$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa File: 7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa (raw, json) Hash identifier: RwV76c+W0s+G4iuzElraO1eJQCvERlN7MEhWjDpMpf0= Subject key identifier: A4:F0:62:D0:E3:E3:DC:D0:4C:A8:1A:24:53:B0:6D:57:B5:E9:C6:AD Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Certificate serial: 010D0C9F4328584A3A158D344789214267275C80 Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 33501 IP address blocks: 72.250.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:8d:34:47:89:21:42:67:27:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=b1f0cd8e-15e3-47d3-84eb-e911eb084ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:50:d6:35:22:d2:22:8d:01:c3:c3:08:51: c9:26:e4:c5:f6:1a:81:7b:d3:5f:db:94:d7:4c:f5: 2d:93:f9:b3:b3:a7:4b:55:92:77:76:76:2d:45:f2: 2d:d6:6c:4c:a3:94:12:a3:3e:a2:e0:24:64:c4:5d: bb:a5:9e:83:51:9b:2e:88:0c:78:9e:7a:0c:fd:f9: 65:49:c1:c1:45:d5:8b:08:96:51:fd:14:a5:48:35: 09:81:69:cc:d2:34:c3:ff:e5:e9:d0:90:c0:4d:71: 67:72:c5:83:71:b4:c1:ed:33:1d:b9:e2:9c:f4:00: 62:1d:19:f2:a8:80:5c:4e:0d:45:89:a5:88:49:ff: 1f:84:e5:4f:1a:0b:47:7f:b5:e3:f0:49:fc:f8:e6: 29:24:83:ae:79:fa:8c:56:37:0b:d2:24:aa:c8:5d: 57:24:54:62:d8:92:91:53:96:1e:2e:4e:3c:44:1c: 6b:d9:08:01:20:76:09:a8:5a:f6:a1:4d:17:83:cc: 72:ae:27:d0:98:76:6d:b2:4c:9c:e7:00:6a:37:f0: 8c:45:f3:7f:62:f1:ca:43:32:10:14:10:94:dd:ca: 7e:1f:64:42:fc:d5:d6:29:1a:30:10:8b:65:76:ef: c6:10:95:26:8a:b2:94:21:e0:e4:30:58:40:20:45: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F0:62:D0:E3:E3:DC:D0:4C:A8:1A:24:53:B0:6D:57:B5:E9:C6:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl X509v3 Authority Key Identifier: keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer sbgp-ipAddrBlock: critical IPv4: 72.250.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7f:79:ed:88:6e:8a:1c:1d:0b:74:39:d3:7b:0e:5c:35:d0: 38:04:82:62:f3:06:50:a7:0b:4c:bf:61:e9:c4:8d:ef:3f:b3: 4d:e2:e7:4c:a3:a7:1c:90:a6:1c:67:5c:2f:53:90:f8:a9:3b: da:d2:be:24:d6:56:21:ae:a1:85:81:2e:af:c2:b9:0f:cb:98: 4e:23:ad:54:a7:40:90:f0:a1:20:5f:8c:27:93:0b:c1:58:44: d0:fe:ec:7b:8b:ec:ca:64:77:9d:39:e8:06:44:61:1c:a6:37: a8:b9:00:e7:39:ae:15:3b:0a:c7:53:69:4c:74:e2:e9:89:06: 86:0d:b8:e5:08:c8:dd:c5:d5:7e:d7:3c:e8:37:68:40:c0:ff: 94:b9:34:60:78:41:19:f8:f0:df:02:06:18:47:7b:9e:65:47: e5:4e:5c:b2:2f:a5:e1:ab:04:8f:fa:79:23:b4:cf:5c:52:8d: 4b:10:7f:89:73:bb:7e:b7:65:06:ab:b5:82:ea:53:a9:3f:57: eb:5a:b2:b1:a2:fa:29:a1:8a:b6:1a:3a:06:49:c5:4d:dd:5d: 04:41:74:2b:18:c1:98:47:57:b2:67:2c:cf:7a:f8:4e:8c:ce: af:47:d1:10:a5:f5:a0:3c:09:c6:8d:f6:50:05:ec:35:f0:37: 57:49:df:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FY00R4khQmcnXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4 ZTE2MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk YjFmMGNkOGUtMTVlMy00N2QzLTg0ZWItZTkxMWViMDg0YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTlQ1jUi0iKNAcPDCFHJJuTF9hqBe9Nf25TX TPUtk/mzs6dLVZJ3dnYtRfIt1mxMo5QSoz6i4CRkxF27pZ6DUZsuiAx4nnoM/fll ScHBRdWLCJZR/RSlSDUJgWnM0jTD/+Xp0JDATXFncsWDcbTB7TMdueKc9ABiHRny qIBcTg1FiaWISf8fhOVPGgtHf7Xj8En8+OYpJIOuefqMVjcL0iSqyF1XJFRi2JKR U5YeLk48RBxr2QgBIHYJqFr2oU0Xg8xyrifQmHZtskyc5wBqN/CMRfN/YvHKQzIQ FBCU3cp+H2RC/NXWKRowEItldu/GEJUmirKUIeDkMFhAIEWxjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTwYtDj49zQTKgaJFOwbVe16catMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvN2M5M2UzZjMtYTEyOS0z M2E4LWJiNTQtNGJkMmFiZTZmZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3 NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi NmYxZDhlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt/ee2IboocHQt0OdN7Dlw10DgEgmLzBlCnC0y/YenEje8/s03i50yj pxyQphxnXC9TkPipO9rSviTWViGuoYWBLq/CuQ/LmE4jrVSnQJDwoSBfjCeTC8FY RND+7HuL7Mpkd5056AZEYRymN6i5AOc5rhU7CsdTaUx04umJBoYNuOUIyN3F1X7X POg3aEDA/5S5NGB4QRn48N8CBhhHe55lR+VOXLIvpeGrBI/6eSO0z1xSjUsQf4lz u363ZQartYLqU6k/V+tasrGi+imhirYaOgZJxU3dXQRBdCsYwZhHV7JnLM96+E6M zq9H0RCl9aA8CcaN9lAF7DXwN1dJ39g= -----END CERTIFICATE-----Generated at Mon Jun 30 13:59:32 2025 by rpki-client