$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa File: cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa (raw, json) Hash identifier: vNcOsjg02fx+eYDhcPP4zkfGfPQmZz5uyrFrkFkph/s= Subject key identifier: 76:E4:94:A8:29:F7:FF:96:9A:E0:AB:A8:AD:2D:6C:CA:0E:F1:06:A7 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584ADC010014C31EC7F2B5EAE1C0 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 23316 IP address blocks: 72.37.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:01:00:14:c3:1e:c7:f2:b5:ea:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=2fdf4e79-7816-4383-a4d1-36479ae8661d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:15:10:f0:c9:40:1a:01:81:59:1c:a9:11: db:5c:bb:1a:17:53:e6:20:c1:ed:a2:32:73:ff:f9: 6c:04:85:74:52:df:79:51:77:60:d6:e9:e4:43:d5: 89:52:4b:3c:df:f0:c7:87:b9:48:4d:9d:83:6e:8f: 40:ef:e1:65:a5:fe:c4:fc:a0:b2:4b:b1:ec:40:36: cf:9d:95:ac:da:86:82:cb:76:c6:d8:a6:a3:7a:47: 51:e3:ef:fb:72:8c:1d:80:62:e5:3a:7f:07:65:b0: c8:30:39:39:e9:3e:27:9e:81:f7:73:30:f5:49:92: 08:8e:35:f4:d4:9d:2e:5d:86:b1:7c:1a:ce:6a:c5: 8e:b9:f3:35:72:18:1c:18:84:c2:cc:e4:da:27:4a: 39:a2:86:0e:a8:1c:ab:3a:1f:61:bf:c4:71:66:33: f3:7f:f9:74:63:c9:7b:bd:0c:5d:f8:31:8e:13:dd: 94:66:87:6a:5c:96:01:4c:b0:08:aa:b9:5f:1b:11: 60:d0:f2:8c:cc:52:77:1a:d1:4f:f7:50:62:4f:89: 49:b2:e8:01:fd:25:c0:a5:26:85:76:70:bc:b7:ee: 62:4d:96:c2:12:7b:57:c1:9a:f4:bb:4f:65:4d:ec: 51:d7:a3:0a:85:5d:76:55:af:73:6e:43:66:fb:b6: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E4:94:A8:29:F7:FF:96:9A:E0:AB:A8:AD:2D:6C:CA:0E:F1:06:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 72.37.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:74:28:9a:d2:20:c3:cb:6c:93:7f:49:ed:8f:e5:c3:0f:79: 5a:22:83:b6:90:7d:56:54:b2:63:6e:f9:a0:b7:f4:13:5e:73: 53:fe:41:67:06:7c:5c:ed:0f:03:5c:20:70:33:6d:d2:bb:01: 13:c8:84:b3:b8:64:87:54:0e:80:f1:a2:b9:13:6d:cb:25:c8: 70:98:95:8b:7f:30:2a:c7:c9:6a:ec:0d:e4:bc:bc:50:5e:2f: 94:ae:cb:4f:ab:97:23:4a:23:5c:d8:3a:c2:cc:4f:36:71:1d: 24:ea:9e:71:ad:f1:27:8c:8a:19:83:e2:aa:0f:d8:28:6f:d3: 26:36:9f:b6:6f:c8:e8:38:b3:c4:a2:39:a3:3e:c9:93:fc:6e: 65:3a:bb:65:ea:72:61:21:1d:ca:bd:5f:af:49:af:85:1c:96: dc:a0:0f:39:64:51:02:b8:62:cf:13:29:62:92:a7:dc:2e:7e: 3a:24:8e:31:22:c6:85:a3:dd:94:e9:33:be:66:7c:c4:b3:2e: b7:d5:53:46:0b:60:11:99:12:2a:f1:8f:53:9e:0e:88:ae:dc: 9f:62:2f:69:e0:e9:57:9d:b6:38:ca:52:13:ad:85:a4:33:45: 7c:56:0e:0f:e5:6f:10:c5:5b:b3:37:1e:a4:aa:a0:d2:c6:a2: 4c:48:98:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAQAUwx7H8rXq4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk MmZkZjRlNzktNzgxNi00MzgzLWE0ZDEtMzY0NzlhZTg2NjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuIVEPDJQBoBgVkcqRHbXLsaF1PmIMHtojJz //lsBIV0Ut95UXdg1unkQ9WJUks83/DHh7lITZ2Dbo9A7+Flpf7E/KCyS7HsQDbP nZWs2oaCy3bG2KajekdR4+/7cowdgGLlOn8HZbDIMDk56T4nnoH3czD1SZIIjjX0 1J0uXYaxfBrOasWOufM1chgcGITCzOTaJ0o5ooYOqByrOh9hv8RxZjPzf/l0Y8l7 vQxd+DGOE92UZodqXJYBTLAIqrlfGxFg0PKMzFJ3GtFP91BiT4lJsugB/SXApSaF dnC8t+5iTZbCEntXwZr0u09lTexR16MKhV12Va9zbkNm+7ZC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbklKgp9/+WmuCrqK0tbMoO8QanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvY2Y5MDQ2MTEtNjVlZS0z NWI4LTllZmMtN2ZjMmFlYzY1YmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp0KJrSIMPLbJN/Se2P5cMPeVoig7aQfVZUsmNu+aC39BNec1P+QWcG fFztDwNcIHAzbdK7ARPIhLO4ZIdUDoDxorkTbcslyHCYlYt/MCrHyWrsDeS8vFBe L5Suy0+rlyNKI1zYOsLMTzZxHSTqnnGt8SeMihmD4qoP2Chv0yY2n7ZvyOg4s8Si OaM+yZP8bmU6u2XqcmEhHcq9X69Jr4UcltygDzlkUQK4Ys8TKWKSp9wufjokjjEi xoWj3ZTpM75mfMSzLrfVU0YLYBGZEirxj1OeDoiu3J9iL2ng6VedtjjKUhOthaQz RXxWDg/lbxDFW7M3HqSqoNLGokxImCA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:12:57 2025 by rpki-client