$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa File: cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa (raw, json) Hash identifier: J3CgU6tww0mRnTSfNdotG9cbqHu4gb478LxXUFVUw6M= Subject key identifier: BA:91:AB:ED:20:21:DA:BD:38:34:A7:1B:02:28:7F:4A:F0:7C:3C:AD Certificate issuer: /CN=0fadf4aa-e313-41fe-a7a1-685c7681ead2 Certificate serial: 010D0C9F4328584A41104FCFAB83934BA2426E20 Authority key identifier: B3:48:CF:FE:EC:AA:97:90:B6:F7:FD:2E:F5:33:00:E0:0D:6E:F1:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 394015 IP address blocks: 172.93.124.0/22 maxlen: 24 2620:131:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4f:cf:ab:83:93:4b:a2:42:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fadf4aa-e313-41fe-a7a1-685c7681ead2 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=6202ba36-c39b-41d4-a9b6-a78a66f5fb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:ae:8f:fa:f0:b4:dd:3f:c1:ab:4b:b2:d9: 8f:cd:f1:c3:74:3d:15:ba:24:da:bd:9b:1c:94:75: 43:6f:09:d3:76:29:b2:0b:5f:2a:f3:e9:c7:5f:64: af:cd:a9:56:b7:14:f0:0d:e1:f2:27:2d:57:f5:48: a8:43:9b:f5:b7:02:f8:97:80:41:95:86:8b:02:4c: f9:92:b1:52:3e:61:68:52:af:78:0f:aa:35:8a:9f: c5:80:ff:fb:52:98:17:a8:c1:e0:04:4e:4b:b4:f6: bf:26:ff:1f:f9:4b:d4:4e:0a:ff:2f:8e:14:7b:a6: 42:3c:4e:ef:b5:43:4e:b0:69:48:56:2f:d1:23:7a: c2:a1:13:a3:e3:e5:6a:bc:1e:0f:bc:c7:26:42:2c: 93:7b:b0:5a:06:18:ce:a4:aa:93:eb:80:4a:d7:a7: 62:60:b4:7a:78:77:4c:b4:0c:ab:b4:91:e2:86:a3: 0e:c7:49:62:e6:3c:74:f3:ad:a4:d2:55:f7:15:bb: f5:fb:bc:75:ed:61:f3:1f:f9:e1:b9:37:ff:aa:db: 9f:ed:47:2a:c9:78:c8:60:49:a1:fa:20:a5:fd:f6: 80:b7:37:bb:32:b3:46:50:62:6a:fe:14:3d:e6:79: 42:90:af:51:db:8f:e6:aa:03:92:85:eb:76:cc:29: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:91:AB:ED:20:21:DA:BD:38:34:A7:1B:02:28:7F:4A:F0:7C:3C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/cd7d55e1-52ff-36e7-a6e9-1fbddca14d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2/0fadf4aa-e313-41fe-a7a1-685c7681ead2.crl X509v3 Authority Key Identifier: keyid:B3:48:CF:FE:EC:AA:97:90:B6:F7:FD:2E:F5:33:00:E0:0D:6E:F1:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0fadf4aa-e313-41fe-a7a1-685c7681ead2.cer sbgp-ipAddrBlock: critical IPv4: 172.93.124.0/22 IPv6: 2620:131:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:de:e3:5d:4c:73:d8:e5:a2:89:2a:83:f9:b2:06:41:06:ba: 61:bf:8d:d2:b3:77:d3:d9:ea:9d:f3:68:0e:90:d5:5d:e9:0b: 