$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/88059636-a9a3-31e4-8692-df70f2daa35b.roa File: 88059636-a9a3-31e4-8692-df70f2daa35b.roa (raw, json) Hash identifier: uTCNp3WK8ig/lVwPALjXpqdEc4scytVE0EBmlXcpUgo= Subject key identifier: CE:3C:9B:DF:7D:9E:3D:F1:D0:49:1D:A6:CF:2C:61:24:10:C1:18:79 Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F4328584ACC1C0CA8DF2ACFF19A25B400 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/88059636-a9a3-31e4-8692-df70f2daa35b.roa Signing time: Sat 09 Aug 2025 08:22:11 +0000 ROA not before: Sat 09 Aug 2025 08:22:11 +0000 ROA not after: Fri 07 Nov 2025 09:22:11 +0000 asID: 40676 IP address blocks: 172.96.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:1c:0c:a8:df:2a:cf:f1:9a:25:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Aug 9 08:22:11 2025 GMT Not After : Nov 7 09:22:11 2025 GMT Subject: CN=60da74f5-0b2e-401d-b699-2b7df31717b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:5a:8e:ae:6a:6c:41:60:d1:cb:3c:3a:99: a9:82:78:a3:13:b5:ea:d1:eb:d3:dd:d5:21:6f:24: 7c:c6:7a:43:df:07:e4:8a:f9:bf:cd:12:8c:fc:d2: 46:ed:bc:f3:06:b7:06:cb:9a:6b:78:83:8c:11:7c: cc:0a:58:0e:09:b8:0c:6b:07:95:f3:74:f9:db:91: f1:2c:2d:c3:f7:19:72:38:98:d8:68:d2:6a:18:07: 46:42:f6:d4:86:51:b1:34:44:58:b8:0f:82:76:b1: b8:53:5b:7b:a6:63:cd:64:50:fa:d7:20:8a:ed:cf: 90:93:a1:bb:1e:c5:86:8a:78:b7:00:cc:5f:51:74: 81:39:16:33:21:95:d3:bc:2d:e6:9f:0a:05:66:75: 93:7b:3d:dd:03:7d:65:99:e6:83:50:cb:fd:7f:d1: fd:6d:a8:d2:b2:9a:55:4d:d4:ea:48:f6:a5:f5:19: 52:5c:a7:f1:be:ed:a1:56:b1:bc:6f:68:f7:ac:8b: 95:42:64:3e:4b:fb:52:e9:2f:08:50:cf:df:d3:f8: a1:b3:e6:2b:e6:ca:18:b2:3e:e3:6e:e6:2b:8e:ee: 40:e2:3f:77:55:e7:17:e7:a0:ab:9a:9c:d4:40:5b: f3:20:92:4d:d5:36:45:96:9c:94:8d:29:48:13:c4: c8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3C:9B:DF:7D:9E:3D:F1:D0:49:1D:A6:CF:2C:61:24:10:C1:18:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/88059636-a9a3-31e4-8692-df70f2daa35b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 172.96.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:dd:a7:2a:1f:1a:83:2e:a8:fc:71:b9:26:08:ac:61:08:06: 74:93:ec:e7:11:f6:13:26:bc:a2:c9:92:d5:c5:97:a6:51:b1: a0:a6:15:08:ea:a3:df:00:2b:b1:71:ed:34:96:d6:d9:d1:ee: f4:ac:d9:8c:04:9d:e4:3a:a0:74:c3:e5:eb:15:08:2d:20:7b: 57:1a:df:5f:bc:b7:1c:a5:5a:f8:74:23:4a:75:85:dd:51:e5: d4:25:2c:98:33:23:5b:8e:bb:f8:72:71:24:42:12:b5:65:f4: 4e:db:e2:c7:c6:02:0c:37:36:8c:2e:8c:6a:27:34:0f:4f:99: 2d:b2:33:2d:28:72:46:de:83:75:dd:ae:6d:70:68:02:cc:f5: c1:95:01:a7:1c:a0:38:c3:16:21:43:94:80:7e:4b:b5:fb:5c: ad:a3:6c:15:6c:e0:53:b3:9b:94:e4:ee:7b:d6:12:6f:8d:48: 02:1c:b6:20:67:13:43:b8:87:4f:75:25:ca:ad:47:d6:46:01: a1:15:fe:0f:58:47:87:64:0b:98:fe:62:ae:6a:95:de:ef:f7: f1:93:eb:21:4d:a3:a6:bb:63:69:fe:18:65:ec:b4:33:7e:7c: 54:f4:02:87:05:2b:b3:d0:ac:01:63:9f:ae:eb:ea:4b:fb:5a: 68:f1:e2:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMHAyo3yrP8ZoltAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MDgwOTA4MjIxMVoXDTI1MTEwNzA5MjIxMVowLzEtMCsGA1UEAxMk NjBkYTc0ZjUtMGIyZS00MDFkLWI2OTktMmI3ZGYzMTcxN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4xajq5qbEFg0cs8OpmpgnijE7Xq0evT3dUh byR8xnpD3wfkivm/zRKM/NJG7bzzBrcGy5preIOMEXzMClgOCbgMaweV83T525Hx LC3D9xlyOJjYaNJqGAdGQvbUhlGxNERYuA+CdrG4U1t7pmPNZFD61yCK7c+Qk6G7 HsWGini3AMxfUXSBORYzIZXTvC3mnwoFZnWTez3dA31lmeaDUMv9f9H9bajSsppV TdTqSPal9RlSXKfxvu2hVrG8b2j3rIuVQmQ+S/tS6S8IUM/f0/ihs+Yr5soYsj7j buYrju5A4j93VecX56CrmpzUQFvzIJJN1TZFlpyUjSlIE8TI+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM48m999nj3x0Ekdps8sYSQQwRh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvODgwNTk2MzYtYTlhMy0z MWU0LTg2OTItZGY3MGYyZGFhMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDdpyofGoMuqPxxuSYIrGEIBnST7OcR9hMmvKLJktXFl6ZRsaCmFQjq o98AK7Fx7TSW1tnR7vSs2YwEneQ6oHTD5esVCC0ge1ca31+8txylWvh0I0p1hd1R 5dQlLJgzI1uOu/hycSRCErVl9E7b4sfGAgw3NowujGonNA9PmS2yMy0ockbeg3Xd rm1waALM9cGVAaccoDjDFiFDlIB+S7X7XK2jbBVs4FOzm5Tk7nvWEm+NSAIctiBn E0O4h091JcqtR9ZGAaEV/g9YR4dkC5j+Yq5qld7v9/GT6yFNo6a7Y2n+GGXstDN+ fFT0AocFK7PQrAFjn67r6kv7Wmjx4tM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:32:08 2025 by rpki-client