$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa File: 38f83ce5-2988-37ed-a3dd-524801d41b91.roa (raw, json) Hash identifier: j3Hx4j0Fkr4dsQKR+j1rqCnqGEIuPaCKNRf8LKmDoa4= Subject key identifier: 36:03:44:17:33:6B:E6:91:BF:B2:15:F5:BB:B1:EA:C2:2C:AF:78:78 Certificate issuer: /CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e Certificate serial: 010D0C9F4328584AE46116D16EF813489890C520 Authority key identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 393444 IP address blocks: 72.46.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:16:d1:6e:f8:13:48:98:90:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=16180955-df86-4b29-af01-c059e07d7073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:9b:13:af:b9:b9:ee:24:3b:7d:f1:e6:89: e5:f5:c3:7e:1e:e4:0e:1e:bf:e0:f9:d7:06:1e:5f: 32:1f:54:42:f6:75:c9:5c:b4:67:ea:a6:dc:b2:27: 1a:26:79:ca:d4:6f:d7:20:7d:b3:56:58:0d:ff:72: a1:99:42:1c:44:9f:90:fc:c9:d8:a7:20:0d:9c:1b: 27:a3:ad:ec:0f:46:75:e9:c6:8d:4e:4d:dd:28:56: c9:f0:16:48:63:5f:a7:30:91:47:ab:6e:f7:88:d7: 76:34:2f:c4:38:0b:ba:d5:94:b0:ee:fa:b7:74:64: 88:0d:e6:19:f2:b9:68:fc:29:f0:5d:90:38:13:5d: 35:08:97:cd:e5:51:3c:96:57:e0:6e:7b:31:34:0d: b4:8f:1d:73:17:38:8d:1d:57:14:cc:39:4f:b1:c1: 2e:7d:b4:ba:c4:84:9e:22:e5:fa:c8:87:4d:f4:72: 3f:b8:f0:f3:a6:eb:4f:85:0c:be:09:6b:c3:67:3b: e3:95:d0:c4:d4:7a:c4:db:d7:45:e3:bf:e5:5a:a1: c1:c8:a0:62:54:9b:49:39:9e:dc:6c:1b:77:c5:0b: 38:bd:9f:9f:c4:31:c1:91:a6:c9:3e:f6:1a:06:65: 65:3f:6b:3c:97:77:f9:3f:95:7f:ec:2c:5e:26:08: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:03:44:17:33:6B:E6:91:BF:B2:15:F5:BB:B1:EA:C2:2C:AF:78:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/38f83ce5-2988-37ed-a3dd-524801d41b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl X509v3 Authority Key Identifier: keyid:7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer sbgp-ipAddrBlock: critical IPv4: 72.46.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:4f:da:db:3c:57:ec:a6:1c:6a:6c:40:cc:e7:4a:4f:f7:0b: 99:12:df:42:c1:97:4b:e1:54:32:45:cd:57:95:ad:83:c0:65: 0e:38:92:a7:bc:f5:1b:01:75:03:4c:45:cd:9e:76:e0:78:19: 6d:bb:43:39:9b:4e:a6:56:1f:f9:a6:a6:18:54:9f:e3:62:c3: 01:b3:60:81:a7:6d:a0:f7:70:b2:86:5f:b4:d3:25:a3:f5:12: ee:26:45:49:f5:73:5c:27:b2:a8:22:2f:b1:66:0b:63:96:b8: 71:49:ec:c1:46:59:44:d7:5d:ce:49:0e:9f:30:51:3a:e3:d1: 7d:97:8a:99:32:7c:4e:c2:44:61:90:cf:0c:e5:ad:cb:86:98: 2b:74:cc:d3:63:cc:ee:11:55:1c:af:e9:b1:31:ea:f8:a7:b3: 4d:56:a3:0d:8f:93:f5:b4:66:bc:9f:01:80:38:24:1d:db:43: 9d:66:34:55:14:6d:29:ec:45:ba:52:3c:d2:7f:17:16:d4:3b: 52:53:3a:bb:54:30:8e:fb:d4:a3:ca:99:ef:fd:66:00:45:57: 0b:31:e5:57:c1:79:a0:7d:1f:01:8f:12:17:ad:6a:58:30:df: c1:13:df:5b:db:f3:da:a1:e8:73:5d:1f:6e:2b:63:32:71:4d: 26:57:d2:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRbRbvgTSJiQxSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiNzA3YWItYjRhNi00MmRlLWE3YmMtNjExNWNhNGIz YjNlMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MTYxODA5NTUtZGY4Ni00YjI5LWFmMDEtYzA1OWUwN2Q3MDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCCbE6+5ue4kO33x5onl9cN+HuQOHr/g+dcG Hl8yH1RC9nXJXLRn6qbcsicaJnnK1G/XIH2zVlgN/3KhmUIcRJ+Q/MnYpyANnBsn o63sD0Z16caNTk3dKFbJ8BZIY1+nMJFHq273iNd2NC/EOAu61ZSw7vq3dGSIDeYZ 8rlo/CnwXZA4E101CJfN5VE8llfgbnsxNA20jx1zFziNHVcUzDlPscEufbS6xISe IuX6yIdN9HI/uPDzputPhQy+CWvDZzvjldDE1HrE29dF47/lWqHByKBiVJtJOZ7c bBt3xQs4vZ+fxDHBkabJPvYaBmVlP2s8l3f5P5V/7CxeJghuNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYDRBcza+aRv7IV9bux6sIsr3h4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kM2I3 MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1Y2E0YjNiM2UvMzhmODNjZTUtMjk4OC0z N2VkLWEzZGQtNTI0ODAxZDQxYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDNiNzA3YWItYjRhNi00MmRlLWE3 YmMtNjExNWNhNGIzYjNlL2QzYjcwN2FiLWI0YTYtNDJkZS1hN2JjLTYxMTVjYTRi M2IzZS5jcmwwHwYDVR0jBBgwFoAUfJHGfxtHvmz7MjJQ7wdSafRVrsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kM2I3MDdhYi1iNGE2LTQyZGUtYTdiYy02MTE1 Y2E0YjNiM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESC5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpP2ts8V+ymHGpsQMznSk/3C5kS30LBl0vhVDJFzVeVrYPAZQ44kqe8 9RsBdQNMRc2eduB4GW27QzmbTqZWH/mmphhUn+NiwwGzYIGnbaD3cLKGX7TTJaP1 Eu4mRUn1c1wnsqgiL7FmC2OWuHFJ7MFGWUTXXc5JDp8wUTrj0X2XipkyfE7CRGGQ zwzlrcuGmCt0zNNjzO4RVRyv6bEx6vins01Wow2Pk/W0ZryfAYA4JB3bQ51mNFUU bSnsRbpSPNJ/FxbUO1JTOrtUMI771KPKme/9ZgBFVwsx5VfBeaB9HwGPEhetalgw 38ET31vb89qh6HNdH24rYzJxTSZX0iQ= -----END CERTIFICATE-----Generated at Sat Aug 23 22:14:20 2025 by rpki-client