$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa File: 21dde924-2599-39f1-b3dd-3e7314f62d6d.roa (raw, json) Hash identifier: PbZf5MYOtk5WscmHSnNaITm6GooLa7qpheLPDE4Sqrg= Subject key identifier: 3B:10:A5:42:0E:39:B5:9D:6E:CF:2B:17:1C:02:EC:38:DF:68:70:AB Certificate issuer: /CN=ab98592a-7218-439c-b165-34810fd16d71 Certificate serial: 010D0C9F4328584AE4610F5E55CA05DD9B988F80 Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 3300 IP address blocks: 72.29.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0f:5e:55:ca:05:dd:9b:98:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=4b6b60bf-3930-40d4-9aff-2e910c560881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:d2:43:43:2d:60:46:5e:f2:9e:a2:e0:cb: 78:a9:90:7d:b3:a0:09:48:12:a7:3e:f6:41:84:a0: fc:cc:cd:6d:af:c4:cc:8c:62:96:26:a9:4d:32:b3: f0:31:ba:34:55:92:dd:bf:dd:6f:b3:b5:a7:de:ef: e9:9d:ab:16:b3:5b:ec:ff:2e:1e:47:c4:b9:0c:23: e4:be:52:46:62:a5:9c:1a:01:70:e4:d3:ed:17:29: e1:5b:11:ef:7b:b0:ee:2b:5e:43:69:9a:7e:6d:d3: 57:7d:95:c2:e4:19:72:d8:f3:6d:7f:5e:57:08:0c: 77:1f:10:99:73:c4:91:54:c0:91:87:ce:d3:22:15: ed:66:1b:55:09:4d:92:77:d5:ef:07:3c:7d:5a:65: ec:dd:8d:a3:13:42:2d:e1:9e:ef:ff:24:f9:1a:00: bd:37:78:02:60:c1:d1:50:3a:20:e1:06:4f:05:2e: 08:03:dc:ef:91:70:03:94:7b:b8:2c:e4:c1:d0:be: ba:fd:3c:2c:11:f5:f7:e7:c8:c5:6a:86:3f:b2:99: 21:78:86:15:5a:c1:8d:df:59:b1:bd:e0:1f:70:07: 7c:62:08:be:ee:c8:22:22:e9:cf:38:82:b7:64:69: 30:83:11:2a:a8:f9:48:4f:88:2e:0d:af:fb:4c:82: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:10:A5:42:0E:39:B5:9D:6E:CF:2B:17:1C:02:EC:38:DF:68:70:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/21dde924-2599-39f1-b3dd-3e7314f62d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl X509v3 Authority Key Identifier: keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer sbgp-ipAddrBlock: critical IPv4: 72.29.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:39:2f:e8:eb:0c:89:c7:06:5b:58:26:de:6a:98:8a:ac:f0: ed:7c:46:bb:b6:34:cc:97:94:41:2d:6c:94:a9:41:b7:21:7e: 87:3c:60:f8:c7:59:b6:a0:d8:c5:8e:d4:6e:66:3b:90:59:46: 5d:30:1a:f4:17:dc:a3:d1:c2:19:92:5e:08:94:be:ec:8a:ac: 23:a3:b4:49:cb:38:fa:d9:77:79:29:69:d0:a6:0f:31:34:cb: 79:b9:1d:24:17:90:af:79:d2:3f:b5:26:63:ae:ab:93:83:94: c8:3b:e1:54:e6:c2:a3:06:65:89:b3:9d:c7:4e:3e:90:d5:95: 51:a5:69:a9:d2:00:4b:2c:04:07:95:90:8c:61:57:3b:20:f2: 55:42:cf:8c:4f:5f:ed:b8:0c:b2:7d:7b:b9:ae:81:42:53:4d: 81:9f:3b:38:bb:f0:49:72:f9:2a:e5:48:03:c9:83:1a:45:d0: 7c:82:65:4b:a6:84:3d:7d:c7:04:44:d2:4b:37:33:52:6f:9e: f4:30:8a:64:92:1c:ba:88:8d:88:e0:42:62:0e:88:92:25:e8: c2:ba:0f:cf:8b:ac:01:14:46:2d:1f:6d:3a:d7:15:64:28:a2: c2:08:7e:28:7a:c0:bd:d1:89:e7:aa:44:56:0f:5f:a7:49:51: 63:34:47:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ9eVcoF3ZuYj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2 ZDcxMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NGI2YjYwYmYtMzkzMC00MGQ0LTlhZmYtMmU5MTBjNTYwODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurvSQ0MtYEZe8p6i4Mt4qZB9s6AJSBKnPvZB hKD8zM1tr8TMjGKWJqlNMrPwMbo0VZLdv91vs7Wn3u/pnasWs1vs/y4eR8S5DCPk vlJGYqWcGgFw5NPtFynhWxHve7DuK15DaZp+bdNXfZXC5Bly2PNtf15XCAx3HxCZ c8SRVMCRh87TIhXtZhtVCU2Sd9XvBzx9WmXs3Y2jE0It4Z7v/yT5GgC9N3gCYMHR UDog4QZPBS4IA9zvkXADlHu4LOTB0L66/TwsEfX358jFaoY/spkheIYVWsGN31mx veAfcAd8Ygi+7sgiIunPOIK3ZGkwgxEqqPlIT4guDa/7TIJ4twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsQpUIOObWdbs8rFxwC7DjfaHCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4 NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvMjFkZGU5MjQtMjU5OS0z OWYxLWIzZGQtM2U3MzE0ZjYyZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESB2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ5L+jrDInHBltYJt5qmIqs8O18Rru2NMyXlEEtbJSpQbchfoc8YPjH Wbag2MWO1G5mO5BZRl0wGvQX3KPRwhmSXgiUvuyKrCOjtEnLOPrZd3kpadCmDzE0 y3m5HSQXkK950j+1JmOuq5ODlMg74VTmwqMGZYmzncdOPpDVlVGlaanSAEssBAeV kIxhVzsg8lVCz4xPX+24DLJ9e7mugUJTTYGfOzi78Ely+SrlSAPJgxpF0HyCZUum hD19xwRE0ks3M1JvnvQwimSSHLqIjYjgQmIOiJIl6MK6D8+LrAEURi0fbTrXFWQo osIIfih6wL3RieeqRFYPX6dJUWM0R1U= -----END CERTIFICATE-----Generated at Sun Aug 24 01:24:14 2025 by rpki-client