$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa File: f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa (raw, json) Hash identifier: tH/iFOZZ21O+8ALJ9ZEq1reUXrF7Jqhb4XFnY0o3Lhc= Subject key identifier: 6C:54:E0:84:A0:39:D1:A8:4C:8A:B0:22:9F:A7:71:C7:0D:4F:6E:27 Certificate issuer: /CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f Certificate serial: 010D0C9F43285849D594D8FFD1BF1FE229D49E60 Authority key identifier: F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 399218 IP address blocks: 172.81.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d8:ff:d1:bf:1f:e2:29:d4:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=0761985e-13ea-4e4d-bacb-71913c198886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:2d:7a:67:2f:b3:86:ca:bd:2e:ca:df:f9: 6b:7d:af:c6:ef:a9:8b:7a:b6:7c:de:63:98:3a:a4: cc:01:20:3c:e3:a9:f5:98:a9:cd:82:c4:4d:16:e7: b8:e6:38:0c:88:74:b4:3a:bb:ff:94:2b:16:f9:20: 0d:62:c7:a5:36:d0:80:27:8f:89:15:18:0f:49:13: 0e:a8:2f:4d:e4:d2:b7:cd:06:20:98:cd:6f:22:19: e6:4b:8e:a8:a5:7f:1b:fa:02:59:04:4b:ab:7f:c7: 42:57:2d:30:41:da:7a:37:67:b9:32:2f:c8:9b:69: 04:9c:fb:68:f1:84:aa:7e:2b:15:99:1a:04:ff:23: c6:c1:02:51:8e:3d:c2:7e:e0:df:7c:fd:50:35:31: 98:ea:2e:23:66:04:6f:84:14:a7:6f:9f:0e:ae:83: 21:7e:c6:b0:89:3f:02:67:a9:28:2a:67:3f:e9:94: 38:fa:0e:8f:de:ba:b8:44:92:65:ff:db:a4:45:67: 13:1c:4d:b6:1e:76:ac:98:8e:20:56:fc:9d:b8:22: 57:0e:36:ce:b1:ba:fc:2c:01:47:96:a0:8f:9c:c8: ba:63:45:cf:05:7b:8b:bb:dc:67:2d:fd:f4:43:c0: ba:31:90:d6:41:4b:a2:67:03:30:7f:cf:6d:e0:9c: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:54:E0:84:A0:39:D1:A8:4C:8A:B0:22:9F:A7:71:C7:0D:4F:6E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl X509v3 Authority Key Identifier: keyid:F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer sbgp-ipAddrBlock: critical IPv4: 172.81.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:50:13:21:aa:96:01:d8:95:45:f0:33:5e:17:b9:55:87:00: 6a:d5:7e:30:91:68:97:f8:a2:e9:f3:28:0d:78:43:0c:56:bb: d4:a1:6b:48:b5:bc:d4:57:4d:e2:1d:0f:6d:e6:68:20:04:3a: 42:e2:08:52:ec:e0:a2:15:1e:6f:51:55:8d:55:97:dd:b9:2b: 05:2b:37:50:ec:71:cf:52:f6:19:59:bd:d8:d7:ca:d7:16:7a: fb:f7:ea:03:fc:9d:2d:cb:90:3c:65:ca:1c:65:60:51:44:c0: d1:e5:ee:0e:1c:2a:0a:05:92:ac:49:f5:a3:85:6b:53:30:8d: ee:95:d1:5c:58:80:44:19:9d:46:f4:8e:20:ed:c2:be:d6:51: 49:90:12:e0:52:7d:b4:c5:db:c7:e7:db:c3:6c:cb:c8:14:d7: 57:38:37:d5:4b:03:21:59:4b:a8:02:bf:3f:bb:ac:a3:87:5e: 2b:69:61:bf:b6:82:3e:59:63:d8:c5:87:4c:d3:a3:8f:52:4a: a9:f8:98:eb:bb:48:b9:92:1b:19:21:a0:ed:df:a1:56:87:ba: 1b:35:b1:a4:bd:09:19:f5:d5:fc:6a:85:b6:61:79:d2:e7:d6: 3f:4c:80:d6:66:5d:1f:4d:9b:ba:b7:8d:cb:da:2f:a5:64:c2: e3:ae:5d:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNj/0b8f4inUnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3N2E3ZDEtOTllMS00MWZkLWExZDctOTAxYjZkYjVk NDVmMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MDc2MTk4NWUtMTNlYS00ZTRkLWJhY2ItNzE5MTNjMTk4ODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbwtemcvs4bKvS7K3/lrfa/G76mLerZ83mOY OqTMASA846n1mKnNgsRNFue45jgMiHS0Orv/lCsW+SANYselNtCAJ4+JFRgPSRMO qC9N5NK3zQYgmM1vIhnmS46opX8b+gJZBEurf8dCVy0wQdp6N2e5Mi/Im2kEnPto 8YSqfisVmRoE/yPGwQJRjj3CfuDffP1QNTGY6i4jZgRvhBSnb58OroMhfsawiT8C Z6koKmc/6ZQ4+g6P3rq4RJJl/9ukRWcTHE22HnasmI4gVvyduCJXDjbOsbr8LAFH lqCPnMi6Y0XPBXuLu9xnLf30Q8C6MZDWQUuiZwMwf89t4JwYvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxU4ISgOdGoTIqwIp+ncccNT24nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjc3 YTdkMS05OWUxLTQxZmQtYTFkNy05MDFiNmRiNWQ0NWYvZjBjMTJkZDItODNlNi0z YjFlLTlmZjUtYjNiMTAzMDc3MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGI3N2E3ZDEtOTllMS00MWZkLWEx ZDctOTAxYjZkYjVkNDVmLzhiNzdhN2QxLTk5ZTEtNDFmZC1hMWQ3LTkwMWI2ZGI1 ZDQ1Zi5jcmwwHwYDVR0jBBgwFoAU9KuOC65yjjnmMaTedc2t4i2VM1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjc3YTdkMS05OWUxLTQxZmQtYTFkNy05MDFi NmRiNWQ0NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlQEyGqlgHYlUXwM14XuVWHAGrVfjCRaJf4ounzKA14QwxWu9Sha0i1 vNRXTeIdD23maCAEOkLiCFLs4KIVHm9RVY1Vl925KwUrN1Dscc9S9hlZvdjXytcW evv36gP8nS3LkDxlyhxlYFFEwNHl7g4cKgoFkqxJ9aOFa1Mwje6V0VxYgEQZnUb0 jiDtwr7WUUmQEuBSfbTF28fn28Nsy8gU11c4N9VLAyFZS6gCvz+7rKOHXitpYb+2 gj5ZY9jFh0zTo49SSqn4mOu7SLmSGxkhoO3foVaHuhs1saS9CRn11fxqhbZhedLn 1j9MgNZmXR9Nm7q3jcvaL6VkwuOuXRw= -----END CERTIFICATE-----Generated at Sun Jun 29 09:40:18 2025 by rpki-client