$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa File: 1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa (raw, json) Hash identifier: yNir53oeVjOuQn2iiKsuVZTHCIa1t5BXIyEsgatj8zM= Subject key identifier: 3B:2B:1F:C6:DC:25:12:A2:47:BE:C5:52:15:90:C1:A7:01:DE:5F:E0 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584AC0163EBB83F07424DEC078C0 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 212238 IP address blocks: 172.102.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:3e:bb:83:f0:74:24:de:c0:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=9c91f8c8-7650-45ed-96c6-e018aadc85d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:bf:db:6b:c8:88:5c:30:5c:a3:42:97:be: 5c:b0:62:96:26:5c:99:04:70:4f:c2:7c:68:7a:a2: 88:83:20:84:44:0c:c2:ae:f0:01:f7:fa:5f:73:2f: 2b:86:f9:38:1a:2b:e8:e3:d7:1f:5e:af:a4:f2:0e: 68:0c:43:89:b2:56:59:a6:d3:31:84:48:77:53:3c: 01:bb:66:6f:13:7f:11:c3:04:25:7d:0d:50:17:a1: f7:a6:d3:2f:7e:bc:8e:3c:6a:4c:9f:2a:91:ce:5f: 4a:1d:dc:e2:61:ca:2c:68:c4:95:d9:fb:67:f6:bd: 03:64:5e:6e:0a:db:02:87:2f:fe:73:d5:ad:7d:8f: fa:7e:4d:f2:4d:23:18:6a:90:5d:a9:f5:8a:59:da: 2a:13:43:e2:c9:f1:9c:99:91:93:0d:e4:db:27:21: 4f:29:8f:b8:29:31:07:c3:41:aa:a9:1c:60:31:a3: be:1f:bb:e3:89:26:72:aa:6b:3f:75:64:2b:0f:c1: 4d:68:43:40:b9:c0:e4:5f:6d:d5:ed:6f:9e:79:57: b4:53:e2:61:29:53:49:e5:0d:49:95:94:df:5e:b3: 19:22:1c:d3:5e:62:59:63:4a:c7:f0:19:54:4c:03: de:b5:05:ef:6c:5e:9f:ad:fb:8b:3b:ba:1a:8a:17: a4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2B:1F:C6:DC:25:12:A2:47:BE:C5:52:15:90:C1:A7:01:DE:5F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f5:35:3a:42:09:33:7e:b7:2a:7d:b4:ae:44:21:c1:b5:36: d5:1e:ef:71:f3:ea:d5:5a:57:0c:83:ea:b9:8d:b0:a0:4e:27: 22:75:b7:bc:92:1b:88:94:41:0d:dc:d9:06:0a:24:60:5e:9b: 79:52:1f:b1:54:50:04:b5:7c:5e:53:25:ee:f3:6c:cc:b2:03: c9:0d:d6:d3:ee:41:e0:fa:51:e7:c2:60:e9:b2:a0:4e:a0:97: 85:13:cb:ba:51:f2:96:56:90:19:97:81:36:d0:b5:ea:3b:43: a3:21:cf:07:fb:e5:da:46:58:1d:41:73:31:eb:21:0b:46:3b: 4e:e1:69:d5:f0:6b:4a:26:74:87:68:50:e2:6f:96:e6:53:3b: 7b:97:50:0c:a1:75:a8:a1:0f:ef:4d:ce:c0:53:8b:2c:f1:2d: 88:23:2d:ed:32:87:3a:b5:3e:47:68:90:12:1a:21:43:59:0e: cd:78:b2:92:c4:ba:9b:8b:db:c0:b9:16:00:76:ad:c2:08:5f: bb:e7:c9:3f:65:e5:36:d3:b1:db:f8:8d:88:d4:cb:0c:02:b2: 3a:96:0b:13:94:3b:44:b3:94:60:4b:c7:61:c9:b4:8c:fd:85: 25:8e:52:7a:5f:67:6f:e8:66:07:1b:25:f1:e7:0e:4e:6d:19: bc:18:27:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFj67g/B0JN7AeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OWM5MWY4YzgtNzY1MC00NWVkLTk2YzYtZTAxOGFhZGM4NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWa/22vIiFwwXKNCl75csGKWJlyZBHBPwnxo eqKIgyCERAzCrvAB9/pfcy8rhvk4Givo49cfXq+k8g5oDEOJslZZptMxhEh3UzwB u2ZvE38RwwQlfQ1QF6H3ptMvfryOPGpMnyqRzl9KHdziYcosaMSV2ftn9r0DZF5u CtsChy/+c9WtfY/6fk3yTSMYapBdqfWKWdoqE0PiyfGcmZGTDeTbJyFPKY+4KTEH w0GqqRxgMaO+H7vjiSZyqms/dWQrD8FNaENAucDkX23V7W+eeVe0U+JhKVNJ5Q1J lZTfXrMZIhzTXmJZY0rH8BlUTAPetQXvbF6frfuLO7oaihekCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsrH8bcJRKiR77FUhWQwacB3l/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMWViNmRkOGMtZDZkNy0z OTY3LTk4M2MtYTJhMWU4NWJkNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/1NTpCCTN+typ9tK5EIcG1NtUe73Hz6tVaVwyD6rmNsKBOJyJ1t7yS G4iUQQ3c2QYKJGBem3lSH7FUUAS1fF5TJe7zbMyyA8kN1tPuQeD6UefCYOmyoE6g l4UTy7pR8pZWkBmXgTbQteo7Q6Mhzwf75dpGWB1BczHrIQtGO07hadXwa0omdIdo UOJvluZTO3uXUAyhdaihD+9NzsBTiyzxLYgjLe0yhzq1PkdokBIaIUNZDs14spLE upuL28C5FgB2rcIIX7vnyT9l5TbTsdv4jYjUywwCsjqWCxOUO0SzlGBLx2HJtIz9 hSWOUnpfZ2/oZgcbJfHnDk5tGbwYJwo= -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:17 2025 by rpki-client