$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa File: 4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa (raw, json) Hash identifier: xZ3PczAGCBVDzUF/zd8tNUZGGoGLmBtyDiMWo2eh/2I= Subject key identifier: 46:1D:B5:E8:E0:88:98:27:B8:A1:7A:72:21:43:18:04:8A:FF:EF:AD Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AB91C06FAC51821E41E99A380 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 26658 IP address blocks: 172.87.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:06:fa:c5:18:21:e4:1e:99:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=393e6ba8-6ad0-4b1a-85cf-8a9dff7b9985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:70:f3:ca:d6:a1:9d:2b:8f:d7:57:98:74: 5f:dd:ee:9f:e7:14:1b:91:38:62:22:21:f9:11:c4: 52:da:fb:d1:e6:65:ea:d5:8a:84:0e:2b:1e:c5:c1: 6e:33:e8:1a:21:29:1c:0f:9a:4d:f3:4f:f6:e1:30: 0a:fc:68:ec:f3:a5:c9:38:47:bf:98:59:2e:ba:e7: 61:41:bd:95:d6:73:fa:d5:1d:30:a6:e6:bd:65:c8: 24:a2:30:72:0d:ee:aa:92:98:e4:5a:7d:90:57:e9: 36:d1:7c:bc:5a:fb:fc:63:27:3f:e7:21:81:d0:ce: 19:1c:1a:07:3d:f2:38:00:34:15:83:cc:ca:8e:01: 42:82:61:e6:f7:60:b4:96:32:d7:94:fc:3f:60:d5: ba:c6:87:eb:79:1c:85:1a:c5:13:d9:72:98:e6:80: fb:ba:a7:1f:a2:6e:0a:aa:20:9e:42:4c:db:de:86: 53:fd:3e:77:91:5c:b1:bb:97:d6:c7:e7:5b:ac:4e: 63:68:4c:bd:b0:0c:ea:63:1d:7c:9c:f8:c2:15:32: ff:7b:1d:d6:1a:02:40:ae:98:e1:ef:cd:23:63:74: ee:41:02:1f:f2:c1:50:17:83:18:87:64:07:c9:74: 04:a0:75:59:29:b9:a2:c0:39:23:04:f5:ff:89:b4: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1D:B5:E8:E0:88:98:27:B8:A1:7A:72:21:43:18:04:8A:FF:EF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:41:bf:6f:d8:3f:22:d0:e0:67:cb:3b:4e:8e:82:5a:1c:e6: 7a:38:8a:a9:39:19:05:28:ef:05:f3:04:44:f1:66:82:e0:e2: 7b:0e:52:3c:0d:de:1d:2e:de:d9:9f:69:51:51:2f:4c:0c:ae: 07:04:8f:82:81:7c:17:5d:ca:76:8d:e7:c3:70:69:27:2c:16: 28:e9:87:a1:8d:14:97:9c:cf:90:29:10:e0:ee:a5:2e:aa:41: 5a:b7:0a:89:e3:be:75:f0:b7:67:7e:78:87:8f:98:ca:45:e2: 9e:c1:61:5b:b3:9e:40:3c:ee:f3:39:dc:5b:e2:67:4a:5f:e6: 17:7a:e9:0f:35:4f:98:5d:49:e3:d4:51:d9:54:f2:04:70:76: 2e:70:0b:cc:71:a3:22:f2:93:92:61:94:9d:8f:f2:b1:83:76: 6f:e7:2b:c0:0f:1a:1e:80:a4:b8:44:06:94:ed:e1:8c:dc:03: 80:6e:5c:bf:c2:5d:08:4c:f2:da:6f:92:a7:7a:6c:67:51:e9: 41:54:03:3b:81:df:7d:bf:50:f2:9a:12:66:89:e5:90:40:94: 4d:41:5c:7b:e7:64:36:3d:de:18:12:34:36:53:2c:5a:1d:37: cf:d3:08:fb:43:a2:e2:57:f4:f1:e2:32:d8:7b:4d:d7:89:ed: aa:2f:4b:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HAb6xRgh5B6Zo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzkzZTZiYTgtNmFkMC00YjFhLTg1Y2YtOGE5ZGZmN2I5OTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Jw88rWoZ0rj9dXmHRf3e6f5xQbkThiIiH5 EcRS2vvR5mXq1YqEDisexcFuM+gaISkcD5pN80/24TAK/Gjs86XJOEe/mFkuuudh Qb2V1nP61R0wpua9ZcgkojByDe6qkpjkWn2QV+k20Xy8Wvv8Yyc/5yGB0M4ZHBoH PfI4ADQVg8zKjgFCgmHm92C0ljLXlPw/YNW6xofreRyFGsUT2XKY5oD7uqcfom4K qiCeQkzb3oZT/T53kVyxu5fWx+dbrE5jaEy9sAzqYx18nPjCFTL/ex3WGgJArpjh 780jY3TuQQIf8sFQF4MYh2QHyXQEoHVZKbmiwDkjBPX/ibSpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYdtejgiJgnuKF6ciFDGASK/++tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNGRiZWEwZTUtYzJiZi0z ZmNjLWJjNGUtMTg3MGFmN2YyOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5Bv2/YPyLQ4GfLO06Ogloc5no4iqk5GQUo7wXzBETxZoLg4nsOUjwN 3h0u3tmfaVFRL0wMrgcEj4KBfBddynaN58NwaScsFijph6GNFJecz5ApEODupS6q QVq3ConjvnXwt2d+eIePmMpF4p7BYVuznkA87vM53FviZ0pf5hd66Q81T5hdSePU UdlU8gRwdi5wC8xxoyLyk5JhlJ2P8rGDdm/nK8APGh6ApLhEBpTt4YzcA4BuXL/C XQhM8tpvkqd6bGdR6UFUAzuB332/UPKaEmaJ5ZBAlE1BXHvnZDY93hgSNDZTLFod N8/TCPtDouJX9PHiMth7TdeJ7aovS2U= -----END CERTIFICATE-----Generated at Tue Aug 5 16:41:58 2025 by rpki-client