$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa File: a929555f-9352-337b-a8b7-403f6d57c296.roa (raw, json) Hash identifier: 0z3ruy8HNaVzP+X8zNEMY8aObKCVwGXBiMbVbhBxDPI= Subject key identifier: A7:41:71:A1:9F:CF:84:04:64:3E:80:81:2C:08:12:10:CD:C1:B5:E8 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F43285849F2E5311CA744F0920DFA7300 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 394111 IP address blocks: 172.97.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:31:1c:a7:44:f0:92:0d:fa:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=b9539b5c-121f-40bb-8e8a-0a741a0b295c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:ca:dc:47:77:e9:41:3b:53:96:fc:e6:58: 43:73:bc:9c:6c:8b:98:3a:69:15:8e:78:25:93:48: 4d:9b:71:7f:89:fd:49:ca:63:0b:f4:fa:f5:5b:4c: 96:43:ea:36:05:2e:aa:ab:c5:fe:8e:ab:95:30:b1: 84:85:13:25:02:55:49:90:4e:b9:a9:49:b6:d8:98: e6:4a:21:2f:72:ec:9f:f9:81:34:ab:b1:c2:08:df: ae:23:b1:f8:49:7c:c5:0a:58:0e:70:56:2a:08:08: e8:9f:00:9e:a7:92:90:f7:4b:4e:ba:88:d2:c3:bb: 4f:d1:8d:94:ba:95:62:eb:98:ea:cc:18:e6:51:f1: 4a:0a:39:34:7a:95:a0:c3:25:88:72:d8:cc:a3:1d: 1d:01:b4:11:e6:56:7b:ea:2c:4d:21:cf:24:73:a4: 13:d8:ac:f2:0f:e2:8d:8d:d8:5c:a9:3b:ab:2c:37: d0:c4:9f:97:a4:88:04:54:69:4a:83:cc:e8:ae:ff: 44:88:54:96:b1:23:7b:5f:c1:c9:9d:38:67:67:26: 67:0b:d9:84:57:d0:de:e6:b4:d9:b3:5b:29:a2:94: 70:5a:45:41:ca:c7:54:97:9f:cf:0d:3c:73:79:b6: a3:d9:0e:95:2a:d8:3f:38:ad:39:ce:9c:c1:4b:9f: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:41:71:A1:9F:CF:84:04:64:3E:80:81:2C:08:12:10:CD:C1:B5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 172.97.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ec:48:01:86:ae:ec:17:2e:85:38:ea:b3:da:d8:d0:40:62: f8:0b:86:0c:ff:4c:5e:b6:ba:b1:3a:8f:e9:54:a6:6b:c7:bd: 9c:53:95:96:73:78:5b:18:f4:41:31:36:58:f5:f3:d9:99:a8: a5:65:71:13:51:ed:6e:ac:b3:9a:0a:cd:4e:52:5c:24:9d:c3: 46:b9:1c:40:9f:a4:29:5e:d8:4b:65:99:f2:75:53:8e:78:d0: 76:79:bf:34:af:ef:6e:78:d6:d8:9d:c1:25:8d:fd:21:a7:2d: 68:77:87:aa:2c:d1:21:1c:ad:4b:de:0e:e1:c4:9c:21:39:75: 37:61:f1:9e:22:c5:82:4f:12:7f:8f:a6:44:0c:ec:79:00:c9: d7:68:dc:11:ef:cf:0b:9b:f8:3c:cb:0b:9b:36:9b:9c:b9:15: da:6d:3a:eb:de:e7:be:fd:2c:3c:03:fa:59:ec:8e:82:75:ff: c3:6e:99:e9:11:97:4f:c3:95:5c:93:23:b6:4f:d1:2d:3e:60: 13:0c:f5:43:ba:d8:8b:a2:24:7d:b6:ae:37:6f:88:2a:a5:d6: 2c:f3:15:e7:5c:53:16:20:c3:54:2d:82:49:7e:75:ac:d1:80: 05:43:84:58:2b:15:e1:f0:75:fe:18:6d:7e:00:db:9b:3c:30: 24:9c:08:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TEcp0Twkg36cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk Yjk1MzliNWMtMTIxZi00MGJiLThlOGEtMGE3NDFhMGIyOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNzK3Ed36UE7U5b85lhDc7ycbIuYOmkVjngl k0hNm3F/if1JymML9Pr1W0yWQ+o2BS6qq8X+jquVMLGEhRMlAlVJkE65qUm22Jjm SiEvcuyf+YE0q7HCCN+uI7H4SXzFClgOcFYqCAjonwCep5KQ90tOuojSw7tP0Y2U upVi65jqzBjmUfFKCjk0epWgwyWIctjMox0dAbQR5lZ76ixNIc8kc6QT2KzyD+KN jdhcqTurLDfQxJ+XpIgEVGlKg8zorv9EiFSWsSN7X8HJnThnZyZnC9mEV9De5rTZ s1spopRwWkVBysdUl5/PDTxzebaj2Q6VKtg/OK05zpzBS58SfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdBcaGfz4QEZD6AgSwIEhDNwbXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYTkyOTU1NWYtOTM1Mi0z MzdiLWE4YjctNDAzZjZkNTdjMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErGEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbsSAGGruwXLoU46rPa2NBAYvgLhgz/TF62urE6j+lUpmvHvZxTlZZz eFsY9EExNlj189mZqKVlcRNR7W6ss5oKzU5SXCSdw0a5HECfpCle2EtlmfJ1U454 0HZ5vzSv72541tidwSWN/SGnLWh3h6os0SEcrUveDuHEnCE5dTdh8Z4ixYJPEn+P pkQM7HkAyddo3BHvzwub+DzLC5s2m5y5FdptOuve5779LDwD+lnsjoJ1/8NumekR l0/DlVyTI7ZP0S0+YBMM9UO62IuiJH22rjdviCql1izzFedcUxYgw1Qtgkl+dazR gAVDhFgrFeHwdf4YbX4A25s8MCScCCs= -----END CERTIFICATE-----Generated at Tue Jul 1 23:27:58 2025 by rpki-client