$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa File: 4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa (raw, json) Hash identifier: SjKHWmE0yVZGuJR4uKOZjJB1BDtHK1xmof5vbJgacfo= Subject key identifier: 4F:91:F8:99:A0:70:D6:8D:3C:E7:96:28:1D:5A:FF:B1:E7:B5:79:5A Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584AA6F6289B30CFFEB3B27BF880 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 3356 IP address blocks: 172.84.180.0/24 maxlen: 24 172.84.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:28:9b:30:cf:fe:b3:b2:7b:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=0c108583-9268-4120-a334-4dc9d1c8c8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:59:38:93:d7:ed:75:3e:fd:e8:31:9d:a3:8d: a8:02:25:f8:f3:18:e3:48:2d:2e:87:b0:5c:d2:c3: 5b:cd:9e:f4:ca:bf:b4:16:0f:f2:45:d0:9f:d7:15: 5e:6d:04:ef:6c:8a:af:f2:6d:3f:e2:cd:af:55:a0: c9:6f:6f:72:fd:c9:d5:37:05:d5:5f:66:36:6e:6b: ac:54:5b:ee:5a:ef:0d:c5:3b:37:f5:ca:43:f7:3a: 9f:b3:67:cb:20:e0:0a:7d:8c:86:7a:c7:c1:57:1b: be:4e:1d:c3:5a:c8:9a:99:75:ae:2b:ce:44:ff:57: 81:f7:91:b5:47:8e:16:ac:b0:8c:5e:4d:c9:67:f2: 01:89:06:90:24:c5:b7:62:3e:02:9a:15:35:07:0b: cb:52:81:d7:5e:1b:9b:5c:2f:15:5b:1c:1d:df:5d: a2:15:03:38:4d:99:e8:68:7b:0b:2a:c1:ef:7d:88: aa:c5:58:28:da:5e:48:e5:cc:94:90:6e:00:74:2c: 08:b5:5c:71:41:06:7c:c9:4a:a9:5f:18:f8:06:20: b9:5b:60:36:c2:f1:a1:a3:1d:40:5a:a0:77:3b:e9: d2:0e:d3:13:bb:13:53:72:49:f7:29:fb:3b:b5:9b: 2a:b1:0a:df:bd:80:64:5e:5d:12:7a:5c:0d:44:d0: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:91:F8:99:A0:70:D6:8D:3C:E7:96:28:1D:5A:FF:B1:E7:B5:79:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.180.0/24 172.84.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0d:72:ef:9e:69:e6:03:1a:9b:f9:af:b8:7c:4c:dd:ba:f0: af:7a:f5:b8:07:48:47:4c:85:44:78:8a:d9:b5:5a:a1:30:d3: a4:33:60:7d:05:9c:a2:c7:75:6d:68:48:c4:d0:0d:27:d1:e8: 72:da:15:bb:51:c7:37:0e:55:07:cf:09:70:40:e7:ef:53:92: 0a:89:27:17:e7:65:92:f9:a3:e5:7a:c3:96:03:7f:36:6e:d4: f7:5b:43:1d:5e:eb:75:34:e7:7a:9c:d1:9c:e0:68:d4:1b:5b: fd:31:4e:05:7f:f7:64:6c:f0:1a:16:fa:5d:20:e8:54:9f:97: 5e:5b:d5:25:a6:ec:56:24:21:80:88:01:f1:62:ca:33:f6:6d: 51:a6:13:88:df:e2:58:42:26:c9:89:eb:72:fd:50:ab:8d:42: 01:49:21:c4:b9:68:65:60:ae:2b:bd:6b:f2:85:77:50:9a:ae: 84:e7:8f:f7:f1:06:d1:f4:c6:48:71:a2:0e:e3:6d:2d:e3:3e: 14:47:f8:fd:00:23:50:f1:81:1d:54:e7:b2:72:ab:97:70:2a: a5:34:05:7a:d1:2c:0d:0a:ce:b4:b0:80:8c:0b:ef:c0:d4:06: db:1e:89:29:48:3e:ee:67:35:0c:98:ca:59:79:21:3e:7f:57: f2:8a:57:bf -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqm9iibMM/+s7J7+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk MGMxMDg1ODMtOTI2OC00MTIwLWEzMzQtNGRjOWQxYzhjOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklk4k9ftdT796DGdo42oAiX48xjjSC0uh7Bc 0sNbzZ70yr+0Fg/yRdCf1xVebQTvbIqv8m0/4s2vVaDJb29y/cnVNwXVX2Y2bmus VFvuWu8NxTs39cpD9zqfs2fLIOAKfYyGesfBVxu+Th3DWsiamXWuK85E/1eB95G1 R44WrLCMXk3JZ/IBiQaQJMW3Yj4CmhU1BwvLUoHXXhubXC8VWxwd312iFQM4TZno aHsLKsHvfYiqxVgo2l5I5cyUkG4AdCwItVxxQQZ8yUqpXxj4BiC5W2A2wvGhox1A WqB3O+nSDtMTuxNTckn3Kfs7tZsqsQrfvYBkXl0SelwNRNAZgwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE+R+JmgcNaNPOeWKB1a/7HntXlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvNGNhNDdhOWItNTJlNC0z ZWZhLThmZDEtZDE1ZWZjMjBhZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFS0AwQA rFS+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADoNcu+eaeYDGpv5r7h8TN268K969bgHSEdMhUR4itm1WqEw 06QzYH0FnKLHdW1oSMTQDSfR6HLaFbtRxzcOVQfPCXBA5+9TkgqJJxfnZZL5o+V6 w5YDfzZu1PdbQx1e63U053qc0ZzgaNQbW/0xTgV/92Rs8BoW+l0g6FSfl15b1SWm 7FYkIYCIAfFiyjP2bVGmE4jf4lhCJsmJ63L9UKuNQgFJIcS5aGVgriu9a/KFd1Ca roTnj/fxBtH0xkhxog7jbS3jPhRH+P0AI1DxgR1U57Jyq5dwKqU0BXrRLA0KzrSw gIwL78DUBtseiSlIPu5nNQyYyll5IT5/V/KKV78= -----END CERTIFICATE-----Generated at Mon Aug 4 16:08:41 2025 by rpki-client