$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa File: aaf529f7-7b6d-3be9-978f-88e20d77046a.roa (raw, json) Hash identifier: sPyWbtcol1Y0u/9WSCaIe91qmtDOHtEvodNUccGlU+4= Subject key identifier: FD:22:E3:E9:BA:5B:A8:AA:B6:8A:E5:92:17:C1:CF:DD:12:A9:9E:FD Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584ADC01002617727701E02F1D40 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 23316 IP address blocks: 72.37.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:01:00:26:17:72:77:01:e0:2f:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=fe4d4ef1-211e-4d2d-9bb9-845245849c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:29:35:f1:76:f9:ab:13:ee:1b:24:dc:cb: 1a:8f:7d:da:9a:71:41:5c:63:c3:23:e2:9e:b7:d1: 50:39:55:f9:79:f4:62:a8:0b:56:09:2c:f0:c0:27: f7:7c:88:b9:82:c1:ee:ba:2a:48:fe:90:67:73:ef: b5:86:ca:cd:e2:f0:21:e4:91:36:1a:22:2b:0b:9f: 6d:b0:1f:4f:b5:a9:58:15:1a:62:31:41:7a:e8:f0: 9d:89:43:fe:54:2a:e8:1e:1b:df:1a:7d:f0:6e:e1: 5c:ac:12:b2:55:3c:37:f7:97:71:2a:26:03:a8:8a: c0:98:51:a7:b3:dc:ee:56:20:a1:ed:d5:2b:10:96: f9:40:95:3f:28:c9:a3:8b:5d:a3:ea:58:d1:dc:bf: 95:d9:5b:df:68:a7:c4:c9:de:b7:ba:5b:96:05:da: dd:76:8a:0e:8c:16:ac:81:32:72:fa:01:f0:3f:95: fd:09:d1:04:e3:9c:a8:6f:4c:4c:dd:c0:fa:4a:cd: 13:97:45:76:c2:ab:e0:03:d4:9d:5f:7f:b9:af:26: d7:b4:34:43:da:ff:6a:7b:c5:92:59:34:ce:b3:bc: 0e:a9:6b:ed:f6:ec:12:7f:df:17:94:05:3a:58:6f: cd:79:76:fa:10:c4:68:1d:f3:ba:69:12:f3:fc:bc: 2a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:22:E3:E9:BA:5B:A8:AA:B6:8A:E5:92:17:C1:CF:DD:12:A9:9E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/aaf529f7-7b6d-3be9-978f-88e20d77046a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c4:38:f7:dc:b8:a6:f7:e2:9c:8d:b9:52:06:be:a8:0f:fb: 5c:7e:6f:67:7e:97:7c:e0:3a:1a:8d:7e:9c:7a:2a:23:c5:bd: e9:77:ff:91:aa:97:60:98:d9:17:cd:50:e3:da:88:3c:bc:2c: a2:3f:4c:c5:51:5b:aa:40:bf:b7:ba:a4:39:0a:42:8f:cb:2e: 80:c7:ee:74:7c:f8:f5:a6:ff:43:36:d6:52:a6:88:ed:5c:31: 04:06:cb:3e:b0:4f:56:8e:db:a5:07:91:7f:4e:4a:65:b7:18: 82:f2:2b:de:47:32:7f:96:67:14:0d:9b:69:3f:7a:f2:84:99: 3e:ed:1c:54:73:27:3d:bc:11:25:ba:4b:ba:29:0e:05:e2:71: bf:34:f4:b3:9b:8c:97:3a:2c:98:ed:a2:a6:f3:3f:f8:90:24: 5f:9d:45:8f:12:06:c2:4b:f3:ba:bf:96:e1:e7:36:67:19:f2: a6:a6:0f:dd:03:42:02:af:cc:eb:bc:ec:16:a9:10:e4:d8:1e: 16:f1:10:cb:3f:f2:fc:a9:09:be:6c:69:e2:77:31:14:84:1f: 2e:c1:5f:d6:b0:41:92:f7:1f:41:2a:7a:5e:6c:db:c3:78:b5: 83:47:9f:ce:2b:6b:09:17:6e:dc:a9:fc:3c:23:41:62:b3:2e: f3:38:75:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAQAmF3J3AeAvHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk ZmU0ZDRlZjEtMjExZS00ZDJkLTliYjktODQ1MjQ1ODQ5YzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDgpNfF2+asT7hsk3Msaj33amnFBXGPDI+Ke t9FQOVX5efRiqAtWCSzwwCf3fIi5gsHuuipI/pBnc++1hsrN4vAh5JE2GiIrC59t sB9PtalYFRpiMUF66PCdiUP+VCroHhvfGn3wbuFcrBKyVTw395dxKiYDqIrAmFGn s9zuViCh7dUrEJb5QJU/KMmji12j6ljR3L+V2VvfaKfEyd63uluWBdrddooOjBas gTJy+gHwP5X9CdEE45yob0xM3cD6Ss0Tl0V2wqvgA9SdX3+5rybXtDRD2v9qe8WS WTTOs7wOqWvt9uwSf98XlAU6WG/NeXb6EMRoHfO6aRLz/LwqVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0i4+m6W6iqtorlkhfBz90SqZ79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvYWFmNTI5ZjctN2I2ZC0z YmU5LTk3OGYtODhlMjBkNzcwNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCWNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvEOPfcuKb34pyNuVIGvqgP+1x+b2d+l3zgOhqNfpx6KiPFvel3/5Gq l2CY2RfNUOPaiDy8LKI/TMVRW6pAv7e6pDkKQo/LLoDH7nR8+PWm/0M21lKmiO1c MQQGyz6wT1aO26UHkX9OSmW3GILyK95HMn+WZxQNm2k/evKEmT7tHFRzJz28ESW6 S7opDgXicb809LObjJc6LJjtoqbzP/iQJF+dRY8SBsJL87q/luHnNmcZ8qamD90D QgKvzOu87BapEOTYHhbxEMs/8vypCb5saeJ3MRSEHy7BX9awQZL3H0Eqel5s28N4 tYNHn84rawkXbtyp/DwjQWKzLvM4dXQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:07:46 2025 by rpki-client