7b:43:81:8f:4e:4d:88:cc:8a:0d:9b:6b:cc:a7:83:43:73:58: 35:11:15:72:99:05:08:82:e1:e4:d2:c4:81:a5:3a:b0:0f:b7: d2:ff:b3:8a:7f:9f:50:d7:a2:17:32:a1:ea:79:7d:a2:ed:5e: 31:a3:f9:78:81:5b:97:20:f5:51:cc:39:8c:76:c3:25:a7:7d: 68:22:51:90:53:b8:98:ee:99:38:e4:2b:6b:d9:ad:6b:04:d3: 16:f6:79:26:51:3a:03:25:cc:18:69:95:72:26:41:7d:70:aa: 5e:8a:35:99:0f:ab:7a:9a:26:66:d2:80:9c:10:f7:7f:4b:15: 66:bb:28:1b:d9:25:b0:b1:97:9b:06:d8:82:5c:75:dd:0f:ac: 7f:f9:c5:68:0b:a5:5d:f6:af:ac:3b:85:35:4a:8f:3e:32:64: 8f:fd:79:2c:6f:58:70:ea:65:db:87:06:dc:4f:42:21:0a:c2: c6:77:1a:c3:0c:8e:01:74:48:e1:d0:44:21:b9:e9:a9:06:34: 8d:35:94:a2:ac:d4:73:20:2b:84:74:07:cc:6c:5c:35:a0:8b: ad:60:db:d6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEpBEE/Pq4OTS6JCbiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZhZGY0YWEtZTMxMy00MWZlLWE3YTEtNjg1Yzc2ODFl YWQyMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NjIwMmJhMzYtYzM5Yi00MWQ0LWE5YjYtYTc4YTY2ZjVmYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus+uj/rwtN0/watLstmPzfHDdD0VuiTavZsc lHVDbwnTdimyC18q8+nHX2SvzalWtxTwDeHyJy1X9UioQ5v1twL4l4BBlYaLAkz5 krFSPmFoUq94D6o1ip/FgP/7UpgXqMHgBE5LtPa/Jv8f+UvUTgr/L44Ue6ZCPE7v tUNOsGlIVi/RI3rCoROj4+VqvB4PvMcmQiyTe7BaBhjOpKqT64BK16diYLR6eHdM tAyrtJHihqMOx0li5jx0862k0lX3Fbv1+7x17WHzH/nhuTf/qtuf7UcqyXjIYEmh +iCl/faAtze7MrNGUGJq/hQ95nlCkK9R24/mqgOShet2zCkRdQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLqRq+0gIdq9ODSnGwIof0rwfDytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZmFk ZjRhYS1lMzEzLTQxZmUtYTdhMS02ODVjNzY4MWVhZDIvY2Q3ZDU1ZTEtNTJmZi0z NmU3LWE2ZTktMWZiZGRjYTE0ZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGZhZGY0YWEtZTMxMy00MWZlLWE3 YTEtNjg1Yzc2ODFlYWQyLzBmYWRmNGFhLWUzMTMtNDFmZS1hN2ExLTY4NWM3Njgx ZWFkMi5jcmwwHwYDVR0jBBgwFoAUs0jP/uyql5C29/0u9TMA4A1u8ekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZmFkZjRhYS1lMzEzLTQxZmUtYTdhMS02ODVj NzY4MWVhZDIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCrF18MA4E AgACMAgDBgAmIAExQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAm3uNdTHPY5aKJKoP5sgZBBrphv43Ss3fT 2eqd82gOkNVd6Qt7Q4GPTk2IzIoNm2vMp4NDc1g1ERVymQUIguHk0sSBpTqwD7fS /7OKf59Q16IXMqHqeX2i7V4xo/l4gVuXIPVRzDmMdsMlp31oIlGQU7iY7pk45Ctr 2a1rBNMW9nkmUToDJcwYaZVyJkF9cKpeijWZD6t6miZm0oCcEPd/SxVmuygb2SWw sZebBtiCXHXdD6x/+cVoC6Vd9q+sO4U1So8+MmSP/Xksb1hw6mXbhwbcT0IhCsLG dxrDDI4BdEjh0EQhuempBjSNNZSirNRzICuEdAfMbFw1oIutYNvW -----END CERTIFICATE-----Generated at Mon Jun 30 04:01:00 2025 by rpki-client