$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa File: cd8c45de-7335-36d8-861c-1a78550f1bda.roa (raw, json) Hash identifier: U9pBhOzfiIywMSduPNC54tHwQ70aZhL42ZoWaq777pE= Subject key identifier: CC:DE:14:57:C7:A3:E9:38:1A:EB:25:69:1D:10:C8:BD:39:FF:68:D3 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584A4AD5960212532414F17FB400 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 50304 IP address blocks: 172.84.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:96:02:12:53:24:14:f1:7f:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=85f44bfb-3972-4a5e-893f-cd4ff4d60352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:07:03:58:84:82:85:a4:1f:97:e5:e0:3e: bb:35:40:3d:e3:d3:1e:c5:a6:e7:45:c4:8a:34:b5: ff:20:ea:bf:b9:83:de:29:54:c3:fa:41:03:f2:68: 02:cb:f5:da:e7:be:bc:76:c8:92:38:98:47:e1:54: bd:71:a6:1b:7b:8a:9b:4a:2f:df:c8:14:5c:a1:89: 8f:3d:cd:88:6f:ea:d9:f7:5d:07:e0:d6:76:77:f1: 2b:55:46:8e:1a:cf:ff:5b:5a:73:77:e5:bd:47:83: 61:be:29:62:54:7a:ec:1a:45:6a:87:a8:de:ba:a2: 6c:f3:0d:55:92:2e:db:86:c6:29:2d:e4:19:d9:1a: fc:ba:fa:dd:14:ed:22:50:a3:8e:b3:04:72:a8:ad: c7:ba:38:5f:1e:3e:a2:4e:e3:bd:5e:6e:c5:04:ca: 02:15:6a:d2:62:3f:f1:12:61:b4:ec:27:dd:f4:15: da:43:6d:b2:e1:e0:5e:55:a7:61:f7:a9:b0:39:b0: 75:e6:5d:27:44:75:27:cb:54:71:bd:eb:b6:17:5d: 5d:ff:95:0e:04:29:6d:e2:e3:a6:dd:cb:47:e2:0c: cd:48:14:64:b4:8f:e3:b4:25:b6:25:c0:8c:9a:fb: 8c:6f:be:d4:f6:75:48:cf:61:92:be:69:f5:34:c1: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DE:14:57:C7:A3:E9:38:1A:EB:25:69:1D:10:C8:BD:39:FF:68:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/cd8c45de-7335-36d8-861c-1a78550f1bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:df:0f:79:2a:61:f4:9f:15:2d:a1:4f:3e:89:65:f8:ca:2c: 03:15:d2:c5:24:34:26:c9:90:41:33:7b:8d:a6:72:aa:f5:33: 14:cc:35:96:af:46:bc:a7:2a:1d:64:3d:a3:cf:97:c8:3b:24: cc:a7:5f:12:63:16:11:81:da:84:00:b5:57:92:fe:40:d1:fe: 49:ff:96:c4:b5:94:cf:a0:e9:97:cc:56:42:a4:be:a0:f0:76: a4:0c:04:1a:b7:1e:bf:e2:1e:d7:a4:f0:d2:e8:0c:f2:28:53: f5:14:ad:7b:44:dc:7a:54:08:61:2c:0a:3f:40:36:30:55:c3: c0:37:3d:73:5e:d2:41:ad:89:18:f4:bb:92:81:8f:0f:3b:0d: a2:a6:a9:4f:ea:97:a3:8c:43:8b:95:a0:57:49:ab:8f:de:37: 0e:d4:89:bc:cd:1d:84:7c:38:29:c4:4a:e4:b2:a9:b9:d3:40: ac:db:f1:01:f6:3d:94:7c:c5:9f:a9:d3:a0:d5:e6:55:77:13: 9e:6a:cf:36:07:ed:cc:00:50:ac:02:df:0a:d9:48:81:8d:fc: 12:f1:99:06:94:11:e0:5e:3a:ae:22:ee:73:0e:92:1f:fd:2c: 5c:de:fe:8c:67:69:a9:9d:11:ed:cc:fd:23:bf:22:03:a7:c2: bd:83:9a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZYCElMkFPF/tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk ODVmNDRiZmItMzk3Mi00YTVlLTg5M2YtY2Q0ZmY0ZDYwMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGUHA1iEgoWkH5fl4D67NUA949MexabnRcSK NLX/IOq/uYPeKVTD+kED8mgCy/Xa5768dsiSOJhH4VS9caYbe4qbSi/fyBRcoYmP Pc2Ib+rZ910H4NZ2d/ErVUaOGs//W1pzd+W9R4NhviliVHrsGkVqh6jeuqJs8w1V ki7bhsYpLeQZ2Rr8uvrdFO0iUKOOswRyqK3HujhfHj6iTuO9Xm7FBMoCFWrSYj/x EmG07Cfd9BXaQ22y4eBeVadh96mwObB15l0nRHUny1Rxveu2F11d/5UOBClt4uOm 3ctH4gzNSBRktI/jtCW2JcCMmvuMb77U9nVIz2GSvmn1NMHU6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzeFFfHo+k4GuslaR0QyL05/2jTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvY2Q4YzQ1ZGUtNzMzNS0z NmQ4LTg2MWMtMWE3ODU1MGYxYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFS3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJffD3kqYfSfFS2hTz6JZfjKLAMV0sUkNCbJkEEze42mcqr1MxTMNZav RrynKh1kPaPPl8g7JMynXxJjFhGB2oQAtVeS/kDR/kn/lsS1lM+g6ZfMVkKkvqDw dqQMBBq3Hr/iHtek8NLoDPIoU/UUrXtE3HpUCGEsCj9ANjBVw8A3PXNe0kGtiRj0 u5KBjw87DaKmqU/ql6OMQ4uVoFdJq4/eNw7UibzNHYR8OCnESuSyqbnTQKzb8QH2 PZR8xZ+p06DV5lV3E55qzzYH7cwAUKwC3wrZSIGN/BLxmQaUEeBeOq4i7nMOkh/9 LFze/oxnaamdEe3M/SO/IgOnwr2DmlQ= -----END CERTIFICATE-----Generated at Mon Jun 30 16:08:56 2025 by rpki-client