$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa File: 31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa (raw, json) Hash identifier: +CfEZjOEUwVJI+SeQcAgnkQ/oOohtgaa19ai5SENluo= Subject key identifier: 0F:57:D6:8E:D3:19:FF:2C:CF:17:C6:0B:87:07:D7:E7:47:16:92:53 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AB91C06DA399968E275199780 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 26658 IP address blocks: 172.87.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:06:da:39:99:68:e2:75:19:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=82c95d30-60f4-4f45-b4e6-97ec64b0b0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:01:9c:d0:e8:b6:a7:c0:b0:72:76:f2:13: 59:55:8f:49:83:f2:b5:3e:87:18:21:0d:8f:31:d5: 41:72:3d:fb:55:4e:2e:ce:94:a7:af:df:14:b4:90: b6:27:a1:2b:a5:4e:dd:aa:a5:eb:01:5d:cd:46:9a: ea:25:83:47:f6:fa:92:f0:47:3b:b2:f3:87:75:2e: fa:87:08:c0:92:d6:17:73:71:67:02:d8:0c:2c:4c: a6:f8:2f:ca:4f:7f:5c:1c:ed:c6:f4:d6:75:8c:e1: 05:25:ef:49:64:20:84:64:f2:e1:97:37:8e:a3:81: 19:3e:c4:9f:94:ca:3e:e5:e3:25:c0:9e:08:bf:05: c7:5a:77:90:2e:4a:ef:bf:bf:c7:79:bd:59:93:15: 24:6c:65:30:63:6d:e5:9e:5b:f0:d1:d3:06:94:64: 6a:b4:7e:7e:82:49:17:d8:99:b4:d7:11:aa:f9:fe: d0:be:76:8d:54:60:ab:c3:ba:ad:ea:c1:d1:05:90: 44:c4:71:78:73:71:55:5f:ae:58:7e:d2:03:1d:ae: d5:f8:c7:87:1f:e4:83:fa:f8:0c:6a:5a:75:4e:bd: 67:95:b5:a3:24:bf:d6:35:72:82:6b:ff:c4:78:20: f0:5d:de:e3:02:52:bf:f2:e9:85:4e:e0:a3:73:23: 42:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:57:D6:8E:D3:19:FF:2C:CF:17:C6:0B:87:07:D7:E7:47:16:92:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8d:3c:b4:df:b2:4a:23:6a:17:e4:b0:df:1f:5f:12:20:a8: 83:22:ae:3a:1f:94:4f:16:d5:b5:79:1b:bf:8d:d2:10:45:a2: cb:79:66:cc:cd:19:67:4d:05:20:1a:3b:37:78:36:f1:c9:8b: b5:49:59:79:5e:e1:57:74:dd:be:52:c9:03:e5:fe:bf:77:32: 57:7d:cd:2d:f5:58:d0:e0:78:2f:5a:03:ad:90:dc:55:fb:5b: 68:0c:12:b4:21:b2:f6:5c:5c:69:12:00:e3:fd:e3:5e:4b:a1: bb:f4:67:07:b4:7c:3e:fc:fd:cc:24:a8:e6:74:50:b0:74:93: 05:8e:02:23:fc:4c:1f:a0:f6:8c:60:38:35:fe:38:3b:1a:d1: d5:cf:dc:0c:6c:55:70:8b:4f:54:49:ed:24:d9:58:f9:69:b3: 27:de:e6:f0:04:22:97:95:32:0d:51:c1:98:6a:11:d0:8e:dc: 32:3b:66:53:14:75:d2:80:bb:1e:89:ab:84:24:51:69:42:c3: 63:63:a5:8d:8a:cc:8b:d4:5c:ae:da:66:68:4c:d3:0d:c9:4c: fb:d1:8b:d6:44:27:c5:b5:63:fa:2a:f2:a2:8f:cc:8f:81:a1: 45:f9:dd:04:ad:d4:8d:bf:22:68:04:c0:15:fb:cc:4c:5f:0c: b2:79:fd:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HAbaOZlo4nUZl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODJjOTVkMzAtNjBmNC00ZjQ1LWI0ZTYtOTdlYzY0YjBiMGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAcBnNDotqfAsHJ28hNZVY9Jg/K1PocYIQ2P MdVBcj37VU4uzpSnr98UtJC2J6ErpU7dqqXrAV3NRprqJYNH9vqS8Ec7svOHdS76 hwjAktYXc3FnAtgMLEym+C/KT39cHO3G9NZ1jOEFJe9JZCCEZPLhlzeOo4EZPsSf lMo+5eMlwJ4IvwXHWneQLkrvv7/Heb1ZkxUkbGUwY23lnlvw0dMGlGRqtH5+gkkX 2Jm01xGq+f7QvnaNVGCrw7qt6sHRBZBExHF4c3FVX65YftIDHa7V+MeHH+SD+vgM alp1Tr1nlbWjJL/WNXKCa//EeCDwXd7jAlK/8umFTuCjcyNCnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9X1o7TGf8szxfGC4cH1+dHFpJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMzFmNDdlZTgtZGQ4Zi0z NjEzLWI0ZDAtYTA5ZGYyYTdjYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuNPLTfskojahfksN8fXxIgqIMirjoflE8W1bV5G7+N0hBFost5ZszN GWdNBSAaOzd4NvHJi7VJWXle4Vd03b5SyQPl/r93Mld9zS31WNDgeC9aA62Q3FX7 W2gMErQhsvZcXGkSAOP9415Lobv0Zwe0fD78/cwkqOZ0ULB0kwWOAiP8TB+g9oxg ODX+ODsa0dXP3AxsVXCLT1RJ7STZWPlpsyfe5vAEIpeVMg1RwZhqEdCO3DI7ZlMU ddKAux6Jq4QkUWlCw2NjpY2KzIvUXK7aZmhM0w3JTPvRi9ZEJ8W1Y/oq8qKPzI+B oUX53QSt1I2/ImgEwBX7zExfDLJ5/Yk= -----END CERTIFICATE-----Generated at Tue Aug 5 16:37:59 2025 by rpki-client