$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/f25f42ed-7137-3b05-9a9a-59cbff82b9eb.roa File: f25f42ed-7137-3b05-9a9a-59cbff82b9eb.roa (raw, json) Hash identifier: VoD3IZcSLomlNf2BHLzKQvNNgOLSV3rIh723CqCq644= Subject key identifier: B6:23:FD:34:35:6B:6F:AD:D5:E7:13:65:24:70:68:BB:F7:C7:28:03 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285849D910DD19D3DC9AC0AC112540 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/f25f42ed-7137-3b05-9a9a-59cbff82b9eb.roa Signing time: Wed 14 May 2025 06:58:13 +0000 ROA not before: Wed 14 May 2025 06:58:13 +0000 ROA not after: Tue 12 Aug 2025 06:58:13 +0000 asID: 26658 IP address blocks: 172.87.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:10:dd:19:d3:dc:9a:c0:ac:11:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: May 14 06:58:13 2025 GMT Not After : Aug 12 06:58:13 2025 GMT Subject: CN=78ff8b8a-5da6-4956-9fcd-fea65ebdb089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:db:98:1e:2c:4d:fc:84:35:2f:6d:b8:df:8a: 6b:53:22:b0:77:40:45:59:5f:64:54:6e:73:14:a4: 76:de:92:fa:ca:a7:ad:19:c3:aa:9c:0e:82:97:64: 55:92:3e:1d:88:82:27:6a:07:77:d8:a7:d6:00:49: 11:f8:36:03:6e:ed:7f:a2:18:98:ee:d2:37:10:c6: bd:5f:bb:82:b4:5a:39:8a:96:9c:6d:c9:53:01:f4: 9c:e9:b0:f9:5f:42:a8:79:50:be:f0:f3:92:93:f1: 72:5d:07:cf:30:92:61:6d:51:0e:e7:7a:3c:71:df: 47:d0:e0:a7:e1:6d:76:b5:72:f5:81:e9:1b:af:28: bf:be:02:0f:14:87:f0:4b:9f:72:de:5c:5f:1c:0a: e8:50:f6:19:b4:df:58:66:27:7d:f9:f7:da:d2:c4: 82:9a:f5:3b:9b:b4:9f:b7:22:a7:8a:ca:7c:db:dc: 7d:d4:05:5c:1f:45:fb:31:6b:a0:43:77:31:11:f0: fe:77:f8:4c:ae:aa:8c:0d:01:0f:12:ac:02:2c:c0: 63:a5:c4:05:cd:2b:39:68:a6:36:7f:2f:9e:a4:d8: 2f:fb:c3:e0:bd:6c:90:ef:7e:97:ae:f9:d2:64:31: 5f:35:6f:8c:bd:74:80:e8:94:23:81:3d:a6:5a:b9: 82:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:23:FD:34:35:6B:6F:AD:D5:E7:13:65:24:70:68:BB:F7:C7:28:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/f25f42ed-7137-3b05-9a9a-59cbff82b9eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b1:40:c4:46:d7:75:c1:22:b4:78:51:32:c0:ee:23:0b:32: 68:fa:d6:60:4b:3a:63:5e:b4:53:ff:e2:d8:2b:97:7b:bd:e9: 8e:60:b3:a4:24:29:1e:2a:fd:7a:08:3f:3a:a5:7f:19:11:bf: 84:86:14:01:f4:8f:27:5c:68:0a:6f:20:ad:fe:34:71:86:46: b4:6b:d7:12:da:cf:c9:50:56:02:a7:04:59:98:dc:b0:d3:10: 25:c1:65:9a:09:33:64:38:c8:ee:70:aa:61:8d:db:58:e6:81: fd:88:95:f5:85:69:63:f7:15:ac:a5:00:9f:7d:ff:6b:72:02: 5a:31:aa:0e:a3:f0:77:60:e6:65:df:ff:d2:21:4c:db:fa:bb: e5:85:af:34:6b:9f:6a:c2:9b:97:e9:3a:bb:ac:29:93:16:1f: 8b:48:13:d6:ec:93:26:05:94:4a:ee:fe:c0:d0:0e:43:d1:56: 9f:88:f0:3a:50:bf:ce:25:35:33:7c:8a:27:59:d3:44:56:52: fc:78:81:36:1a:97:67:36:0c:90:2d:c4:3d:f2:e1:dd:f6:a0: f1:95:39:ea:21:bd:6c:d7:fb:36:8c:c9:b8:06:35:1f:13:00: 91:ea:58:7d:5d:46:c0:be:74:b3:21:ed:92:35:89:64:f3:b1: bf:fa:0c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZEN0Z09yawKwRJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDUxNDA2NTgxM1oXDTI1MDgxMjA2NTgxM1owLzEtMCsGA1UEAxMk NzhmZjhiOGEtNWRhNi00OTU2LTlmY2QtZmVhNjVlYmRiMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNuYHixN/IQ1L22434prUyKwd0BFWV9kVG5z FKR23pL6yqetGcOqnA6Cl2RVkj4diIInagd32KfWAEkR+DYDbu1/ohiY7tI3EMa9 X7uCtFo5ipacbclTAfSc6bD5X0KoeVC+8POSk/FyXQfPMJJhbVEO53o8cd9H0OCn 4W12tXL1gekbryi/vgIPFIfwS59y3lxfHAroUPYZtN9YZid9+ffa0sSCmvU7m7Sf tyKnisp829x91AVcH0X7MWugQ3cxEfD+d/hMrqqMDQEPEqwCLMBjpcQFzSs5aKY2 fy+epNgv+8PgvWyQ736XrvnSZDFfNW+MvXSA6JQjgT2mWrmCUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYj/TQ1a2+t1ecTZSRwaLv3xygDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvZjI1ZjQyZWQtNzEzNy0z YjA1LTlhOWEtNTljYmZmODJiOWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFfCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyxQMRG13XBIrR4UTLA7iMLMmj61mBLOmNetFP/4tgrl3u96Y5gs6Qk KR4q/XoIPzqlfxkRv4SGFAH0jydcaApvIK3+NHGGRrRr1xLaz8lQVgKnBFmY3LDT ECXBZZoJM2Q4yO5wqmGN21jmgf2IlfWFaWP3FaylAJ99/2tyAloxqg6j8Hdg5mXf /9IhTNv6u+WFrzRrn2rCm5fpOrusKZMWH4tIE9bskyYFlEru/sDQDkPRVp+I8DpQ v84lNTN8iidZ00RWUvx4gTYal2c2DJAtxD3y4d32oPGVOeohvWzX+zaMybgGNR8T AJHqWH1dRsC+dLMh7ZI1iWTzsb/6DMM= -----END CERTIFICATE-----Generated at Sun Jun 29 13:29:02 2025 by rpki-client