$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa File: e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa (raw, json) Hash identifier: tNIF9Qzr9x2mZ8vHk08RhcrNH81S2KaiCu2Tid1xxvA= Subject key identifier: 97:0B:C8:25:2A:70:70:F2:F3:9E:B6:97:45:58:9D:37:00:A6:1C:4E Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584A45403BFC9C93B82288E8B640 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 9009 IP address blocks: 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:3b:fc:9c:93:b8:22:88:e8:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=7fd12c48-164e-4dea-bbd5-24e1d23234ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:bf:84:7b:3a:05:96:72:d1:eb:c2:4e:b8: 1f:b7:c2:8e:df:ce:77:06:92:f5:b0:99:3f:bb:18: 6c:f4:4d:b6:76:78:8a:54:a1:cd:83:34:94:01:ed: fb:01:8c:45:19:c6:e7:37:5c:bc:87:fc:00:21:d0: 89:1c:5f:0b:03:1a:19:d0:f4:c2:b0:7a:14:91:11: d5:28:55:da:61:56:38:e4:71:6b:f8:8c:a7:03:d7: af:a4:70:b6:b4:72:aa:83:1c:10:f3:6d:d5:2a:df: 89:c1:3b:fc:53:f0:2a:23:df:3f:3b:7e:19:a5:f3: 33:4c:2b:3f:0a:7f:39:25:1d:57:4c:35:55:cd:3a: ef:ca:12:de:ad:3a:78:55:e2:3e:9d:d3:02:a0:1b: d9:11:c5:7a:31:55:0e:95:36:a3:82:68:a6:2b:fb: 53:b6:65:cb:ca:6f:47:b9:d5:1f:2b:63:6f:44:23: 6e:87:2b:d8:bb:ff:d7:46:0e:a1:f6:0d:56:1e:34: 45:6e:44:f4:19:58:30:c9:f8:40:1a:cf:e2:75:f4: 49:3d:16:7d:23:17:7c:e3:b0:4e:d5:3d:06:e7:ae: 95:79:01:29:7c:f1:fb:d5:6c:c0:1f:e7:d4:1d:22: 3e:a6:14:f5:99:41:15:8e:16:2c:d8:a7:61:c2:65: 59:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:C8:25:2A:70:70:F2:F3:9E:B6:97:45:58:9D:37:00:A6:1C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:de:4e:61:6e:4d:e0:9c:55:ce:44:b3:33:d7:b3:25:c4:c4: 2b:7a:10:ba:a5:a2:b2:1e:b6:22:26:a5:28:19:da:06:28:c1: bc:90:19:78:40:04:bd:89:0d:bc:cd:6b:5c:75:c2:31:de:c2: f2:5a:0d:b5:ac:f1:8f:fb:f5:f0:77:f0:b5:98:c0:24:f6:74: 7a:94:26:15:2f:f9:40:a8:b4:4b:a9:ea:0a:73:b8:ac:48:cf: 4c:47:a0:ef:c8:06:67:2e:40:86:eb:e1:0e:6e:91:0c:d6:cb: 36:48:c7:dd:9f:11:79:0f:cc:fc:58:4d:18:40:e9:7b:fe:f2: ed:da:40:e7:d9:38:bc:ce:cd:ee:49:8b:0d:12:5e:be:5e:67: ff:57:01:30:ae:e7:ad:3a:c2:d3:3a:10:98:95:0c:23:c0:5d: d5:67:13:f4:6e:26:d5:2c:62:6e:d6:ca:1b:50:e3:1d:a7:08: bc:a1:f2:05:e5:9e:e0:bf:dc:73:f3:40:52:4d:7f:d6:d5:f9: 57:0c:27:7e:c9:d7:2d:8b:1a:bd:94:97:4a:d9:aa:e7:86:01: a6:9a:5e:99:68:53:33:90:99:81:eb:62:42:d2:d5:20:da:13: 57:15:24:7f:b6:32:1b:dc:de:20:44:cc:2b:54:a0:27:27:a1: 00:9e:bd:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQDv8nJO4IojotkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk N2ZkMTJjNDgtMTY0ZS00ZGVhLWJiZDUtMjRlMWQyMzIzNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/y/hHs6BZZy0evCTrgft8KO3853BpL1sJk/ uxhs9E22dniKVKHNgzSUAe37AYxFGcbnN1y8h/wAIdCJHF8LAxoZ0PTCsHoUkRHV KFXaYVY45HFr+IynA9evpHC2tHKqgxwQ823VKt+JwTv8U/AqI98/O34ZpfMzTCs/ Cn85JR1XTDVVzTrvyhLerTp4VeI+ndMCoBvZEcV6MVUOlTajgmimK/tTtmXLym9H udUfK2NvRCNuhyvYu//XRg6h9g1WHjRFbkT0GVgwyfhAGs/idfRJPRZ9Ixd847BO 1T0G566VeQEpfPH71WzAH+fUHSI+phT1mUEVjhYs2KdhwmVZKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcLyCUqcHDy8562l0VYnTcAphxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZTljOGI5NTctMDhiNi0z NDZiLWJmYWEtNWUwMmEwODk2MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPeTmFuTeCcVc5EszPXsyXExCt6ELqlorIetiImpSgZ2gYowbyQGXhA BL2JDbzNa1x1wjHewvJaDbWs8Y/79fB38LWYwCT2dHqUJhUv+UCotEup6gpzuKxI z0xHoO/IBmcuQIbr4Q5ukQzWyzZIx92fEXkPzPxYTRhA6Xv+8u3aQOfZOLzOze5J iw0SXr5eZ/9XATCu5606wtM6EJiVDCPAXdVnE/RuJtUsYm7WyhtQ4x2nCLyh8gXl nuC/3HPzQFJNf9bV+VcMJ37J1y2LGr2Ul0rZqueGAaaaXploUzOQmYHrYkLS1SDa E1cVJH+2Mhvc3iBEzCtUoCcnoQCevdk= -----END CERTIFICATE-----Generated at Mon Jun 30 14:58:30 2025 by rpki-client