$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa File: 0047fcfd-7aec-34bb-aede-a399b404d33d.roa (raw, json) Hash identifier: MK3JhM8GiIQyHbkUhlAZ0Z43uMsRd92Ux91d18rRa6g= Subject key identifier: B4:36:25:68:41:D0:B7:2B:03:37:2B:A7:FE:AB:65:07:B2:9B:0C:D4 Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F4328584ADA9BC975AE203A77C1C15380 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 35916 IP address blocks: 172.111.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c9:75:ae:20:3a:77:c1:c1:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=dc6ea9aa-c290-4a50-8346-bcff571e63ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:83:4d:a6:45:cf:84:b4:db:a9:ce:b0:55:04: 6a:19:6d:1c:db:ef:6f:81:6f:77:f9:41:15:02:ac: b1:f9:4b:60:6b:8b:bc:ed:db:14:60:f2:de:7b:4d: 1c:56:66:43:c9:0e:dc:b7:4e:a5:98:c4:9c:2e:cf: 94:4b:f8:a1:99:5c:a7:c2:b3:4b:7d:a8:ea:5a:4f: 84:c9:af:44:85:a7:bc:63:28:ae:47:9b:ca:6b:61: ff:09:44:eb:d9:9e:ee:2c:87:51:42:df:a3:df:43: 25:d5:1e:ec:52:72:6d:11:7a:7d:69:a2:90:9b:2a: 16:d2:1c:a0:5b:99:31:2c:5d:b7:96:c5:98:df:02: aa:a9:4f:a6:2f:df:7b:42:b8:a6:62:cc:6e:80:e4: 56:4b:a2:82:45:de:18:70:f4:1f:69:4c:3d:0d:50: 44:d7:30:3a:a1:bb:4c:69:66:72:d9:0f:f1:7a:84: 0f:e4:1b:6a:b2:72:85:dd:56:90:a0:48:d7:04:a4: 98:cd:a3:cb:79:0f:f8:b6:22:ce:73:65:0b:01:69: 0c:7c:d4:f8:d7:f5:f5:78:fe:e3:d3:84:53:56:21: e8:72:38:b3:b7:c1:cb:9f:c6:4c:e5:ec:dd:59:f5: 86:6f:54:24:ee:0d:59:5f:6b:c0:c5:6e:37:f3:2e: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:36:25:68:41:D0:B7:2B:03:37:2B:A7:FE:AB:65:07:B2:9B:0C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/0047fcfd-7aec-34bb-aede-a399b404d33d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 172.111.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:65:11:23:4c:03:ca:70:da:b2:b2:61:df:df:c0:5d:31:55: cb:8f:5b:f3:9b:0d:de:02:dc:24:49:8b:bb:0a:71:b1:71:4c: de:1f:50:f0:d5:18:5b:4b:c0:23:0d:22:5d:6a:f9:03:de:6b: cd:2c:ab:b2:bb:02:ab:b1:02:8b:80:44:37:be:9d:6a:70:70: 82:af:0a:c7:c9:37:b9:39:22:c8:15:94:ea:e0:f5:8d:6d:16: d3:83:28:b5:12:78:3b:fd:9b:0e:15:1f:16:f9:5b:2a:2e:f5: e5:37:83:17:17:65:4f:b0:36:7a:b5:b0:16:e5:09:23:fd:bd: 0a:af:1b:7f:b3:9a:34:3c:a8:a1:bc:3f:06:35:bb:a0:87:5d: 9d:e8:fa:59:b6:b1:85:48:35:4b:18:d6:c9:71:82:66:05:ae: e1:5b:05:6d:17:23:ed:7c:76:6a:c6:00:ca:3e:81:6d:2d:f1: 04:53:eb:96:22:34:64:c5:cb:d4:b7:22:e2:57:0a:ef:53:50: bc:9b:f9:2a:fe:78:1f:7c:0f:0f:45:7f:1a:67:54:6d:08:e1: df:4a:ea:40:9f:fa:1f:17:fb:6c:c8:cf:76:01:5d:e1:dc:0c: 47:07:02:55:d4:05:80:cd:f4:e8:4f:81:f7:e6:82:6d:df:bb: 9f:2a:e6:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8l1riA6d8HBU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ZGM2ZWE5YWEtYzI5MC00YTUwLTgzNDYtYmNmZjU3MWU2M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoNNpkXPhLTbqc6wVQRqGW0c2+9vgW93+UEV Aqyx+Utga4u87dsUYPLee00cVmZDyQ7ct06lmMScLs+US/ihmVynwrNLfajqWk+E ya9Ehae8YyiuR5vKa2H/CUTr2Z7uLIdRQt+j30Ml1R7sUnJtEXp9aaKQmyoW0hyg W5kxLF23lsWY3wKqqU+mL997QrimYsxugORWS6KCRd4YcPQfaUw9DVBE1zA6obtM aWZy2Q/xeoQP5BtqsnKF3VaQoEjXBKSYzaPLeQ/4tiLOc2ULAWkMfNT41/X1eP7j 04RTViHocjizt8HLn8ZM5ezdWfWGb1Qk7g1ZX2vAxW438y5P7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ2JWhB0LcrAzcrp/6rZQeymwzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvMDA0N2ZjZmQtN2FlYy0z NGJiLWFlZGUtYTM5OWI0MDRkMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG85MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGplESNMA8pw2rKyYd/fwF0xVcuPW/ObDd4C3CRJi7sKcbFxTN4fUPDV GFtLwCMNIl1q+QPea80sq7K7AquxAouARDe+nWpwcIKvCsfJN7k5IsgVlOrg9Y1t FtODKLUSeDv9mw4VHxb5Wyou9eU3gxcXZU+wNnq1sBblCSP9vQqvG3+zmjQ8qKG8 PwY1u6CHXZ3o+lm2sYVINUsY1slxgmYFruFbBW0XI+18dmrGAMo+gW0t8QRT65Yi NGTFy9S3IuJXCu9TULyb+Sr+eB98Dw9FfxpnVG0I4d9K6kCf+h8X+2zIz3YBXeHc DEcHAlXUBYDN9OhPgffmgm3fu58q5kw= -----END CERTIFICATE-----Generated at Sat Aug 23 21:12:59 2025 by rpki-client