$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18f3094-bffd-3cae-95c3-2646a6733533.roa File: f18f3094-bffd-3cae-95c3-2646a6733533.roa (raw, json) Hash identifier: liIlCmgRHGG3y6oLGsxVG4QwSokzTKIINj5uSmC6f6E= Subject key identifier: C0:8D:7F:D7:01:31:20:BF:8C:28:5A:4F:94:12:B0:F6:C5:6C:EC:9D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AD9D4EDF05C2D78FF44A76880 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18f3094-bffd-3cae-95c3-2646a6733533.roa Signing time: Thu 14 Aug 2025 06:20:12 +0000 ROA not before: Thu 14 Aug 2025 06:20:12 +0000 ROA not after: Wed 12 Nov 2025 07:20:12 +0000 asID: 20115 IP address blocks: 72.1.176.0/22 maxlen: 24 72.1.180.0/23 maxlen: 24 72.1.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:d4:ed:f0:5c:2d:78:ff:44:a7:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 14 06:20:12 2025 GMT Not After : Nov 12 07:20:12 2025 GMT Subject: CN=43e95ef3-a6c9-417f-86a3-35bbcaec3c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:48:ca:94:81:d4:0e:44:26:2d:0e:6b:06: e0:a7:16:2a:72:ec:c8:51:f5:8e:e7:ca:44:81:a7: f0:8b:60:6e:af:43:24:88:aa:1e:b5:fd:4b:0d:df: fa:16:fa:30:00:68:ea:c9:cd:46:3e:74:29:75:c1: 68:64:17:60:56:70:fe:b6:f2:65:64:cb:99:15:91: 5b:3b:6a:16:36:b0:73:00:b0:08:47:bb:ce:d4:a2: d9:a5:5b:d6:49:10:0f:28:07:9e:ad:89:c2:5c:f2: bc:52:02:12:5d:2d:71:af:52:c9:49:c3:02:02:c0: 6c:be:29:bb:1e:ed:49:e4:9a:9e:53:bb:1a:66:ac: f9:8f:ed:0c:e1:87:b1:f0:70:b4:48:d7:68:f4:80: 6f:fd:c2:69:6f:e6:1f:24:d7:8b:c5:63:29:f7:3f: 60:3c:02:65:55:a4:fc:8a:5f:15:2f:83:22:0a:75: 6c:df:a5:73:9d:53:d5:24:83:b3:2e:09:47:65:40: 4f:8f:52:0c:e2:5d:3b:b6:0f:b2:78:79:9c:29:ec: 66:43:82:93:48:e6:d8:47:b3:9a:ef:8b:2b:80:ab: c6:8f:42:0a:42:0d:54:b2:54:53:d1:88:ff:06:95: eb:7a:76:a1:b9:2a:89:0a:73:55:e1:fb:d4:19:96: ab:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8D:7F:D7:01:31:20:BF:8C:28:5A:4F:94:12:B0:F6:C5:6C:EC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18f3094-bffd-3cae-95c3-2646a6733533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.1.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e4:94:2f:75:f9:ec:4e:6c:e6:9a:fa:29:87:a2:dd:53:99: c1:0c:24:fd:b6:f2:f9:6f:d9:c6:c7:91:91:25:74:24:25:7d: 14:35:44:2c:9c:a5:6f:6c:55:2f:26:d2:6e:79:ed:0b:c5:fd: 1c:11:81:74:f2:ab:05:a7:0b:a5:7b:a2:7e:a3:3e:bb:02:b6: 57:25:1a:a1:50:b4:cc:6d:18:e4:08:03:54:6e:a1:bc:94:a6: d1:30:d1:85:87:6d:10:0d:0a:90:6f:e9:4d:7f:c7:2f:16:a0: ff:34:7e:7e:3a:2f:84:59:ed:e9:93:ad:fe:d6:69:e3:b9:89: de:ed:f9:ff:83:3e:ec:d9:38:72:1e:a3:e1:78:72:02:77:c3: 62:b3:f7:c6:fb:fb:b8:01:2f:a7:62:3c:a7:16:f1:c4:13:91: 23:4b:1a:32:66:0a:4c:16:b3:3d:d2:ea:2a:ee:f4:85:07:56: 97:8a:e8:fe:41:d8:95:21:df:ff:fa:54:34:7b:15:fa:58:34: 15:28:c0:9a:1d:f1:7a:26:42:3d:02:6b:08:9f:d3:61:53:7f: c9:1d:37:5c:d6:a6:a9:f1:fc:16:f0:57:72:7e:cb:ac:a0:4f: 03:67:e8:c6:93:77:f2:00:4e:14:c7:8c:2e:7d:4a:72:d7:e4: b5:fa:60:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZ1O3wXC14/0SnaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgxNDA2MjAxMloXDTI1MTExMjA3MjAxMlowLzEtMCsGA1UEAxMk NDNlOTVlZjMtYTZjOS00MTdmLTg2YTMtMzViYmNhZWMzYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fhIypSB1A5EJi0OawbgpxYqcuzIUfWO58pE gafwi2Bur0MkiKoetf1LDd/6FvowAGjqyc1GPnQpdcFoZBdgVnD+tvJlZMuZFZFb O2oWNrBzALAIR7vO1KLZpVvWSRAPKAeerYnCXPK8UgISXS1xr1LJScMCAsBsvim7 Hu1J5JqeU7saZqz5j+0M4Yex8HC0SNdo9IBv/cJpb+YfJNeLxWMp9z9gPAJlVaT8 il8VL4MiCnVs36VznVPVJIOzLglHZUBPj1IM4l07tg+yeHmcKexmQ4KTSObYR7Oa 74srgKvGj0IKQg1UslRT0Yj/BpXrenahuSqJCnNV4fvUGZarEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCNf9cBMSC/jChaT5QSsPbFbOydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZjE4ZjMwOTQtYmZmZC0z Y2FlLTk1YzMtMjY0NmE2NzMzNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSAGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErklC91+exObOaa+imHot1TmcEMJP228vlv2cbHkZEldCQlfRQ1RCyc pW9sVS8m0m557QvF/RwRgXTyqwWnC6V7on6jPrsCtlclGqFQtMxtGOQIA1RuobyU ptEw0YWHbRANCpBv6U1/xy8WoP80fn46L4RZ7emTrf7WaeO5id7t+f+DPuzZOHIe o+F4cgJ3w2Kz98b7+7gBL6diPKcW8cQTkSNLGjJmCkwWsz3S6iru9IUHVpeK6P5B 2JUh3//6VDR7FfpYNBUowJod8XomQj0Cawif02FTf8kdN1zWpqnx/BbwV3J+y6yg TwNn6MaTd/IAThTHjC59SnLX5LX6YCc= -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:33 2025 by rpki-client