$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa File: 9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa (raw, json) Hash identifier: yeQXHeuleI47JMOQiv6K610712/K2TFUVsOzzvV4OdE= Subject key identifier: 9D:82:28:59:3F:1D:0A:D9:EF:BF:0D:B7:CD:18:01:80:E4:18:79:0F Certificate issuer: /CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Certificate serial: 010D0C9F43285849D9C4F23B0D0AD7A3C1F32C40 Authority key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa Signing time: Wed 14 May 2025 13:01:03 +0000 ROA not before: Wed 14 May 2025 13:01:03 +0000 ROA not after: Tue 12 Aug 2025 13:01:03 +0000 asID: 11062 IP address blocks: 162.252.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:c4:f2:3b:0d:0a:d7:a3:c1:f3:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Validity Not Before: May 14 13:01:03 2025 GMT Not After : Aug 12 13:01:03 2025 GMT Subject: CN=9b3168c4-cb1c-4718-b19c-e965f11adfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:af:47:3e:6e:9c:95:f4:e2:8c:e8:23:ad:f9: 19:45:56:11:ed:2a:5c:ad:09:5a:ce:dd:26:e9:2c: 23:76:16:92:8e:a4:2f:5e:40:09:a7:30:e3:ca:e4: 3b:f4:6a:f7:58:33:7d:8c:9f:6e:89:52:9e:97:2f: c9:a4:28:e8:6c:27:9c:aa:29:e6:99:30:1e:c7:13: da:5e:4c:b5:23:58:21:61:68:84:ab:40:d4:2b:4a: a4:eb:56:36:59:e8:e1:64:77:08:19:12:a9:98:23: f3:49:2e:11:a5:1b:d5:cf:8b:f0:c5:a8:a9:07:af: 2c:88:56:dc:67:db:d3:75:b3:ec:ae:2d:99:61:53: 5d:b8:4a:d9:aa:78:e2:f3:90:9a:f7:0e:b1:80:f5: 7d:60:d7:bc:ef:41:a1:27:34:91:84:c7:07:39:80: 73:55:89:a5:1e:bf:cd:dc:0b:8a:51:36:bc:44:33: 8c:7c:df:5c:69:14:83:ba:2f:f0:7b:5f:a1:39:9c: a4:1c:ff:74:18:54:32:1e:9f:30:76:cf:16:59:3f: dc:79:d4:38:4b:7e:98:b0:d0:1f:8f:4e:c6:05:a8: b5:59:db:e7:a4:c4:f0:62:53:dc:1a:34:85:23:02: 44:bc:7e:1d:44:68:22:1b:9f:8b:fa:b5:f5:71:e1: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:82:28:59:3F:1D:0A:D9:EF:BF:0D:B7:CD:18:01:80:E4:18:79:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/9e7fe432-a3de-33c1-ab67-17713d7b8d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.crl X509v3 Authority Key Identifier: keyid:D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer sbgp-ipAddrBlock: critical IPv4: 162.252.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b0:90:a4:0b:24:c9:94:ac:75:eb:cf:34:47:d2:29:3d:3b: bb:84:45:f6:42:2c:61:25:1f:0c:d0:22:24:d4:c3:24:aa:1b: e1:f7:d8:d3:21:bc:09:47:c9:a7:4e:1a:d5:ef:ac:a1:87:54: c8:e2:e3:5b:ad:28:ea:12:ee:02:db:d3:06:a4:b8:de:48:84: 5c:eb:4a:25:2c:96:20:6e:65:6e:3d:61:0d:40:66:43:a0:f7: e6:af:cf:a2:70:d9:db:10:50:b3:30:d6:cd:fc:a0:b3:12:b2: 9d:61:f8:37:0a:6e:c4:e6:76:e5:a4:9d:d8:50:6c:28:b0:e1: ed:57:8f:2f:72:5d:f9:f7:48:c6:32:f9:00:77:35:94:e7:fe: 6d:4c:75:ad:ef:7a:d7:b2:66:9f:ca:f2:8b:69:e0:68:05:3f: 95:7a:27:20:33:15:74:2b:58:d5:1a:09:68:5a:4f:1d:a8:9d: 84:5a:5c:56:91:82:95:14:fa:ae:ed:9b:e1:42:05:d7:ae:25: a7:c9:b4:04:1b:2e:96:b8:82:5c:47:b9:50:9a:a5:5a:24:f5: 42:5b:03:d9:67:ef:7b:74:56:b7:3f:de:de:57:43:21:9d:a3: bf:86:f9:cc:79:6d:9b:af:dc:ab:f3:6b:6b:b4:63:ce:f3:d3: 05:51:ff:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZxPI7DQrXo8HzLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk1MmNjMGItYTM2NS00MGI4LWE4YjMtNDM0MDhjNGM2 ZmUxMB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk OWIzMTY4YzQtY2IxYy00NzE4LWIxOWMtZTk2NWYxMWFkZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK9HPm6clfTijOgjrfkZRVYR7SpcrQlazt0m 6SwjdhaSjqQvXkAJpzDjyuQ79Gr3WDN9jJ9uiVKely/JpCjobCecqinmmTAexxPa Xky1I1ghYWiEq0DUK0qk61Y2WejhZHcIGRKpmCPzSS4RpRvVz4vwxaipB68siFbc Z9vTdbPsri2ZYVNduErZqnji85Ca9w6xgPV9YNe870GhJzSRhMcHOYBzVYmlHr/N 3AuKUTa8RDOMfN9caRSDui/we1+hOZykHP90GFQyHp8wds8WWT/cedQ4S36YsNAf j07GBai1WdvnpMTwYlPcGjSFIwJEvH4dRGgiG5+L+rX1ceERKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2CKFk/HQrZ778Nt80YAYDkGHkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82OTUy Y2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0YzZmZTEvOWU3ZmU0MzItYTNkZS0z M2MxLWFiNjctMTc3MTNkN2I4ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjk1MmNjMGItYTM2NS00MGI4LWE4 YjMtNDM0MDhjNGM2ZmUxLzY5NTJjYzBiLWEzNjUtNDBiOC1hOGIzLTQzNDA4YzRj NmZlMS5jcmwwHwYDVR0jBBgwFoAU1AlbTrX+Ny7zhHYXBh4i9RecCoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQw OGM0YzZmZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCwkKQLJMmUrHXrzzRH0ik9O7uERfZCLGElHwzQIiTUwySqG+H32NMh vAlHyadOGtXvrKGHVMji41utKOoS7gLb0wakuN5IhFzrSiUsliBuZW49YQ1AZkOg 9+avz6Jw2dsQULMw1s38oLMSsp1h+DcKbsTmduWkndhQbCiw4e1Xjy9yXfn3SMYy +QB3NZTn/m1Mda3veteyZp/K8otp4GgFP5V6JyAzFXQrWNUaCWhaTx2onYRaXFaR gpUU+q7tm+FCBdeuJafJtAQbLpa4glxHuVCapVok9UJbA9ln73t0Vrc/3t5XQyGd o7+G+cx5bZuv3Kvza2u0Y87z0wVR/20= -----END CERTIFICATE-----Generated at Sun Jun 15 21:02:24 2025 by rpki-client