$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa File: 8e5d139d-a0de-3b0d-a990-caf789c51809.roa (raw, json) Hash identifier: ojBDMOPXJZJ2dG31ZOAcqamV4yddAS+GW/HZXZjzPiQ= Subject key identifier: B8:D8:EA:8E:A8:D1:59:69:51:B2:EC:7E:8C:14:12:13:92:F5:F9:EE Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584A4540414BA92AAE4F6B94A100 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 46450 IP address blocks: 172.93.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:41:4b:a9:2a:ae:4f:6b:94:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=3980a9eb-399e-4338-a198-c737db5ede66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:64:1c:7a:ea:e3:70:8e:aa:44:59:51:ae:ee: a2:1d:f2:3f:bd:c9:fc:87:b4:1c:f2:ef:c8:58:1a: ea:d9:80:16:fc:38:c2:f7:b6:ed:f8:d2:98:d1:d0: a0:02:bb:ba:78:70:1e:ea:4e:52:51:f9:18:bf:88: d4:b6:22:1b:53:ab:9a:66:40:b1:40:02:cb:0d:a2: fe:dc:a6:0d:08:6f:33:05:22:02:c0:a8:23:cf:ce: 7c:e5:98:b7:23:f4:03:76:cd:a7:5b:47:53:ac:5b: 1b:1b:38:ee:dd:c8:61:49:58:25:39:12:6f:6c:40: 1d:66:8c:38:d8:23:4b:d2:c1:36:e5:72:eb:80:cc: ff:0a:0f:91:4b:f5:93:36:f3:fa:23:df:72:37:fe: de:92:6d:17:a5:ee:84:06:05:07:7b:62:0e:80:64: 28:dd:74:c9:eb:86:33:72:fa:47:8f:c7:0d:56:ff: 4d:93:49:2d:6b:2c:1a:58:ed:53:2d:a7:e6:1c:96: 81:de:f1:c5:18:9f:02:4f:b6:6e:1e:fe:36:b3:42: 0e:04:9f:20:32:dc:7d:fd:bd:dd:31:60:40:f2:02: 53:70:5d:fb:f5:a0:24:d4:67:56:c8:61:76:6b:38: 9c:ab:5a:96:05:ac:9b:62:fb:60:8d:f8:dd:be:ac: ab:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D8:EA:8E:A8:D1:59:69:51:B2:EC:7E:8C:14:12:13:92:F5:F9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 172.93.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ab:25:40:92:4f:b4:f5:db:f9:03:4a:a6:03:94:5b:1f:13: d8:b7:a7:fc:22:e2:a2:82:9f:64:4d:b5:43:5a:1a:ae:df:26: 68:3d:dc:b2:61:b7:dd:ea:df:81:c6:fb:d8:c0:59:b8:d9:c4: 4b:aa:a1:98:15:1f:d5:57:ff:29:c3:28:20:5e:1a:89:d9:f0: 23:44:d7:c6:bc:5b:84:de:b2:0c:e9:01:d0:4c:b7:96:85:53: bb:d2:b9:e9:11:bb:42:49:94:d8:73:b5:5e:2b:05:62:54:17: 0d:f7:35:46:44:ac:e7:17:14:1d:88:bb:57:8d:8c:6b:b3:b7: 9d:30:a2:88:fa:4b:d6:2c:16:fa:95:cc:81:c8:bc:2e:51:93: c7:af:42:86:e9:2e:7e:5e:22:1e:58:a3:37:fe:a8:23:d8:24: 4f:ce:45:33:eb:57:7f:c2:73:98:11:77:17:6f:51:5b:03:da: eb:e0:48:a7:87:9d:e3:22:47:21:ca:28:57:57:39:09:65:51: 53:28:60:76:b9:d3:ab:61:9f:33:35:f3:d4:b0:9e:af:ac:16: c9:e5:e4:3a:2b:66:80:ae:54:85:fe:e8:56:30:9d:7e:69:87: 44:21:d0:47:48:50:9b:1b:2b:01:06:dd:40:bd:09:ff:ca:a4: 77:af:64:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQEFLqSquT2uUoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk Mzk4MGE5ZWItMzk5ZS00MzM4LWExOTgtYzczN2RiNWVkZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2QceurjcI6qRFlRru6iHfI/vcn8h7Qc8u/I WBrq2YAW/DjC97bt+NKY0dCgAru6eHAe6k5SUfkYv4jUtiIbU6uaZkCxQALLDaL+ 3KYNCG8zBSICwKgjz8585Zi3I/QDds2nW0dTrFsbGzju3chhSVglORJvbEAdZow4 2CNL0sE25XLrgMz/Cg+RS/WTNvP6I99yN/7ekm0Xpe6EBgUHe2IOgGQo3XTJ64Yz cvpHj8cNVv9Nk0ktaywaWO1TLafmHJaB3vHFGJ8CT7ZuHv42s0IOBJ8gMtx9/b3d MWBA8gJTcF379aAk1GdWyGF2azicq1qWBaybYvtgjfjdvqyrpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjY6o6o0VlpUbLsfowUEhOS9fnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvOGU1ZDEzOWQtYTBkZS0z YjBkLWE5OTAtY2FmNzg5YzUxODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrF0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSrJUCST7T12/kDSqYDlFsfE9i3p/wi4qKCn2RNtUNaGq7fJmg93LJh t93q34HG+9jAWbjZxEuqoZgVH9VX/ynDKCBeGonZ8CNE18a8W4TesgzpAdBMt5aF U7vSuekRu0JJlNhztV4rBWJUFw33NUZErOcXFB2Iu1eNjGuzt50wooj6S9YsFvqV zIHIvC5Rk8evQobpLn5eIh5Yozf+qCPYJE/ORTPrV3/Cc5gRdxdvUVsD2uvgSKeH neMiRyHKKFdXOQllUVMoYHa506thnzM189Swnq+sFsnl5DorZoCuVIX+6FYwnX5p h0Qh0EdIUJsbKwEG3UC9Cf/KpHevZLk= -----END CERTIFICATE-----Generated at Sun Jun 29 23:35:49 2025 by rpki-client