$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa File: cf92c81d-a910-339e-84d5-3f8c6baa3900.roa (raw, json) Hash identifier: 6CQFAXrib5gyzbPWuxLes20fZ60RG5duA5CbSzcin3E= Subject key identifier: CB:F0:CC:62:2D:8C:90:75:6A:B6:FB:14:14:58:58:78:03:2D:B0:79 Certificate issuer: /CN=83220b5e-8104-4c4e-bbce-305b174b684a Certificate serial: 010D0C9F43285849A4BA4F2140F252C224B91860 Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 12233 IP address blocks: 172.82.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4f:21:40:f2:52:c2:24:b9:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c6187e7d-3e0a-47e2-b370-c145db9ba7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2a:19:66:56:c0:73:57:3e:0c:5d:ad:95:b8: da:17:95:44:2f:bc:d1:40:ff:59:26:24:d9:36:e3: 7f:88:cf:f2:47:92:18:13:67:8a:e1:c2:a9:b2:26: df:c9:61:f8:8b:10:76:9c:28:b0:0b:d1:06:11:eb: 32:22:d3:71:a1:67:58:1f:38:bd:66:13:e6:19:06: f3:7e:e4:bb:a0:c3:81:a9:40:d9:45:7e:b3:bb:a4: 11:00:e0:46:51:80:6a:6a:56:40:2c:03:cb:58:43: 27:58:92:4e:3e:bf:89:44:34:69:7a:6c:0c:a3:f5: 08:56:67:0b:b3:1a:b2:82:50:cc:94:85:5b:d2:a4: ba:02:d1:bb:e3:00:2b:03:29:3d:0e:00:0a:46:dc: d8:68:90:8c:81:16:f1:1d:75:69:a4:57:b9:c3:36: f1:dd:38:5e:f1:c0:e0:11:1b:8a:8a:16:d7:1c:de: 54:28:c6:a6:f8:df:07:ec:4f:08:95:45:85:4b:0a: 19:e2:5e:a8:33:22:f7:c7:d1:cc:80:1d:85:38:48: b0:f1:3a:cd:53:71:bf:4c:ee:1b:bd:c2:49:0f:ce: 43:e6:c0:cc:95:4e:38:2a:bf:5f:c2:31:a1:81:6c: 23:fc:50:52:30:83:d6:53:e5:54:7f:5b:24:38:3a: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F0:CC:62:2D:8C:90:75:6A:B6:FB:14:14:58:58:78:03:2D:B0:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl X509v3 Authority Key Identifier: keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer sbgp-ipAddrBlock: critical IPv4: 172.82.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:4b:95:3d:d8:cb:e8:b9:51:90:08:d5:c8:46:bf:f3:e1:be: b2:a3:3c:56:e6:dd:1e:e8:28:0b:76:6c:f5:78:40:c8:4f:98: 96:60:b5:00:5c:16:7b:e5:f7:fd:b1:3a:c2:cf:7b:d3:6b:25: e0:36:b9:9d:b3:c8:8b:4a:54:c6:58:23:61:93:0d:c8:30:9c: 25:76:22:54:9f:74:48:fa:52:cf:d3:b5:38:f3:fd:79:2e:b6: a9:ea:a2:24:90:79:f5:e5:bd:7f:fa:b4:9e:0a:93:ea:12:a4: b4:f4:c4:96:6b:42:40:21:bb:98:a8:a0:a8:3c:56:ad:1c:65: 1e:31:54:61:51:ad:5c:56:b8:64:ae:9b:5b:f5:68:51:79:3e: 94:cb:71:3d:e0:bd:58:66:ec:7d:8e:5d:8c:e0:ec:74:9e:66: da:f1:6a:ab:cf:2a:74:1e:b0:2e:c5:d9:21:c3:06:e7:a1:1b: 19:38:28:3f:a4:e9:9c:e5:9e:85:81:a1:a5:81:4d:07:c8:b5: 0b:78:9f:3c:d3:0d:77:c9:50:0e:a9:32:b9:f2:b3:5d:61:ee: f0:f0:05:3a:8b:89:46:9e:6e:13:d3:2d:8f:97:6d:92:4f:7c: 1a:6c:5b:f1:78:54:eb:36:f4:e1:68:9c:23:90:b7:34:41:95: 34:f8:5e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk8hQPJSwiS5GGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMjBiNWUtODEwNC00YzRlLWJiY2UtMzA1YjE3NGI2 ODRhMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzYxODdlN2QtM2UwYS00N2UyLWIzNzAtYzE0NWRiOWJhN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyoZZlbAc1c+DF2tlbjaF5VEL7zRQP9ZJiTZ NuN/iM/yR5IYE2eK4cKpsibfyWH4ixB2nCiwC9EGEesyItNxoWdYHzi9ZhPmGQbz fuS7oMOBqUDZRX6zu6QRAOBGUYBqalZALAPLWEMnWJJOPr+JRDRpemwMo/UIVmcL sxqyglDMlIVb0qS6AtG74wArAyk9DgAKRtzYaJCMgRbxHXVppFe5wzbx3The8cDg ERuKihbXHN5UKMam+N8H7E8IlUWFSwoZ4l6oMyL3x9HMgB2FOEiw8TrNU3G/TO4b vcJJD85D5sDMlU44Kr9fwjGhgWwj/FBSMIPWU+VUf1skODqpFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvwzGItjJB1arb7FBRYWHgDLbB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MzIy MGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0YjY4NGEvY2Y5MmM4MWQtYTkxMC0z MzllLTg0ZDUtM2Y4YzZiYWEzOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODMyMjBiNWUtODEwNC00YzRlLWJi Y2UtMzA1YjE3NGI2ODRhLzgzMjIwYjVlLTgxMDQtNGM0ZS1iYmNlLTMwNWIxNzRi Njg0YS5jcmwwHwYDVR0jBBgwFoAUoWhThMRveGpjv2l4lcBjMgj5U6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDVi MTc0YjY4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINLlT3Yy+i5UZAI1chGv/PhvrKjPFbm3R7oKAt2bPV4QMhPmJZgtQBc Fnvl9/2xOsLPe9NrJeA2uZ2zyItKVMZYI2GTDcgwnCV2IlSfdEj6Us/TtTjz/Xku tqnqoiSQefXlvX/6tJ4Kk+oSpLT0xJZrQkAhu5iooKg8Vq0cZR4xVGFRrVxWuGSu m1v1aFF5PpTLcT3gvVhm7H2OXYzg7HSeZtrxaqvPKnQesC7F2SHDBuehGxk4KD+k 6ZzlnoWBoaWBTQfItQt4nzzTDXfJUA6pMrnys11h7vDwBTqLiUaebhPTLY+XbZJP fBpsW/F4VOs29OFonCOQtzRBlTT4Xo8= -----END CERTIFICATE-----Generated at Mon Apr 28 09:28:01 2025 by rpki-client