$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa File: b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa (raw, json) Hash identifier: PJMCA3OaZJ8C/wl03mG899AcDgJrSWtxsfCOccTWKU8= Subject key identifier: C3:73:5D:8B:8A:39:FE:49:6C:06:1E:F4:35:0F:DE:F8:3A:5B:F8:C1 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F432858499829CF331C5935AFEE50F780 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 32799 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cf:33:1c:59:35:af:ee:50:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b86e3c67-dfc2-4035-b04f-2a151a13f2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7d:5d:4c:a6:8c:c6:65:b8:88:f9:29:7e:51: 4a:07:4a:ca:0b:ba:d4:5d:6a:c6:d0:7c:95:49:3b: ba:45:12:3c:e7:94:92:d4:84:b1:8f:fe:0a:e7:0d: bd:ba:e2:1c:a0:13:c8:2c:cf:bb:50:d5:b3:87:a9: d1:80:13:21:41:4b:38:17:e3:38:01:0a:69:49:39: 3f:08:6e:7f:7b:c2:51:b5:52:7f:57:81:3e:da:27: 31:3f:1a:50:f2:73:17:92:ad:4a:e4:98:91:2b:f5: 55:64:d5:ef:2a:df:fa:4b:5d:75:b1:d8:98:a9:18: a1:28:b8:03:25:08:bc:f6:c7:61:fc:42:4e:3b:68: d7:69:2a:17:83:d7:3d:3b:59:39:02:80:ac:8a:c8: b8:6f:0b:d1:4a:30:88:98:ba:ee:5f:a8:f5:42:a2: 4c:b4:07:4c:e5:b8:d1:c1:00:9c:43:c6:d8:c0:06: d5:45:ad:cd:21:4b:75:6b:5b:90:ee:67:61:e0:1c: a5:20:78:31:0f:92:cc:c5:42:3d:ff:2e:03:05:63: fa:c5:46:a6:28:07:c4:d3:1c:a2:74:77:0e:57:40: 96:88:95:8c:b5:09:29:c1:9b:3c:70:51:43:1d:af: fc:97:3f:1e:b0:3f:cd:6d:39:cb:d6:c0:c9:4a:44: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:73:5D:8B:8A:39:FE:49:6C:06:1E:F4:35:0F:DE:F8:3A:5B:F8:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/b5dc8a7a-81dc-3ef7-84e9-2d9a3688fbf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a0:4f:75:eb:d7:ea:5b:0d:1e:62:ad:cf:35:7f:40:b4:4c: 46:cc:18:b2:d4:d7:b2:58:8e:6c:12:f7:db:a5:3a:6b:c3:4d: 03:c4:16:de:d2:e5:cc:e9:83:b9:b9:63:b3:27:c3:e0:9c:e8: 7f:af:ec:45:16:66:d3:b2:e9:f5:30:99:5e:8c:dc:b7:30:a7: ba:2b:65:3c:fe:30:93:96:0e:cb:aa:66:1e:b4:ad:30:ef:4e: de:a7:eb:6b:66:04:01:ce:a7:0c:52:5b:63:bb:87:a1:59:ca: ba:9b:80:0c:eb:94:e4:ee:f1:20:4f:97:2a:df:2f:e2:29:fd: f2:0f:e2:d3:f3:3b:f6:f1:c3:e8:41:4a:dc:dc:03:24:63:57: 0a:8f:7b:60:36:04:1a:74:0a:97:4e:19:49:83:88:1e:e1:33: 30:f4:b0:89:73:2a:57:ad:7a:02:21:db:99:2d:10:d7:f8:cd: 65:12:5c:cd:2d:ac:65:c5:66:53:6a:63:eb:47:aa:98:59:68: bf:b9:06:6e:87:85:c4:0c:0a:1e:b2:77:69:cb:68:ad:e0:50: 9d:a4:02:e7:2e:9f:5b:34:31:1e:ee:65:66:a6:57:bf:8f:c7: db:6e:95:cf:3c:08:8d:cf:ef:b6:e3:c7:ea:19:b1:f1:70:06: 3c:6e:10:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKc8zHFk1r+5Q94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk Yjg2ZTNjNjctZGZjMi00MDM1LWIwNGYtMmExNTFhMTNmMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH1dTKaMxmW4iPkpflFKB0rKC7rUXWrG0HyV STu6RRI855SS1ISxj/4K5w29uuIcoBPILM+7UNWzh6nRgBMhQUs4F+M4AQppSTk/ CG5/e8JRtVJ/V4E+2icxPxpQ8nMXkq1K5JiRK/VVZNXvKt/6S111sdiYqRihKLgD JQi89sdh/EJOO2jXaSoXg9c9O1k5AoCsisi4bwvRSjCImLruX6j1QqJMtAdM5bjR wQCcQ8bYwAbVRa3NIUt1a1uQ7mdh4BylIHgxD5LMxUI9/y4DBWP6xUamKAfE0xyi dHcOV0CWiJWMtQkpwZs8cFFDHa/8lz8esD/NbTnL1sDJSkRr1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNzXYuKOf5JbAYe9DUP3vg6W/jBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvYjVkYzhhN2EtODFkYy0z ZWY3LTg0ZTktMmQ5YTM2ODhmYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACgT3Xr1+pbDR5irc81f0C0TEbMGLLU17JYjmwS99ulOmvDTQPEFt7S 5czpg7m5Y7Mnw+Cc6H+v7EUWZtOy6fUwmV6M3Lcwp7orZTz+MJOWDsuqZh60rTDv Tt6n62tmBAHOpwxSW2O7h6FZyrqbgAzrlOTu8SBPlyrfL+Ip/fIP4tPzO/bxw+hB StzcAyRjVwqPe2A2BBp0CpdOGUmDiB7hMzD0sIlzKletegIh25ktENf4zWUSXM0t rGXFZlNqY+tHqphZaL+5Bm6HhcQMCh6yd2nLaK3gUJ2kAucun1s0MR7uZWamV7+P x9tulc88CI3P77bjx+oZsfFwBjxuEI4= -----END CERTIFICATE-----Generated at Sun Jun 15 16:06:00 2025 by rpki-client