$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa File: ff5499bf-8280-386d-a55a-c494181be5f5.roa (raw, json) Hash identifier: 9LLeZ4rkZz+JwZ9WVKWFnMQ0u7M1K5xzaGyN4Pju9Hs= Subject key identifier: 92:88:E2:7B:69:20:6F:08:9C:5B:FA:B7:36:0E:63:05:8D:8A:0E:CC Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F4328584A46A5AAC6E910BD7C1EFD7B60 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 393909 IP address blocks: 172.86.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:aa:c6:e9:10:bd:7c:1e:fd:7b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=4422e896-5176-4c0c-ba4f-dcde2f2a483f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:de:0c:70:48:91:31:7f:01:39:1a:ce:66: 01:ec:fd:6d:ed:9a:a4:be:f0:6d:aa:b5:64:61:22: d1:f7:50:74:7c:ef:21:12:58:b3:3d:6a:f8:0a:83: c5:8c:9a:4c:08:19:70:7d:bb:47:d5:56:7d:4d:da: c1:d4:5b:46:b0:f0:39:bf:e1:e1:a8:c4:fc:03:4c: 16:20:64:ce:4b:fb:93:a7:5b:d0:65:bd:0f:3f:25: 0e:e8:0e:38:68:02:7d:58:23:ab:8d:ef:94:46:9d: 35:7b:29:18:8d:45:c7:05:9a:f9:8f:43:e0:7f:2e: 27:41:72:81:db:cc:92:7d:96:5b:07:13:5f:28:26: 73:65:04:ad:b8:37:9a:3a:92:19:e8:2f:af:d0:d9: 67:93:74:99:5f:2d:43:33:9f:34:9b:d8:07:39:cb: be:73:45:70:c0:91:6c:c7:e0:37:96:f4:04:c8:59: dd:af:a6:ef:ce:c9:d9:e5:36:69:04:7b:48:df:f2: b7:0a:c9:8e:a7:cb:61:6f:08:14:8e:a1:80:f7:39: 8e:48:1f:1d:65:c0:3f:46:7d:f4:4d:d9:6d:5d:7e: a8:b4:a4:2d:75:6a:34:c6:22:29:8c:95:30:a2:82: 4f:d3:fa:55:71:81:d3:77:dd:eb:89:91:1a:c6:ce: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:88:E2:7B:69:20:6F:08:9C:5B:FA:B7:36:0E:63:05:8D:8A:0E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 172.86.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ee:0b:50:5f:f7:bd:3e:e8:86:ec:94:d7:37:e7:fa:32:d7: 27:b5:e7:09:76:e5:d7:b1:bc:83:f1:24:65:8f:08:bd:71:3d: 0b:f1:51:fc:9a:c4:e2:4d:48:10:72:61:75:44:30:ad:04:d0: 31:13:d4:e2:2f:d3:a4:84:e8:cf:74:4e:9c:da:ff:c2:26:07: ac:bd:9c:89:a3:c4:c8:46:b8:48:ca:54:8a:c2:1e:e9:50:eb: 76:f6:2a:64:0e:a2:10:ee:cb:38:fd:fe:52:e4:a6:20:5a:7a: e8:8e:f2:4f:c2:74:58:5a:63:e1:45:38:2a:c9:c0:89:a9:15: b4:17:20:51:14:0c:7c:ad:73:78:43:a7:8c:f3:d2:ff:2c:44: 5d:e1:92:e7:e4:bc:c9:cf:17:1a:df:3a:7d:3e:e9:d9:88:2a: a1:6a:ea:b2:76:f7:13:86:ea:c7:5e:fe:8f:27:83:01:b0:73: 7b:44:a5:b6:88:c0:c2:9d:15:f8:69:bb:5a:ac:9f:a2:fa:db: b4:66:5c:0d:b9:8a:ce:f2:52:9b:f3:a5:be:fb:79:5f:a7:3c: 7a:fb:7f:69:f0:12:70:eb:ca:fb:f2:45:b4:ed:23:d9:ec:24: 6c:6f:7b:a3:59:2c:32:0e:54:03:b0:42:34:b2:13:67:90:0b: 4a:58:7b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGparG6RC9fB79e2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk NDQyMmU4OTYtNTE3Ni00YzBjLWJhNGYtZGNkZTJmMmE0ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL3eDHBIkTF/ATkazmYB7P1t7ZqkvvBtqrVk YSLR91B0fO8hElizPWr4CoPFjJpMCBlwfbtH1VZ9TdrB1FtGsPA5v+HhqMT8A0wW IGTOS/uTp1vQZb0PPyUO6A44aAJ9WCOrje+URp01eykYjUXHBZr5j0Pgfy4nQXKB 28ySfZZbBxNfKCZzZQStuDeaOpIZ6C+v0Nlnk3SZXy1DM580m9gHOcu+c0VwwJFs x+A3lvQEyFndr6bvzsnZ5TZpBHtI3/K3CsmOp8thbwgUjqGA9zmOSB8dZcA/Rn30 TdltXX6otKQtdWo0xiIpjJUwooJP0/pVcYHTd93riZEaxs54DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKI4ntpIG8InFv6tzYOYwWNig7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvZmY1NDk5YmYtODI4MC0z ODZkLWE1NWEtYzQ5NDE4MWJlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnuC1Bf970+6IbslNc35/oy1ye15wl25dexvIPxJGWPCL1xPQvxUfya xOJNSBByYXVEMK0E0DET1OIv06SE6M90Tpza/8ImB6y9nImjxMhGuEjKVIrCHulQ 63b2KmQOohDuyzj9/lLkpiBaeuiO8k/CdFhaY+FFOCrJwImpFbQXIFEUDHytc3hD p4zz0v8sRF3hkufkvMnPFxrfOn0+6dmIKqFq6rJ29xOG6sde/o8ngwGwc3tEpbaI wMKdFfhpu1qsn6L627RmXA25is7yUpvzpb77eV+nPHr7f2nwEnDryvvyRbTtI9ns JGxve6NZLDIOVAOwQjSyE2eQC0pYe5o= -----END CERTIFICATE-----Generated at Fri Jul 4 17:43:08 2025 by rpki-client