$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa File: f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa (raw, json) Hash identifier: sZwEklvUslddidSWsOYd36IzsoqcBw0JL5AXu9jTnM8= Subject key identifier: CE:9D:E1:69:01:D2:CC:E1:C9:AC:0A:49:C7:82:88:60:27:0A:71:01 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584A331AD909FD2131F0846EB680 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 401585 IP address blocks: 172.81.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:d9:09:fd:21:31:f0:84:6e:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=a8835a7d-6b2f-47a9-bed2-0d4d717ee1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:81:18:e8:3d:6d:5d:a8:d5:ab:4e:55:9f: 91:33:eb:1d:48:86:7e:a7:b2:9b:fd:31:69:a6:e3: 01:35:d2:eb:1a:20:59:93:ad:b6:8a:fa:65:f3:e9: 78:e6:d3:ab:96:fd:c9:07:ee:72:0d:51:96:ce:71: 77:51:75:8f:76:4b:90:b2:ae:7b:ad:6e:67:d6:69: d0:99:61:1e:ce:a0:8f:02:e3:9b:c8:28:4b:bb:9c: 9a:ad:4a:fe:97:07:3a:e9:34:e3:0b:8b:2c:63:1b: 8d:4d:9d:bf:22:17:60:6e:b1:71:07:e8:65:f3:4c: 72:8c:3a:a4:15:14:95:11:b8:19:a2:e9:5f:8e:03: dc:11:8d:aa:8b:4c:43:c1:99:c5:0c:59:c2:94:88: b0:fd:ff:1e:81:7b:3c:95:3d:68:d0:9c:aa:4f:ef: ce:65:e4:4f:00:c1:3b:05:0d:1b:ea:2e:46:2d:54: f2:30:ea:91:1c:a3:da:94:46:b0:31:6e:3d:c6:4c: 31:8b:c4:5a:fd:3d:dc:54:a5:96:ba:95:fc:40:98: ac:5c:c0:b0:71:6f:b2:63:20:ed:21:b3:e0:94:24: 4a:ca:3e:b6:93:21:5f:09:bf:f3:62:ea:d3:e3:8b: 5b:2f:56:e9:7d:76:f2:27:ac:40:5f:f9:b2:de:6b: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:E1:69:01:D2:CC:E1:C9:AC:0A:49:C7:82:88:60:27:0A:71:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 172.81.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9e:fc:30:61:16:a4:bf:83:4e:27:91:95:fc:7b:d7:08:47: fe:92:45:ac:0f:51:e1:59:6c:f6:60:ac:62:cc:f7:22:4d:5f: 82:63:11:af:5b:1e:2b:4d:62:08:ac:5d:01:4f:01:f2:e1:c7: 52:d4:e1:1b:41:10:86:0e:f6:15:f2:2d:2f:04:d6:7e:d4:35: 98:08:8a:2b:cc:e6:a6:78:b9:02:69:bf:1c:84:5c:51:d8:4b: 47:cb:0e:a7:ae:fe:33:2c:c1:08:a4:5f:9c:e5:0f:23:27:3c: 17:94:b1:71:8f:28:14:23:8f:ef:21:ce:87:f6:0b:f7:a6:42: 64:c1:4d:b2:18:81:57:d7:56:d6:68:ee:1a:0e:b6:18:2a:a7: 24:b9:0b:08:53:cf:5c:fd:62:5f:a2:85:85:b7:1c:54:cd:6c: 0b:b2:58:6d:c9:4a:96:f4:3c:ad:4b:0c:71:04:a3:11:de:b2: f9:f7:0e:a1:3a:a0:9f:9d:a9:be:f9:8d:31:80:f4:4f:96:50: 97:f8:a9:c9:d8:7c:c9:b3:42:4e:57:2b:b2:b1:7d:fc:61:92: e5:c6:42:68:d3:58:f6:d1:e1:e0:bc:9c:97:06:a8:6e:c1:eb: f9:d7:8b:6e:68:20:da:e0:29:ce:3f:be:4f:26:96:0e:9c:af: 96:e5:92:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGtkJ/SEx8IRutoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk YTg4MzVhN2QtNmIyZi00N2E5LWJlZDItMGQ0ZDcxN2VlMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXGBGOg9bV2o1atOVZ+RM+sdSIZ+p7Kb/TFp puMBNdLrGiBZk622ivpl8+l45tOrlv3JB+5yDVGWznF3UXWPdkuQsq57rW5n1mnQ mWEezqCPAuObyChLu5yarUr+lwc66TTjC4ssYxuNTZ2/IhdgbrFxB+hl80xyjDqk FRSVEbgZoulfjgPcEY2qi0xDwZnFDFnClIiw/f8egXs8lT1o0JyqT+/OZeRPAME7 BQ0b6i5GLVTyMOqRHKPalEawMW49xkwxi8Ra/T3cVKWWupX8QJisXMCwcW+yYyDt IbPglCRKyj62kyFfCb/zYurT44tbL1bpfXbyJ6xAX/my3muEmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6d4WkB0szhyawKSceCiGAnCnEBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvZjA3YzU4YTgtNWY1YS0z NzJjLTlkMWItM2JkYzRjOTRmNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErFFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFye/DBhFqS/g04nkZX8e9cIR/6SRawPUeFZbPZgrGLM9yJNX4JjEa9b HitNYgisXQFPAfLhx1LU4RtBEIYO9hXyLS8E1n7UNZgIiivM5qZ4uQJpvxyEXFHY S0fLDqeu/jMswQikX5zlDyMnPBeUsXGPKBQjj+8hzof2C/emQmTBTbIYgVfXVtZo 7hoOthgqpyS5CwhTz1z9Yl+ihYW3HFTNbAuyWG3JSpb0PK1LDHEEoxHesvn3DqE6 oJ+dqb75jTGA9E+WUJf4qcnYfMmzQk5XK7KxffxhkuXGQmjTWPbR4eC8nJcGqG7B 6/nXi25oINrgKc4/vk8mlg6cr5blkic= -----END CERTIFICATE-----Generated at Mon Jun 16 00:45:14 2025 by rpki-client