$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa File: caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa (raw, json) Hash identifier: DyvLSfaFnnMWEuk/iD5qlto6BnyA2u4Risi6/O3gFUI= Subject key identifier: 79:8F:6C:AC:D4:FF:83:E7:D0:F1:AF:F3:F5:0A:9E:41:09:66:98:50 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584ADC010001CB3C0A045F729A40 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 23316 IP address blocks: 72.37.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:01:00:01:cb:3c:0a:04:5f:72:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=8f061273-20cd-456e-8a17-4872da4671e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:13:35:9b:ce:52:ce:54:aa:50:cd:49:fa: e4:b0:ba:81:7b:ee:66:f9:10:5f:34:de:15:53:40: e5:50:75:36:c6:20:8e:9b:d7:8a:e3:ab:6a:9a:b4: c6:e2:0b:52:6c:e3:02:01:ba:ef:8b:fe:63:fe:7a: e5:f8:48:c3:64:e8:8b:c7:23:10:fe:4d:ce:54:5b: 70:97:d9:38:0b:9a:03:75:be:f7:b1:c7:ff:58:1a: 56:21:e4:1a:c5:6f:49:72:89:6d:14:41:53:a9:c1: d3:d0:4c:eb:6a:23:2b:df:c0:c9:6b:c8:b0:49:1b: 0d:1e:a6:f6:91:6c:e2:d0:5b:a1:99:19:63:59:ff: de:0e:c2:95:ba:d5:58:87:68:07:5b:66:3c:59:a0: 9d:d0:a1:aa:9e:2c:d5:f3:d2:fa:8b:9b:f5:7c:5a: 54:0a:84:46:4f:58:9d:42:7c:9a:b6:c7:9c:c8:f7: 7a:0f:26:29:14:67:42:e3:0a:f0:20:31:59:98:c2: d7:f1:04:56:ea:68:d1:57:c8:fb:99:8f:25:39:e2: 8f:cb:a2:26:3c:df:6d:e2:b1:3a:79:7b:90:bb:9b: 6c:81:1e:1b:a4:4e:62:01:04:19:cc:30:07:99:19: 70:a1:97:04:71:1a:d3:05:8c:ac:a4:7b:64:5b:4f: f7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8F:6C:AC:D4:FF:83:E7:D0:F1:AF:F3:F5:0A:9E:41:09:66:98:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/caad21aa-daa4-37b2-ad76-1e2e9b1a032f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:df:db:4f:6d:06:62:29:ef:ee:de:30:ed:1e:43:7a:50:00: aa:5b:06:4f:fe:d6:bb:c9:6b:d8:c3:d1:9a:23:67:59:41:32: da:94:66:70:e4:61:f8:04:7b:b1:1d:3b:a8:e9:ff:69:af:25: 3a:64:96:4f:9d:02:41:6e:2b:87:47:04:10:97:3e:01:8d:bd: 55:94:c1:fa:5c:ac:b2:48:0e:d0:7d:a0:68:1b:50:f1:15:3a: 3c:b6:c1:b1:09:7f:97:9a:93:f2:11:d5:4b:c0:43:19:93:10: 10:6b:21:9c:0a:a1:af:51:a8:bd:b2:64:48:6a:82:08:85:60: e2:10:4f:c4:02:d8:1b:12:25:9a:3b:26:98:45:a4:31:5e:8f: f9:53:c5:6f:04:c5:8d:a0:2a:d2:a3:71:4b:f2:29:99:43:e2: cb:e3:07:75:ff:7a:c9:e2:ae:57:88:6e:57:3c:dc:53:5e:50: 0e:e9:cd:e4:ac:20:42:00:95:2e:2d:5e:b8:c2:86:17:4d:14: ef:ca:52:35:53:dc:fc:15:91:eb:96:88:74:cd:28:e5:34:62: 50:3d:43:81:78:6a:97:5e:d9:a2:75:ba:50:c8:1a:b9:9b:0d: 21:10:2e:f6:48:d0:e3:92:c9:d5:84:3c:06:5e:be:f9:f4:32: b5:65:e1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAQAByzwKBF9ymkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk OGYwNjEyNzMtMjBjZC00NTZlLThhMTctNDg3MmRhNDY3MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ITNZvOUs5UqlDNSfrksLqBe+5m+RBfNN4V U0DlUHU2xiCOm9eK46tqmrTG4gtSbOMCAbrvi/5j/nrl+EjDZOiLxyMQ/k3OVFtw l9k4C5oDdb73scf/WBpWIeQaxW9JcoltFEFTqcHT0EzraiMr38DJa8iwSRsNHqb2 kWzi0FuhmRljWf/eDsKVutVYh2gHW2Y8WaCd0KGqnizV89L6i5v1fFpUCoRGT1id QnyatsecyPd6DyYpFGdC4wrwIDFZmMLX8QRW6mjRV8j7mY8lOeKPy6ImPN9t4rE6 eXuQu5tsgR4bpE5iAQQZzDAHmRlwoZcEcRrTBYyspHtkW0/3RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmPbKzU/4Pn0PGv8/UKnkEJZphQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvY2FhZDIxYWEtZGFhNC0z N2IyLWFkNzYtMWUyZTliMWEwMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDf209tBmIp7+7eMO0eQ3pQAKpbBk/+1rvJa9jD0ZojZ1lBMtqUZnDk YfgEe7EdO6jp/2mvJTpklk+dAkFuK4dHBBCXPgGNvVWUwfpcrLJIDtB9oGgbUPEV Ojy2wbEJf5eak/IR1UvAQxmTEBBrIZwKoa9RqL2yZEhqggiFYOIQT8QC2BsSJZo7 JphFpDFej/lTxW8ExY2gKtKjcUvyKZlD4svjB3X/esnirleIblc83FNeUA7pzeSs IEIAlS4tXrjChhdNFO/KUjVT3PwVkeuWiHTNKOU0YlA9Q4F4apde2aJ1ulDIGrmb DSEQLvZI0OOSydWEPAZevvn0MrVl4Q0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:17:14 2025 by rpki-client