$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca837d82-1293-3c6f-aefa-d0676184fe9e.roa File: ca837d82-1293-3c6f-aefa-d0676184fe9e.roa (raw, json) Hash identifier: 0meMpfVcENXmZNgQwZJ/8EJERjFF1CgC6rap48Qy6V0= Subject key identifier: 41:FB:BF:AA:38:EF:33:A4:30:ED:64:DE:AB:80:83:21:D7:09:A4:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC5AB96074599E52369983E54 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca837d82-1293-3c6f-aefa-d0676184fe9e.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 55836 IP address blocks: 72.246.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:96:07:45:99:e5:23:69:98:3e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=0ac9a084-abb6-4ea6-b056-4c966c503f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:4f:67:c5:26:df:63:d5:d8:98:35:c3:79: c4:45:93:77:16:24:e3:48:e0:93:b4:c7:53:15:c8: 27:e4:9a:34:93:c8:15:9a:4f:f0:a9:37:62:d4:90: 3e:09:c6:4f:7d:72:12:5f:64:0c:a5:7e:fe:b0:a4: ff:34:68:2d:38:2f:74:1d:88:3d:4b:aa:80:15:82: 45:f1:c1:64:82:b8:dd:d6:41:ed:36:fc:25:55:2c: 7c:b4:d5:ed:79:9c:b7:d2:dd:09:12:86:03:f6:00: ff:e6:68:60:b8:89:a4:5c:0c:62:df:a3:2c:b8:c1: c1:5b:e8:c1:5f:ef:26:a7:ea:4e:dc:81:23:86:7f: f8:68:d1:ac:69:94:8e:2f:47:19:7d:b0:16:8e:99: 42:c4:33:6b:a0:b9:cb:1f:ad:54:1a:a2:1a:19:1e: 9f:b9:45:83:d5:57:7d:21:6a:f0:54:78:53:d5:c1: c3:e8:33:0b:53:76:5c:a2:00:4d:a7:b6:c1:62:6b: fa:4d:61:cd:88:e7:8f:9b:61:23:9d:c9:fc:65:3b: bd:c5:7d:55:61:7d:48:38:15:4d:16:e7:fb:00:77: 03:e2:23:7c:d7:f5:38:3c:aa:6a:1c:0e:0e:a6:6c: 50:ee:08:02:d2:46:7a:83:37:00:c2:71:c1:6e:bc: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FB:BF:AA:38:EF:33:A4:30:ED:64:DE:AB:80:83:21:D7:09:A4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca837d82-1293-3c6f-aefa-d0676184fe9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:84:9c:93:b7:fb:52:50:ad:81:09:fc:7f:cc:d7:89:43:28: 55:24:25:d7:18:d6:38:64:3c:d3:4a:04:a6:26:10:0e:05:23: 00:7c:92:40:b9:1c:f1:e9:17:22:8c:e6:1e:64:c9:94:e5:34: 60:dc:f2:ed:49:c3:fd:eb:1e:68:56:25:c8:7f:48:eb:22:14: 00:cc:86:d9:32:3f:13:ae:e9:5e:34:cc:8a:27:45:3f:79:6e: 40:e0:da:69:98:26:ec:de:dd:33:d4:ff:42:7a:12:09:c1:ad: 3c:f3:13:f7:32:ce:35:4a:10:ba:7c:1f:62:0b:75:25:23:7d: f1:03:11:ee:03:66:28:6a:2a:c3:ea:87:db:ff:a7:d9:a4:32: 42:aa:e2:5a:70:81:ba:c1:5a:99:bf:41:b6:4a:ec:6b:9f:9c: 14:0a:c3:91:26:ad:8a:b5:58:e7:cf:c8:34:af:fa:de:ba:7e: 26:bc:ab:5c:4b:bf:2e:be:f4:82:b0:80:81:12:f0:2e:3a:12: d5:59:db:4e:63:0f:4f:a2:db:17:85:20:88:6b:c5:61:40:58: aa:02:ce:f9:d9:ec:d4:f9:c0:0c:00:0a:ca:36:20:0c:4a:cb: 34:a8:75:6d:50:ed:08:a4:aa:dc:e8:d5:bd:a8:6b:51:a0:e8: 27:64:7e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5YHRZnlI2mYPlQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk MGFjOWEwODQtYWJiNi00ZWE2LWIwNTYtNGM5NjZjNTAzZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLhPZ8Um32PV2Jg1w3nERZN3FiTjSOCTtMdT Fcgn5Jo0k8gVmk/wqTdi1JA+CcZPfXISX2QMpX7+sKT/NGgtOC90HYg9S6qAFYJF 8cFkgrjd1kHtNvwlVSx8tNXteZy30t0JEoYD9gD/5mhguImkXAxi36MsuMHBW+jB X+8mp+pO3IEjhn/4aNGsaZSOL0cZfbAWjplCxDNroLnLH61UGqIaGR6fuUWD1Vd9 IWrwVHhT1cHD6DMLU3ZcogBNp7bBYmv6TWHNiOePm2Ejncn8ZTu9xX1VYX1IOBVN Fuf7AHcD4iN81/U4PKpqHA4OpmxQ7ggC0kZ6gzcAwnHBbrykQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH7v6o47zOkMO1k3quAgyHXCaRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E4MzdkODItMTI5My0z YzZmLWFlZmEtZDA2NzYxODRmZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSPaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWEnJO3+1JQrYEJ/H/M14lDKFUkJdcY1jhkPNNKBKYmEA4FIwB8kkC5 HPHpFyKM5h5kyZTlNGDc8u1Jw/3rHmhWJch/SOsiFADMhtkyPxOu6V40zIonRT95 bkDg2mmYJuze3TPU/0J6EgnBrTzzE/cyzjVKELp8H2ILdSUjffEDEe4DZihqKsPq h9v/p9mkMkKq4lpwgbrBWpm/QbZK7GufnBQKw5EmrYq1WOfPyDSv+t66fia8q1xL vy6+9IKwgIES8C46EtVZ205jD0+i2xeFIIhrxWFAWKoCzvnZ7NT5wAwACso2IAxK yzSodW1Q7Qikqtzo1b2oa1Gg6CdkfoM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:32 2025 by rpki-client