$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9e23eb36-8043-3674-a5d9-20624c5c858e.roa File: 9e23eb36-8043-3674-a5d9-20624c5c858e.roa (raw, json) Hash identifier: IoKWEFmOlcbkOY45RB6TQCXwHM3wVHWgpM9oSpIl7r4= Subject key identifier: 29:7F:53:CE:B0:F5:A3:1A:9E:3C:63:25:0F:89:CE:9F:83:A0:6C:D2 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584AE89129903629C040EDCD3B00 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9e23eb36-8043-3674-a5d9-20624c5c858e.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 46261 IP address blocks: 172.102.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:29:90:36:29:c0:40:ed:cd:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=905704f1-5941-4a8c-a0d1-137c38f3c4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2e:b8:5f:28:2b:5b:95:74:dd:63:ed:11:83: 61:26:0c:1e:1f:cf:ce:38:22:ef:61:26:55:a2:1f: 4f:bc:04:db:50:5b:45:b8:5c:5f:2f:0f:37:f0:a2: 3c:31:20:b9:1e:c7:a5:e6:e2:e9:bd:8d:25:87:6f: e6:6c:f6:04:54:4f:80:43:66:e5:b7:f4:38:ce:ea: cf:e8:3c:ce:0a:50:66:94:fc:ff:88:45:f2:57:91: e1:31:73:38:d5:06:9e:17:3b:5d:01:af:ae:4d:2d: 93:2a:67:25:7d:3c:fb:40:3b:ec:14:83:5b:27:c3: 71:ca:f0:27:05:f3:53:0a:f7:5d:1c:f6:d2:1c:8d: 24:b8:da:25:49:e5:d7:4a:7c:33:c8:db:f1:5e:52: 02:8a:3c:43:5c:75:58:e4:ba:2f:7b:14:e6:4e:37: c0:59:6a:40:f9:de:b1:03:c4:df:42:09:91:0d:d8: 82:d7:6b:84:5d:36:bc:66:11:e4:d0:07:c3:9f:97: ca:6a:f1:cf:bd:60:74:05:60:3a:5e:8f:10:6f:70: 20:6d:9b:e8:72:c6:f7:65:10:b9:98:48:32:c2:a4: b0:14:5e:88:f0:9a:24:58:a9:1b:5e:78:d9:a9:7a: 40:fd:7d:64:5e:cd:48:c0:99:fe:97:aa:c0:a4:43: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7F:53:CE:B0:F5:A3:1A:9E:3C:63:25:0F:89:CE:9F:83:A0:6C:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9e23eb36-8043-3674-a5d9-20624c5c858e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f3:e7:1e:82:2d:98:a7:cc:a5:8a:a7:ee:b3:63:e7:47:27: a3:02:41:36:df:9a:7b:48:b3:42:8a:11:b9:cc:ac:c2:04:f8: ec:35:1a:47:99:02:26:7a:fb:10:34:0f:24:88:6f:bc:64:17: 74:03:ed:b9:58:7f:0f:3c:f8:3e:d0:e6:4e:9a:66:81:f6:c8: c4:31:03:bf:44:b5:f0:0e:25:ef:71:a1:3d:4a:08:cc:16:b7: 6c:8e:72:36:85:cc:0b:5c:cd:cd:1c:55:87:b7:cc:c3:54:13: b7:65:1f:13:7e:a9:a9:f2:cf:29:12:04:e7:35:02:a6:0a:3c: 5c:17:c4:79:34:fb:4d:69:5c:35:04:a1:18:27:64:5e:d3:07: 82:e2:a1:b6:01:cc:c5:95:b4:86:28:e7:3d:4b:0f:25:a0:cf: 5d:b9:44:1a:2c:a8:2f:23:97:0e:a4:ce:c4:be:33:f6:7f:cd: f3:8e:1a:ca:87:ec:23:96:1e:df:21:77:12:c4:67:b8:63:1b: 2b:ee:67:71:f1:54:1a:7f:95:64:01:1a:52:2a:7d:8b:62:04: 9d:16:b4:ae:0d:06:29:8b:13:a2:b5:40:7c:3d:17:17:ae:4a: 7f:cb:bf:b5:ca:b8:7c:5c:ef:33:4a:88:f2:16:ec:36:82:99: e6:ee:d8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSmQNinAQO3NOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OTA1NzA0ZjEtNTk0MS00YThjLWEwZDEtMTM3YzM4ZjNjNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS64XygrW5V03WPtEYNhJgweH8/OOCLvYSZV oh9PvATbUFtFuFxfLw838KI8MSC5Hsel5uLpvY0lh2/mbPYEVE+AQ2blt/Q4zurP 6DzOClBmlPz/iEXyV5HhMXM41QaeFztdAa+uTS2TKmclfTz7QDvsFINbJ8NxyvAn BfNTCvddHPbSHI0kuNolSeXXSnwzyNvxXlICijxDXHVY5LovexTmTjfAWWpA+d6x A8TfQgmRDdiC12uEXTa8ZhHk0AfDn5fKavHPvWB0BWA6Xo8Qb3AgbZvocsb3ZRC5 mEgywqSwFF6I8JokWKkbXnjZqXpA/X1kXs1IwJn+l6rApENCHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl/U86w9aManjxjJQ+Jzp+DoGzSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvOWUyM2ViMzYtODA0My0z Njc0LWE1ZDktMjA2MjRjNWM4NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvz5x6CLZinzKWKp+6zY+dHJ6MCQTbfmntIs0KKEbnMrMIE+Ow1GkeZ AiZ6+xA0DySIb7xkF3QD7blYfw88+D7Q5k6aZoH2yMQxA79EtfAOJe9xoT1KCMwW t2yOcjaFzAtczc0cVYe3zMNUE7dlHxN+qanyzykSBOc1AqYKPFwXxHk0+01pXDUE oRgnZF7TB4LiobYBzMWVtIYo5z1LDyWgz125RBosqC8jlw6kzsS+M/Z/zfOOGsqH 7COWHt8hdxLEZ7hjGyvuZ3HxVBp/lWQBGlIqfYtiBJ0WtK4NBimLE6K1QHw9Fxeu Sn/Lv7XKuHxc7zNKiPIW7DaCmebu2B8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:50 2025 by rpki-client