$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/2ee8a464-6695-36ce-a17a-4259e130ff8d.roa File: 2ee8a464-6695-36ce-a17a-4259e130ff8d.roa (raw, json) Hash identifier: J4+udwB4Rjk1EBv7y1Y1UCmOAnVGSHTFsNf2Y8fxMV8= Subject key identifier: D5:8F:6C:CC:E6:92:21:74:66:33:D2:F0:C0:18:24:EB:B7:24:31:E0 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584A305037882C85F816073983C8 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/2ee8a464-6695-36ce-a17a-4259e130ff8d.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 46931 IP address blocks: 72.46.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:37:88:2c:85:f8:16:07:39:83:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=ae7f3e4a-3582-4eb1-81de-139fba0348d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:8a:ee:0e:e6:a6:8c:8d:64:43:ee:5f:8f: 54:24:17:9b:7b:5f:cc:20:bd:76:54:2b:f8:4f:66: 72:02:c4:7e:ba:45:70:81:94:3a:1e:7f:0a:c5:93: 80:a7:19:3b:b3:85:5e:a1:77:e5:aa:ef:e4:75:98: 02:cd:81:83:96:94:19:63:7c:cc:ec:ea:57:d9:4d: ef:f2:91:81:e7:55:45:9d:ee:98:99:23:71:63:41: 8b:51:38:1f:af:02:87:89:07:e4:59:f0:49:9c:91: 30:b2:5f:5a:2b:ba:23:9e:c8:4a:62:21:94:7d:69: 89:7b:5f:65:24:b2:5b:9c:58:cb:74:d1:cd:2b:1f: 9f:c7:e2:3f:ef:bf:2a:dd:b9:26:58:9a:3d:e2:1b: 24:6c:42:09:11:31:53:9b:e8:ff:4a:d7:6b:04:c7: 84:68:06:1a:aa:c7:2d:1f:2f:ff:be:5e:a0:44:d4: 08:6f:52:94:b1:85:7e:c5:82:5a:b7:6c:5f:5d:0a: 7b:2b:07:81:32:d7:11:99:6b:fb:5e:7c:37:eb:e0: 4a:bf:55:c4:40:f4:63:f1:f1:05:a3:c9:85:42:4e: 13:91:f4:f6:6e:05:e6:46:07:02:93:a3:ad:7b:e2: b0:ad:de:2d:1e:86:52:9b:16:45:69:9f:07:e5:c4: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8F:6C:CC:E6:92:21:74:66:33:D2:F0:C0:18:24:EB:B7:24:31:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/2ee8a464-6695-36ce-a17a-4259e130ff8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 72.46.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:cc:4e:f4:bc:54:d5:7b:fd:bd:f8:86:39:5d:21:6f:18:d2: 4c:c4:34:a3:92:06:8a:ca:75:82:ce:59:d8:ef:d0:00:62:af: ce:5c:d1:a5:9c:27:7d:f3:46:6a:8a:3a:29:ce:79:38:0b:b3: cc:fb:7c:0d:b3:be:74:13:e2:96:bf:de:7e:ea:db:ae:41:0a: 34:e5:04:d8:e2:f5:ce:8f:6d:1e:a1:c0:b9:0e:e8:a6:10:4d: ef:73:ad:ce:f7:6e:4b:0c:33:ad:20:25:bc:24:a2:57:dd:f3: c5:f1:a4:db:7f:a1:18:78:63:a3:7f:de:45:18:2b:5b:4f:fd: 3f:27:13:de:8c:cd:82:75:15:c2:0e:29:dd:a9:02:9d:4c:74: 91:b5:ea:bc:81:29:e2:f4:41:56:70:2e:59:7c:64:42:0b:d9: 65:20:d6:7b:80:e4:33:26:9a:49:1e:e9:63:50:b0:93:cc:07: 47:07:46:8b:e5:77:5b:d8:2a:78:48:ee:86:c0:6b:6f:6a:5f: bd:b8:9b:58:76:00:ed:b6:0c:10:c5:ff:b5:e1:1d:88:52:14: ee:3c:e1:5d:f5:94:5a:c2:60:5a:2e:2b:d1:ed:ae:8f:d1:eb: 7a:a1:74:2a:a5:db:26:60:69:24:04:d8:61:5b:45:80:fd:8a: c4:51:68:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDeILIX4Fgc5g8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWU3ZjNlNGEtMzU4Mi00ZWIxLTgxZGUtMTM5ZmJhMDM0OGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAKK7g7mpoyNZEPuX49UJBebe1/MIL12VCv4 T2ZyAsR+ukVwgZQ6Hn8KxZOApxk7s4VeoXflqu/kdZgCzYGDlpQZY3zM7OpX2U3v 8pGB51VFne6YmSNxY0GLUTgfrwKHiQfkWfBJnJEwsl9aK7ojnshKYiGUfWmJe19l JLJbnFjLdNHNKx+fx+I/778q3bkmWJo94hskbEIJETFTm+j/StdrBMeEaAYaqsct Hy//vl6gRNQIb1KUsYV+xYJat2xfXQp7KweBMtcRmWv7Xnw36+BKv1XEQPRj8fEF o8mFQk4TkfT2bgXmRgcCk6Ote+Kwrd4tHoZSmxZFaZ8H5cQnywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWPbMzmkiF0ZjPS8MAYJOu3JDHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvMmVlOGE0NjQtNjY5NS0z NmNlLWExN2EtNDI1OWUxMzBmZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASC6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDMTvS8VNV7/b34hjldIW8Y0kzENKOSBorKdYLOWdjv0ABir85c0aWc J33zRmqKOinOeTgLs8z7fA2zvnQT4pa/3n7q265BCjTlBNji9c6PbR6hwLkO6KYQ Te9zrc73bksMM60gJbwkolfd88XxpNt/oRh4Y6N/3kUYK1tP/T8nE96MzYJ1FcIO Kd2pAp1MdJG16ryBKeL0QVZwLll8ZEIL2WUg1nuA5DMmmkke6WNQsJPMB0cHRovl d1vYKnhI7obAa29qX724m1h2AO22DBDF/7XhHYhSFO484V31lFrCYFouK9Htro/R 63qhdCql2yZgaSQE2GFbRYD9isRRaFk= -----END CERTIFICATE-----Generated at Mon Jun 30 16:54:58 2025 by rpki-client