$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0b802fb-6f6a-3d70-8606-781c8220219a.roa File: a0b802fb-6f6a-3d70-8606-781c8220219a.roa (raw, json) Hash identifier: plJugHNkZIIuSCD/UVVsXeIg4kMzYNGvwAPwDQQA9A4= Subject key identifier: 81:13:F7:72:CE:CC:AD:36:E6:F0:61:65:79:9B:1E:D4:00:32:2C:6C Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AE1107FE48756900275CFF9FC Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0b802fb-6f6a-3d70-8606-781c8220219a.roa Signing time: Sat 16 Aug 2025 20:30:53 +0000 ROA not before: Sat 16 Aug 2025 20:30:53 +0000 ROA not after: Fri 14 Nov 2025 21:30:53 +0000 asID: 7029 IP address blocks: 72.244.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:10:7f:e4:87:56:90:02:75:cf:f9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 16 20:30:53 2025 GMT Not After : Nov 14 21:30:53 2025 GMT Subject: CN=e8f2793a-6ad9-442b-9ba0-1645d9b9ef22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2b:2c:aa:b1:76:82:a5:17:54:99:be:5e:fa: d9:1e:d1:47:23:d3:a3:96:76:fb:c9:8c:84:ac:18: d4:7b:23:09:df:0e:77:73:7a:ed:df:f9:2c:ba:cb: 4a:20:04:2a:fa:71:4d:80:00:a5:09:28:c3:1a:f2: 6a:00:2b:47:78:73:0d:77:a2:d9:50:d1:9d:e9:82: 30:bd:e7:80:ce:4d:63:4a:9d:80:2b:4f:62:c2:6a: a6:4e:e2:dd:e8:b5:d1:45:64:e5:11:98:3c:ff:25: 6d:ba:f6:26:48:6c:e1:60:3e:ce:b9:88:54:08:3f: 8e:a0:47:78:7d:f0:53:84:20:39:f9:c4:b0:9f:fd: 3b:a5:30:39:3f:10:4b:30:71:2a:60:aa:79:91:58: f7:ec:16:f9:d0:7f:3a:4c:6c:8e:54:7d:d5:97:9a: bf:d9:04:bf:81:f9:09:a3:76:9d:e9:0a:da:60:97: 18:8d:67:87:95:86:28:8b:29:5b:8f:36:e3:9b:3a: 36:df:1f:9e:3a:54:e7:62:43:4c:6e:de:6a:85:69: 2d:dc:36:5c:37:ad:e9:44:46:c3:c2:ff:79:6d:09: 54:02:26:ff:ec:22:0d:e3:fe:88:6d:2d:56:1a:30: 87:4c:df:86:84:52:97:ec:c5:5c:5b:41:74:91:ec: 03:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:13:F7:72:CE:CC:AD:36:E6:F0:61:65:79:9B:1E:D4:00:32:2C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a0b802fb-6f6a-3d70-8606-781c8220219a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:15:91:51:90:50:59:44:ff:f0:15:3d:7c:72:04:4a:37:9e: 91:32:ac:5d:ea:25:d6:73:85:5e:c2:2f:8e:a7:2e:68:3f:23: 8b:7d:b9:b5:47:c8:4b:23:86:91:22:43:19:39:a8:51:99:b6: 7e:ea:f3:9f:b7:45:33:8f:d0:3c:27:94:cc:7f:5c:f1:5f:8e: 7a:72:c9:48:c1:fc:19:2f:50:bd:2f:cc:b7:e7:fb:85:b8:a9: 79:f6:4b:88:88:fd:22:17:88:13:9b:56:23:1a:1c:fd:1a:51: 8e:36:82:65:9f:23:cb:86:8b:b1:6f:49:5a:f9:3c:5d:51:10: 87:4a:47:19:ec:56:00:ef:23:9b:65:3f:ef:6f:ab:02:71:94: 41:d2:68:1b:bb:6e:63:e9:04:b6:4d:f9:ab:d1:bf:35:3f:1c: 4e:fb:f2:ef:ed:2f:2d:fa:13:db:f1:81:3f:4a:d4:bc:07:65: db:08:44:66:90:5e:4f:88:92:fa:8f:6e:00:13:53:10:53:81: 2a:59:ca:9e:d4:a0:d1:2e:c5:a5:bb:a6:ab:cc:75:6c:3f:0d: 33:a7:0d:ea:60:f6:6f:98:05:71:eb:e3:e9:60:4d:41:5b:97: ce:89:85:a4:ba:7a:f8:9c:92:a7:6b:1f:27:3b:0b:ec:0a:b1: 9a:2a:31:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhEH/kh1aQAnXP+fwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxNjIwMzA1M1oXDTI1MTExNDIxMzA1M1owLzEtMCsGA1UEAxMk ZThmMjc5M2EtNmFkOS00NDJiLTliYTAtMTY0NWQ5YjllZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCssqrF2gqUXVJm+XvrZHtFHI9Ojlnb7yYyE rBjUeyMJ3w53c3rt3/ksustKIAQq+nFNgAClCSjDGvJqACtHeHMNd6LZUNGd6YIw veeAzk1jSp2AK09iwmqmTuLd6LXRRWTlEZg8/yVtuvYmSGzhYD7OuYhUCD+OoEd4 ffBThCA5+cSwn/07pTA5PxBLMHEqYKp5kVj37Bb50H86TGyOVH3Vl5q/2QS/gfkJ o3ad6QraYJcYjWeHlYYoiylbjzbjmzo23x+eOlTnYkNMbt5qhWkt3DZcN63pREbD wv95bQlUAib/7CIN4/6IbS1WGjCHTN+GhFKX7MVcW0F0kewD8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIET93LOzK025vBhZXmbHtQAMixsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYTBiODAyZmItNmY2YS0z ZDcwLTg2MDYtNzgxYzgyMjAyMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgVkVGQUFlE//AVPXxyBEo3npEyrF3qJdZzhV7CL46nLmg/I4t9ubVH yEsjhpEiQxk5qFGZtn7q85+3RTOP0DwnlMx/XPFfjnpyyUjB/BkvUL0vzLfn+4W4 qXn2S4iI/SIXiBObViMaHP0aUY42gmWfI8uGi7FvSVr5PF1REIdKRxnsVgDvI5tl P+9vqwJxlEHSaBu7bmPpBLZN+avRvzU/HE778u/tLy36E9vxgT9K1LwHZdsIRGaQ Xk+IkvqPbgATUxBTgSpZyp7UoNEuxaW7pqvMdWw/DTOnDepg9m+YBXHr4+lgTUFb l86JhaS6evickqdrHyc7C+wKsZoqMRY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:23 2025 by rpki-client