$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa File: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (raw, json) Hash identifier: UtBQ5JJzkF4nQHGA+Z3yuZnKJj7p7A1010mV+y/2sjE= Subject key identifier: 36:E3:CE:8F:6E:C4:64:3F:D8:CA:7D:C3:05:86:91:A4:16:F8:49:6E Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584A51D075DFB546D852FC70D9C0 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa Signing time: Thu 26 Jun 2025 13:01:04 +0000 ROA not before: Thu 26 Jun 2025 13:01:04 +0000 ROA not after: Wed 24 Sep 2025 13:01:04 +0000 asID: 399521 IP address blocks: 172.98.8.0/24 maxlen: 24 172.98.9.0/24 maxlen: 24 172.98.10.0/24 maxlen: 24 172.98.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:d0:75:df:b5:46:d8:52:fc:70:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Jun 26 13:01:04 2025 GMT Not After : Sep 24 13:01:04 2025 GMT Subject: CN=29833a41-bdd0-4e89-a77b-b9211971bb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:f6:1a:31:8e:ca:25:b0:5c:de:48:3b:ab: ad:05:61:e8:e7:46:a4:2d:a2:e6:b8:cd:99:3f:b3: bb:c2:4e:3d:d7:59:de:89:38:c4:16:65:7e:8c:78: 90:7f:3d:49:2a:e4:77:61:cc:d0:cb:e8:22:5c:9c: b9:50:26:81:03:d3:bf:c4:73:eb:03:be:4d:c6:70: b0:26:b4:3d:5a:4e:54:07:51:ab:92:a1:b2:0d:3d: 42:27:fe:36:3a:41:22:2f:f2:f7:0d:33:3b:14:28: 4c:f9:63:96:e1:cf:1d:37:5c:74:bd:be:e8:76:96: de:c8:aa:bb:6a:8b:8b:1e:a2:56:7f:17:c7:5a:6b: 8a:f6:9d:0e:c5:e9:a7:11:73:73:44:3a:59:ea:53: 3c:9b:75:4c:36:93:5e:a4:be:97:80:80:a0:df:64: 6c:4b:68:56:88:21:5b:27:42:f2:99:15:6a:36:7d: b6:2a:01:c8:45:af:43:ab:19:da:6b:95:e2:e9:5f: f1:d0:9c:36:df:ff:13:5a:58:dd:86:70:bc:d5:a2: db:35:b1:48:8e:86:1a:5a:ad:8b:4c:e0:0a:dd:5f: ed:11:32:a1:9d:b5:8d:3d:d9:98:76:55:4b:7f:e9: 96:75:63:64:31:54:fa:de:58:05:83:7e:b3:3f:c0: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E3:CE:8F:6E:C4:64:3F:D8:CA:7D:C3:05:86:91:A4:16:F8:49:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: 172.98.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b2:83:f6:f0:b6:cd:d1:5a:06:dd:72:bf:94:29:cd:a7:83: c7:b3:a8:36:42:3a:79:8d:f8:50:c4:8d:10:48:dc:7b:f5:87: 76:aa:d4:93:de:9a:80:34:40:2f:23:8c:d7:1e:d9:19:32:f8: aa:9c:41:77:97:44:82:8b:78:9d:28:8e:cb:06:e9:12:26:d2: d0:81:ee:eb:b2:28:fc:3e:1d:be:61:a0:91:10:a9:cf:a5:96: 5f:eb:7d:b0:45:a0:29:4a:33:7d:70:94:19:e7:a8:0c:06:7a: f6:48:c2:d1:55:b7:2a:15:be:7b:99:3c:6a:19:ce:a4:90:bf: c8:81:2f:17:ed:dc:85:1e:6d:27:6e:31:a7:29:3c:3e:02:57: 48:45:62:7e:66:8b:ac:bc:fb:e6:15:15:17:ba:6a:5c:76:6c: 5a:d7:c3:37:2f:1b:58:09:c9:63:eb:70:33:be:d2:61:65:da: 1a:ed:91:c0:6c:a4:0b:b8:73:8a:98:a3:b1:2e:fe:6d:3c:5d: 60:70:74:74:12:79:5a:13:90:aa:e5:28:48:ec:0c:a8:6c:43: 50:eb:bd:b0:2f:10:3f:e7:fb:94:87:5f:30:3d:38:e3:b5:95: 64:31:17:31:70:46:4a:42:95:78:e4:5f:dd:b8:28:4a:6c:62: 38:a1:6f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0HXftUbYUvxw2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk Mjk4MzNhNDEtYmRkMC00ZTg5LWE3N2ItYjkyMTE5NzFiYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkav2GjGOyiWwXN5IO6utBWHo50akLaLmuM2Z P7O7wk4911neiTjEFmV+jHiQfz1JKuR3YczQy+giXJy5UCaBA9O/xHPrA75NxnCw JrQ9Wk5UB1GrkqGyDT1CJ/42OkEiL/L3DTM7FChM+WOW4c8dN1x0vb7odpbeyKq7 aouLHqJWfxfHWmuK9p0OxemnEXNzRDpZ6lM8m3VMNpNepL6XgICg32RsS2hWiCFb J0LymRVqNn22KgHIRa9Dqxnaa5Xi6V/x0Jw23/8TWljdhnC81aLbNbFIjoYaWq2L TOAK3V/tETKhnbWNPdmYdlVLf+mWdWNkMVT63lgFg36zP8Df0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbjzo9uxGQ/2Mp9wwWGkaQW+EluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvZWY1YjRmODQtZmNkOS0z ZTVmLWI5ODYtNjExNGJjMWVmMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2yg/bwts3RWgbdcr+UKc2ng8ezqDZCOnmN+FDEjRBI3Hv1h3aq1JPe moA0QC8jjNce2Rky+KqcQXeXRIKLeJ0ojssG6RIm0tCB7uuyKPw+Hb5hoJEQqc+l ll/rfbBFoClKM31wlBnnqAwGevZIwtFVtyoVvnuZPGoZzqSQv8iBLxft3IUebSdu MacpPD4CV0hFYn5mi6y8++YVFRe6alx2bFrXwzcvG1gJyWPrcDO+0mFl2hrtkcBs pAu4c4qYo7Eu/m08XWBwdHQSeVoTkKrlKEjsDKhsQ1DrvbAvED/n+5SHXzA9OOO1 lWQxFzFwRkpClXjkX924KEpsYjihb9M= -----END CERTIFICATE-----Generated at Tue Jul 1 11:42:07 2025 by rpki-client