$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa File: e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa (raw, json) Hash identifier: IqdUwk5N6WOsIhFbxfGZ1jQl8uI75e/IF+3QiQc8Il8= Subject key identifier: 2E:12:52:AC:83:88:F3:A1:BF:3F:33:52:03:22:6D:2E:EF:D6:44:7C Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584AC9DB9946F0440458BCD9B220 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 393233 IP address blocks: 173.0.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:99:46:f0:44:04:58:bc:d9:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=4919b8fd-e56e-49a6-8818-36f6fe8eb7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:bf:5d:fa:10:ba:49:a6:14:6e:d4:99:6d: 7a:60:e6:fc:60:d4:68:91:95:9e:eb:4d:2a:b8:da: 76:8a:dc:25:de:16:57:a9:76:01:4e:bd:4b:6a:30: 5e:90:78:72:3a:ee:03:30:89:32:24:74:81:48:a0: 0f:e6:03:ca:7d:93:b2:62:21:19:64:21:2f:50:8b: f2:db:5f:64:84:67:e4:49:26:21:23:27:a8:bb:ea: 74:b4:42:e4:32:a2:7d:5e:04:f4:a4:0e:d1:9f:c6: 3d:53:66:58:94:ed:33:18:25:7a:a6:3c:d7:9a:98: 76:9a:f8:99:f2:9f:8c:32:93:98:71:ca:84:18:ef: 5e:5c:8e:30:ec:b0:3e:bf:4e:33:88:ce:04:7b:c6: 7f:ca:d9:ab:30:a8:67:4e:0c:0e:37:e1:46:e2:7a: 07:44:54:8b:d8:0a:ea:3c:a5:db:d7:8d:94:91:47: 7f:6f:1f:20:50:19:ff:64:56:71:44:13:d7:8d:b1: b2:9c:24:5e:e6:0f:41:0e:3d:df:0e:d6:f9:49:69: 0f:03:7b:4c:bf:a9:d9:54:a4:93:cc:4c:a5:12:ca: a2:8e:e2:4b:30:d8:8c:89:99:4d:30:67:65:77:f6: 78:7c:47:59:02:6c:64:8c:0d:88:dc:9f:3c:76:95: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:12:52:AC:83:88:F3:A1:BF:3F:33:52:03:22:6D:2E:EF:D6:44:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 173.0.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ea:94:f2:f8:17:fc:e3:d4:b7:7b:0d:27:58:e8:66:7b:0d: 93:da:63:27:d4:2d:26:d4:2b:d4:3c:62:b5:30:39:9d:c8:e4: 46:d7:06:d6:70:0a:75:d0:34:76:bb:47:74:3a:84:0b:ca:68: 09:ad:6a:8a:35:90:7f:3d:2f:71:17:06:a3:e2:32:0d:e1:e6: b5:69:1e:79:a5:82:68:95:7d:c3:c0:26:51:56:9b:14:e0:0a: 82:58:e2:a1:8d:2f:78:af:be:de:57:9d:58:19:86:b7:b5:66: 3f:56:9d:95:59:1b:67:40:38:d0:94:e5:1f:7a:65:8a:fa:94: f7:bd:f0:34:f9:35:d7:ed:e3:08:e8:63:2e:97:b7:16:77:70: 90:d3:6a:90:39:06:ac:08:a9:0b:02:0e:a9:a5:17:8c:f8:42: d6:c3:bd:41:81:6b:29:e0:9a:87:8c:e1:cb:00:46:d3:de:70: e8:a9:6b:36:ab:04:6b:66:19:78:60:91:2f:e3:dc:5e:1f:cd: 3b:f3:9f:a9:13:48:80:6a:3b:57:9e:10:13:6f:4e:7e:04:96: 1e:77:6d:3c:f2:2f:f8:3e:e9:bf:19:6d:40:1b:5a:82:3f:39: f3:16:15:c1:93:30:9d:b7:9e:f1:c1:58:cc:c3:06:d8:85:92: 25:e0:81:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ25lG8EQEWLzZsiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NDkxOWI4ZmQtZTU2ZS00OWE2LTg4MTgtMzZmNmZlOGViN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGi/XfoQukmmFG7UmW16YOb8YNRokZWe600q uNp2itwl3hZXqXYBTr1LajBekHhyOu4DMIkyJHSBSKAP5gPKfZOyYiEZZCEvUIvy 219khGfkSSYhIyeou+p0tELkMqJ9XgT0pA7Rn8Y9U2ZYlO0zGCV6pjzXmph2mviZ 8p+MMpOYccqEGO9eXI4w7LA+v04ziM4Ee8Z/ytmrMKhnTgwON+FG4noHRFSL2Arq PKXb142UkUd/bx8gUBn/ZFZxRBPXjbGynCRe5g9BDj3fDtb5SWkPA3tMv6nZVKST zEylEsqijuJLMNiMiZlNMGdld/Z4fEdZAmxkjA2I3J88dpVwCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4SUqyDiPOhvz8zUgMibS7v1kR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvZTdmYzAwMjItOWJmYS0z NmViLTgzYjctYzVkZTVhZDkyNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfqlPL4F/zj1Ld7DSdY6GZ7DZPaYyfULSbUK9Q8YrUwOZ3I5EbXBtZw CnXQNHa7R3Q6hAvKaAmtaoo1kH89L3EXBqPiMg3h5rVpHnmlgmiVfcPAJlFWmxTg CoJY4qGNL3ivvt5XnVgZhre1Zj9WnZVZG2dAONCU5R96ZYr6lPe98DT5Ndft4wjo Yy6XtxZ3cJDTapA5BqwIqQsCDqmlF4z4QtbDvUGBayngmoeM4csARtPecOipazar BGtmGXhgkS/j3F4fzTvzn6kTSIBqO1eeEBNvTn4Elh53bTzyL/g+6b8ZbUAbWoI/ OfMWFcGTMJ23nvHBWMzDBtiFkiXggQ8= -----END CERTIFICATE-----Generated at Sun Aug 24 06:56:12 2025 by rpki-client