$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa File: 2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa (raw, json) Hash identifier: vV69elI32/BMKyjXuc13uDxJXlhaet2rs+BFYbSys00= Subject key identifier: 16:73:60:CC:5C:1F:1E:A7:7E:08:1F:27:3A:2F:26:07:03:79:B8:1E Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584A5293AB69677ADEE38F8E0A00 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa Signing time: Thu 26 Jun 2025 19:34:15 +0000 ROA not before: Thu 26 Jun 2025 19:34:15 +0000 ROA not after: Wed 24 Sep 2025 19:34:15 +0000 asID: 27455 IP address blocks: 72.21.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:93:ab:69:67:7a:de:e3:8f:8e:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Jun 26 19:34:15 2025 GMT Not After : Sep 24 19:34:15 2025 GMT Subject: CN=57f94352-01e1-4ede-ada6-6629d9cfbc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:e6:1e:36:86:ec:74:08:4b:a7:2d:c1:d2: 41:79:b7:e7:12:d7:a0:84:c8:88:fb:3f:ab:3c:d1: 1f:de:01:0a:77:11:f7:0d:14:b0:2f:42:c6:02:9d: 33:ac:64:b5:bc:16:14:ff:95:c6:99:a4:3f:8e:2f: fb:40:46:e8:ad:b7:53:e3:ec:e1:7c:f9:e3:b7:cc: 9b:e9:1c:b4:30:d0:1b:c9:a9:55:c2:44:d0:a1:fb: f8:07:be:38:d4:f6:ad:20:18:dd:47:64:47:d2:59: 78:68:de:8d:91:76:6c:10:64:b9:7e:e9:ae:05:42: 87:83:28:26:0a:8c:2a:13:dd:3b:75:25:c1:37:bb: 7d:cb:e6:d2:d2:d3:2a:72:e1:94:69:8b:10:fd:b2: 72:b0:ba:f5:cb:75:c9:70:b7:fb:1e:64:3b:c9:66: 0a:81:21:bb:da:18:18:e6:f3:d8:ee:9c:e8:68:ee: 14:fa:16:b1:0b:8e:71:a0:bd:84:d7:6d:3f:4c:86: 0a:4b:e7:a3:60:bf:7e:a4:65:b1:61:d1:ee:4a:bb: ee:0d:20:02:e8:11:e7:d6:f8:8a:9b:05:5a:e2:63: 0e:56:f8:79:78:a9:b5:a4:03:1f:9f:9f:f3:41:23: 16:7d:d3:d8:b2:e4:e2:10:47:f9:a2:e6:ec:78:51: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:73:60:CC:5C:1F:1E:A7:7E:08:1F:27:3A:2F:26:07:03:79:B8:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:98:e2:de:60:82:35:12:f6:6a:c1:ca:fd:5d:86:ef:ca:e3: d9:58:ed:f1:8e:26:36:08:d7:f8:54:86:7c:cc:5b:d6:33:85: 27:02:6f:0a:38:c7:82:e1:df:c1:e7:57:a1:53:5d:fd:34:13: f3:84:4f:9c:ea:10:db:56:6f:0e:07:73:69:8f:12:24:ae:75: 42:51:c2:8a:5e:cb:37:02:d6:1a:4c:4d:57:ef:07:e2:da:c6: 73:b6:67:9c:d9:f7:61:ef:c6:87:46:31:9d:24:ba:9b:9c:65: 1d:44:b5:9e:3f:08:d8:20:7d:dd:9c:4c:ec:38:e4:48:a6:b6: 36:32:36:03:b0:85:6a:72:97:b2:bc:90:82:73:d6:8f:68:d9: d2:89:50:41:bc:b1:70:9b:fe:cd:38:36:99:50:ae:2c:a1:80: 1d:83:b3:e8:03:87:05:84:db:e2:e8:53:c8:af:33:c3:ef:a2: 03:a9:3d:1e:d4:84:d3:b3:dd:db:47:17:42:e7:1c:7a:77:4e: 0d:50:8a:5d:5b:d4:cc:c8:40:4c:ec:5e:70:71:b4:10:6d:0a: c8:36:84:56:f0:b2:74:79:c6:28:f9:db:59:62:54:1e:5f:77: 5e:2f:22:39:30:e0:aa:1a:50:97:aa:21:a4:86:3d:25:89:e1: 0b:37:15:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSk6tpZ3re44+OCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI1MDYyNjE5MzQxNVoXDTI1MDkyNDE5MzQxNVowLzEtMCsGA1UEAxMk NTdmOTQzNTItMDFlMS00ZWRlLWFkYTYtNjYyOWQ5Y2ZiYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GLmHjaG7HQIS6ctwdJBebfnEteghMiI+z+r PNEf3gEKdxH3DRSwL0LGAp0zrGS1vBYU/5XGmaQ/ji/7QEborbdT4+zhfPnjt8yb 6Ry0MNAbyalVwkTQofv4B7441PatIBjdR2RH0ll4aN6NkXZsEGS5fumuBUKHgygm CowqE907dSXBN7t9y+bS0tMqcuGUaYsQ/bJysLr1y3XJcLf7HmQ7yWYKgSG72hgY 5vPY7pzoaO4U+haxC45xoL2E120/TIYKS+ejYL9+pGWxYdHuSrvuDSAC6BHn1viK mwVa4mMOVvh5eKm1pAMfn5/zQSMWfdPYsuTiEEf5oubseFFDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZzYMxcHx6nfggfJzovJgcDebgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMmZjNzdiZjYtYWY1Ny0z NDU2LWEwYTMtMDIxZmYxNWI1ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmY4t5ggjUS9mrByv1dhu/K49lY7fGOJjYI1/hUhnzMW9YzhScCbwo4 x4Lh38HnV6FTXf00E/OET5zqENtWbw4Hc2mPEiSudUJRwopeyzcC1hpMTVfvB+La xnO2Z5zZ92HvxodGMZ0kupucZR1EtZ4/CNggfd2cTOw45EimtjYyNgOwhWpyl7K8 kIJz1o9o2dKJUEG8sXCb/s04NplQriyhgB2Ds+gDhwWE2+LoU8ivM8PvogOpPR7U hNOz3dtHF0LnHHp3Tg1Qil1b1MzIQEzsXnBxtBBtCsg2hFbwsnR5xij521liVB5f d14vIjkw4KoaUJeqIaSGPSWJ4Qs3Fa4= -----END CERTIFICATE-----Generated at Mon Jun 30 16:31:47 2025 by rpki-client