$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa File: cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (raw, json) Hash identifier: IzrW9wUiDtyGfkfRsjSnKoP5nrPj7WEt9UbujtF0TLE= Subject key identifier: 81:40:E1:D2:CA:C8:26:ED:EA:7B:BD:CF:25:D9:47:E5:A0:D8:41:29 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F43285849FCAA75776DB42D4BC62AAC80 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 395927 IP address blocks: 172.83.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:75:77:6d:b4:2d:4b:c6:2a:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=7168fe76-54ff-46f2-b636-952d90a7d0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:fc:d6:5f:ff:1e:d0:87:3b:f3:d0:57:83: 51:3e:6e:72:b7:b6:c2:a0:00:17:3c:44:f3:cd:cd: 47:65:60:04:c9:2a:6a:da:13:79:0d:1d:3e:e9:81: 8d:a9:8d:01:d1:fb:5e:ec:bd:bd:dc:23:bd:5a:25: b8:be:96:34:a2:5e:19:55:23:ea:85:6b:88:50:62: a8:03:eb:54:f2:1f:31:cb:8a:e8:f6:21:14:6a:78: e4:2d:c0:c5:c9:69:e3:50:6b:3d:c5:09:f6:0f:b6: c4:3b:d0:15:8a:70:f0:ac:f4:32:32:91:99:34:2c: 0b:75:1a:d0:de:9a:59:8d:7a:bf:d1:00:88:87:51: f5:07:cb:1c:4c:0c:f5:3f:50:33:ca:a7:c9:77:c3: 0b:1a:03:88:56:05:d7:12:51:71:b6:f1:92:c8:de: 96:8d:49:9b:5e:d2:2d:32:c9:7e:50:d1:a6:54:9f: 2e:64:88:dc:ff:2b:c0:e5:de:73:92:2d:bc:7f:2d: e1:70:cc:42:cf:16:eb:93:c8:bb:75:fd:23:af:21: 21:3a:df:a8:28:fa:85:74:8b:2f:23:45:52:5f:2b: 02:76:47:e4:a3:87:4d:13:10:b7:11:b7:3d:87:0a: 91:84:02:1a:1d:b6:38:79:97:5d:67:d4:56:7c:c2: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:40:E1:D2:CA:C8:26:ED:EA:7B:BD:CF:25:D9:47:E5:A0:D8:41:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 172.83.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fd:67:07:76:76:8e:05:d8:08:c3:3c:13:0c:81:11:99:91: d0:ee:e6:8d:da:c9:95:b2:76:06:c1:66:0d:8e:75:9d:0f:f2: 69:59:d2:b0:f4:e4:b8:ea:fd:71:32:7d:50:45:77:0f:ab:29: bb:63:3b:78:3e:d9:b3:8e:21:db:22:a8:c0:94:76:99:15:8e: 9d:60:f2:7a:ca:e4:01:10:95:0c:03:ad:1b:6b:1e:4b:38:fb: 7b:9b:40:34:d7:da:d8:b0:88:2f:d0:41:23:da:12:47:21:6f: b9:fa:83:b5:f4:a2:fb:10:21:e8:77:08:55:6a:16:d3:a8:6d: b5:9d:a4:77:3f:9d:09:c2:41:64:a8:f9:86:c5:97:eb:96:83: b2:bf:28:1d:f2:16:7d:94:e8:e8:35:70:35:ea:f9:3e:6a:0d: d7:c4:a1:cc:67:3d:bb:ff:0d:06:ed:2e:39:74:de:22:7a:d1: f4:4c:25:94:ab:96:06:c2:c0:95:4f:72:f0:e6:f7:64:93:97: 19:7c:ca:5a:02:74:9e:66:13:61:a8:0f:92:49:1e:48:2f:85: 2a:9b:d8:ed:1a:9c:64:5e:7c:70:80:8d:df:30:23:aa:6c:6e: 83:7a:6c:59:c5:8b:fd:4e:ce:e2:c6:25:6b:2f:76:ab:e8:25: c8:13:d8:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnV3bbQtS8YqrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NzE2OGZlNzYtNTRmZi00NmYyLWI2MzYtOTUyZDkwYTdkMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AT81l//HtCHO/PQV4NRPm5yt7bCoAAXPETz zc1HZWAEySpq2hN5DR0+6YGNqY0B0fte7L293CO9WiW4vpY0ol4ZVSPqhWuIUGKo A+tU8h8xy4ro9iEUanjkLcDFyWnjUGs9xQn2D7bEO9AVinDwrPQyMpGZNCwLdRrQ 3ppZjXq/0QCIh1H1B8scTAz1P1AzyqfJd8MLGgOIVgXXElFxtvGSyN6WjUmbXtIt Msl+UNGmVJ8uZIjc/yvA5d5zki28fy3hcMxCzxbrk8i7df0jryEhOt+oKPqFdIsv I0VSXysCdkfko4dNExC3Ebc9hwqRhAIaHbY4eZddZ9RWfMKrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFA4dLKyCbt6nu9zyXZR+Wg2EEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvY2MxMjYyMDktYWViMy0z NjNiLTkyY2ItOGE0MDIyOWI1YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH9Zwd2do4F2AjDPBMMgRGZkdDu5o3ayZWydgbBZg2OdZ0P8mlZ0rD0 5Ljq/XEyfVBFdw+rKbtjO3g+2bOOIdsiqMCUdpkVjp1g8nrK5AEQlQwDrRtrHks4 +3ubQDTX2tiwiC/QQSPaEkchb7n6g7X0ovsQIeh3CFVqFtOobbWdpHc/nQnCQWSo +YbFl+uWg7K/KB3yFn2U6Og1cDXq+T5qDdfEocxnPbv/DQbtLjl03iJ60fRMJZSr lgbCwJVPcvDm92STlxl8yloCdJ5mE2GoD5JJHkgvhSqb2O0anGRefHCAjd8wI6ps boN6bFnFi/1OzuLGJWsvdqvoJcgT2Ps= -----END CERTIFICATE-----Generated at Tue Jul 1 11:51:51 2025 by rpki-client