$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa File: 4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa (raw, json) Hash identifier: ChVCSqQ1cFKfwJmsuriz7/69ZlMvrXHjDJL9tdV1UIs= Subject key identifier: 4D:9A:BF:52:41:1C:7F:D9:FB:EB:2F:1A:10:93:05:FD:D8:97:65:FD Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285849D911DBA968AC669815EBE440 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa Signing time: Wed 14 May 2025 07:00:13 +0000 ROA not before: Wed 14 May 2025 07:00:13 +0000 ROA not after: Tue 12 Aug 2025 07:00:13 +0000 asID: 26658 IP address blocks: 172.87.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:11:db:a9:68:ac:66:98:15:eb:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: May 14 07:00:13 2025 GMT Not After : Aug 12 07:00:13 2025 GMT Subject: CN=bdede1a9-8e84-4395-a6fc-02b699b240d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:2f:01:49:46:81:6d:ad:e8:ee:fd:03:2b: 62:ef:4f:39:aa:d0:d2:3d:ec:1c:68:77:37:29:2b: 42:22:03:eb:2b:6b:76:79:14:77:ee:30:6f:8b:e6: 56:d0:52:ee:7e:91:a1:60:2b:1a:ad:8d:30:e7:e0: b4:bf:79:7b:b8:80:50:de:a1:2f:fb:9d:f0:b0:32: d2:c4:42:12:27:e6:6b:ac:54:73:53:7c:6d:b5:7a: f7:37:2d:ce:b6:be:ce:ee:61:0e:d6:fd:d0:f0:fa: a8:d4:98:a9:d4:85:07:e9:18:53:61:ab:63:23:bc: 81:72:c8:72:5f:24:87:d7:cf:5b:bb:37:ad:df:36: a5:a3:7d:8c:d1:1c:80:b9:24:a7:19:62:26:97:24: d3:6c:8f:bc:fe:8b:72:5b:5d:9a:da:20:09:92:12: 0a:d5:3c:15:42:62:bf:f6:07:18:13:10:1c:04:48: fe:bc:cf:82:94:e5:cd:a6:a4:c5:8f:20:84:73:36: b9:79:64:ff:1f:51:10:1c:30:ce:d6:e4:31:f6:9e: bc:09:8f:46:9e:2e:d2:7e:0b:4e:9e:10:10:74:79: 94:ec:c9:53:32:2f:99:ae:78:91:2e:07:31:a8:15: 52:b0:97:13:c0:d7:3d:90:e4:fd:85:e7:34:72:1c: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9A:BF:52:41:1C:7F:D9:FB:EB:2F:1A:10:93:05:FD:D8:97:65:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:41:3a:04:12:04:5c:52:f1:4d:24:c3:de:23:d8:5c:6f:04: c0:83:79:74:4c:27:ec:18:3c:37:44:7f:38:cf:74:1c:7b:5c: 41:24:b0:8c:8a:7a:cf:f2:a8:66:df:15:29:2d:2c:aa:af:7f: 2c:8d:a2:c8:86:46:21:0d:05:30:fb:05:23:d7:b3:2a:47:f7: 96:5f:98:54:fd:b1:ff:a9:01:dc:b2:73:63:bc:bc:3d:df:76: 3b:3c:47:f6:17:3b:2a:d6:18:b2:49:ad:1f:7c:8c:38:ac:31: 2b:e8:5c:ce:3f:95:bb:df:6c:94:a4:53:37:41:e9:36:55:c3: 29:67:48:ab:64:11:b5:dd:8b:19:7e:a0:34:68:9d:8f:b7:03: b9:ad:f6:57:e1:f7:97:30:75:77:a5:00:ce:2e:e0:68:cf:31: 9c:f8:9d:36:57:95:ac:48:0d:4b:8e:ed:b5:07:6e:c0:93:a3: 3c:ca:be:76:56:5e:1b:ae:02:2c:d1:ac:c7:27:7c:dd:7f:93: 9e:78:dc:b2:85:c9:60:67:4b:ac:62:c2:f0:b0:ac:2c:4b:b2: 40:96:a2:c2:94:d8:90:a4:9e:2d:3a:58:cb:48:ad:62:93:94: e3:03:e7:73:2e:b9:bc:7a:21:33:0a:73:1e:eb:1e:2f:f3:b4: 16:6e:58:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZEdupaKxmmBXr5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDUxNDA3MDAxM1oXDTI1MDgxMjA3MDAxM1owLzEtMCsGA1UEAxMk YmRlZGUxYTktOGU4NC00Mzk1LWE2ZmMtMDJiNjk5YjI0MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQMvAUlGgW2t6O79Ayti7085qtDSPewcaHc3 KStCIgPrK2t2eRR37jBvi+ZW0FLufpGhYCsarY0w5+C0v3l7uIBQ3qEv+53wsDLS xEISJ+ZrrFRzU3xttXr3Ny3Otr7O7mEO1v3Q8Pqo1Jip1IUH6RhTYatjI7yBcshy XySH189buzet3zalo32M0RyAuSSnGWImlyTTbI+8/otyW12a2iAJkhIK1TwVQmK/ 9gcYExAcBEj+vM+ClOXNpqTFjyCEcza5eWT/H1EQHDDO1uQx9p68CY9Gni7SfgtO nhAQdHmU7MlTMi+ZrniRLgcxqBVSsJcTwNc9kOT9hec0chxXBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2av1JBHH/Z++svGhCTBf3Yl2X9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNGRiZWEwZTUtYzJiZi0z ZmNjLWJjNGUtMTg3MGFmN2YyOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVBOgQSBFxS8U0kw94j2FxvBMCDeXRMJ+wYPDdEfzjPdBx7XEEksIyK es/yqGbfFSktLKqvfyyNosiGRiENBTD7BSPXsypH95ZfmFT9sf+pAdyyc2O8vD3f djs8R/YXOyrWGLJJrR98jDisMSvoXM4/lbvfbJSkUzdB6TZVwylnSKtkEbXdixl+ oDRonY+3A7mt9lfh95cwdXelAM4u4GjPMZz4nTZXlaxIDUuO7bUHbsCTozzKvnZW XhuuAizRrMcnfN1/k5543LKFyWBnS6xiwvCwrCxLskCWosKU2JCkni06WMtIrWKT lOMD53Muubx6ITMKcx7rHi/ztBZuWE4= -----END CERTIFICATE-----Generated at Mon Jun 16 02:05:41 2025 by rpki-client