1f:b6:8a:33: cf:ae:88:28:2d:ac:91:57:bb:2e:a8:05:df:7a:9a: 12:02:b6:6a:75:ae:2b:a1:ca:a8:37:00:af:12:bf: c3:ed:f4:f7:c7:ae:0b:3e:3f:62:79:0f:e9:ed:3a: c5:36:fe:ab:f2:c8:2b:b0:d2:98:0e:91:1f:48:c7: 49:83:fe:86:84:f9:56:d3:b2:e8:cb:a3:73:75:7d: 19:34:ff:a4:8d:e0:1a:1f:44:57:07:cd:4b:79:02: 34:28:5c:3f:0d:12:98:7b:58:d6:98:4e:55:a4:58: 86:8b:d8:1f:2e:2d:c2:3e:82:81:37:95:b6:90:0f: dc:4e:9f:21:42:ec:e3:bd:65:66:6a:3d:2b:9b:60: dc:20:fe:d5:2f:6a:f9:03:72:02:9a:65:9a:76:f2: 7c:b8:ea:2c:40:b8:4f:3f:0a:66:73:d8:2e:ad:c7: fb:59:34:d5:39:28:98:e0:a4:ac:2f:28:8c:4d:18: d7:a7:f0:00:35:8f:63:28:c0:f0:52:4d:26:21:20: 13:c3:3a:cf:25:9c:8f:fc:70:9c:17:a8:aa:7d:61: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BC:56:FB:B5:C2:83:E1:00:B3:3C:20:D0:55:13:36:02:C0:A3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e2894d67-f8d1-375a-9f79-28ec44c203fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e1:72:bd:8e:4e:28:4b:1b:4e:ce:89:f1:22:ee:ad:df:22: f6:8b:34:dd:0e:33:de:1e:2f:60:da:ed:02:4e:45:e2:73:b9: 1e:0a:06:38:68:be:96:1e:d3:68:9f:ab:f7:75:4d:4e:c0:d9: 08:a4:7b:90:fa:bd:fc:a9:af:f9:49:a4:4d:31:60:43:1f:68: bf:2a:49:e9:a5:25:8d:88:97:d6:f0:64:9a:b2:28:11:0f:20: ef:38:09:c5:63:8b:51:97:fa:e5:16:bf:92:67:c8:79:95:91: c2:4d:8c:f4:97:5b:31:35:94:8a:22:cf:26:20:e0:c4:d8:dc: 7f:3f:be:71:e8:b0:f2:39:a8:a0:ca:08:8a:91:68:46:a3:2c: 8d:8d:33:c3:dd:0a:30:48:34:ee:42:7e:ba:97:a1:76:97:e1: ba:6d:7e:40:6f:92:30:85:fe:2d:0b:fd:8f:cc:e3:69:7c:24: fd:d0:c3:ca:79:80:77:9e:f6:05:1b:b4:08:0c:aa:f0:be:f9: 0e:25:1c:9f:ea:99:db:74:84:87:71:b3:92:17:b2:93:43:08: 1d:f8:ca:fe:be:2d:29:b8:6d:02:97:66:b8:f6:c6:93:10:9f: 29:0a:de:11:c8:cf:b6:2c:69:36:c1:76:a9:10:6b:03:0c:1b: e4:fa:ab:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSvI9buwM2/d8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDQwYjMyNWEtNGU4Yy00MzdiLTk4ZWYtOWE1MTg1YmE4ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8FusaBG6Wu5gQ2OlXWA0nKIZ6w2baAHfHuG AvQT0oqL+x5brYX0cR+2ijPProgoLayRV7suqAXfepoSArZqda4rocqoNwCvEr/D 7fT3x64LPj9ieQ/p7TrFNv6r8sgrsNKYDpEfSMdJg/6GhPlW07Loy6NzdX0ZNP+k jeAaH0RXB81LeQI0KFw/DRKYe1jWmE5VpFiGi9gfLi3CPoKBN5W2kA/cTp8hQuzj vWVmaj0rm2DcIP7VL2r5A3ICmmWadvJ8uOosQLhPPwpmc9gurcf7WTTVOSiY4KSs LyiMTRjXp/AANY9jKMDwUk0mISATwzrPJZyP/HCcF6iqfWEDAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+8Vvu1woPhALM8INBVEzYCwKM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZTI4OTRkNjctZjhkMS0z NzVhLTlmNzktMjhlYzQ0YzIwM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDhcr2OTihLG07OifEi7q3fIvaLNN0OM94eL2Da7QJOReJzuR4KBjho vpYe02ifq/d1TU7A2Qike5D6vfypr/lJpE0xYEMfaL8qSemlJY2Il9bwZJqyKBEP IO84CcVji1GX+uUWv5JnyHmVkcJNjPSXWzE1lIoizyYg4MTY3H8/vnHosPI5qKDK CIqRaEajLI2NM8PdCjBINO5CfrqXoXaX4bptfkBvkjCF/i0L/Y/M42l8JP3Qw8p5 gHee9gUbtAgMqvC++Q4lHJ/qmdt0hIdxs5IXspNDCB34yv6+LSm4bQKXZrj2xpMQ nykK3hHIz7YsaTbBdqkQawMMG+T6qys= -----END CERTIFICATE-----Generated at Sat Aug 23 21:04:55 2025 by rpki-client