$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4ee12058-fdda-38cc-bda1-dcbff924dc68.roa File: 4ee12058-fdda-38cc-bda1-dcbff924dc68.roa (raw, json) Hash identifier: czjPkfVVFrkCrYQkiyOnTd1MLxRcRxMoqw5gYLohEL4= Subject key identifier: D1:D3:8C:F2:22:9F:C8:19:B8:43:03:16:C1:FF:E5:01:A5:08:15:3E Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F432858495E6FA71DC509DAF5C2126F40 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4ee12058-fdda-38cc-bda1-dcbff924dc68.roa Signing time: Mon 31 Mar 2025 08:44:47 +0000 ROA not before: Mon 31 Mar 2025 08:44:47 +0000 ROA not after: Sun 29 Jun 2025 08:44:47 +0000 asID: 26658 IP address blocks: 172.87.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:6f:a7:1d:c5:09:da:f5:c2:12:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Mar 31 08:44:47 2025 GMT Not After : Jun 29 08:44:47 2025 GMT Subject: CN=037d4d6e-7aa9-40c3-9106-c659f7d0756e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:10:d2:10:75:92:7b:7b:8c:87:81:4c:e9: fc:8f:40:fa:d3:9d:81:51:d2:fb:5d:2b:e5:18:5c: 0a:00:c6:bf:c2:fb:df:46:46:ea:a9:a7:5a:b1:27: 69:8a:f0:d1:e0:3c:18:ab:7f:43:a7:70:3a:2e:ca: f7:61:51:38:10:42:bc:43:4b:43:34:d8:b9:7d:0a: cd:cb:70:34:f2:0c:cb:49:47:37:5b:9f:12:28:85: 11:56:51:ce:a5:00:97:08:a6:c0:c3:ae:37:80:bb: 5c:36:67:f0:28:d0:62:b0:08:ac:2a:cd:df:6d:2e: 0c:4e:f6:a0:49:44:75:f6:16:27:18:43:2c:c3:59: b5:2a:1d:bf:19:14:2a:aa:27:00:fc:42:33:5a:20: 97:f6:2a:0a:93:16:61:e7:04:5c:41:59:96:6f:d4: 77:16:08:97:dc:9a:7f:a1:a7:14:ac:be:0f:ef:f1: 60:80:d2:ad:a6:ac:4c:9e:11:a1:c9:98:39:fd:66: 38:7f:be:09:63:16:34:a4:8c:f3:54:83:c5:58:f5: f6:4f:2d:33:a8:32:55:96:7b:1e:5a:94:42:f7:d6: 4c:a3:c3:7e:1e:61:2e:c7:01:54:5c:93:35:90:1c: d7:1a:a6:20:2e:ea:ed:60:fa:64:30:2f:c4:69:64: 85:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D3:8C:F2:22:9F:C8:19:B8:43:03:16:C1:FF:E5:01:A5:08:15:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4ee12058-fdda-38cc-bda1-dcbff924dc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:42:64:ab:8a:6f:2d:34:7d:4e:20:02:77:84:f4:1a:c2:20: 40:2e:15:83:78:ba:3c:71:a8:7f:68:a2:e3:8f:67:1c:6f:74: 12:4e:51:51:a2:32:f5:11:f7:6c:43:bf:01:0b:f1:25:0d:b5: 18:af:7d:fe:cb:e7:c2:d0:9f:97:67:e5:fb:68:bd:36:b2:6b: eb:05:81:65:ed:73:de:99:72:74:cc:53:55:a9:44:a4:a7:0a: 28:cc:7f:5c:66:d0:3e:4a:48:2e:c5:1b:6c:12:aa:4a:bd:14: bc:58:84:8b:53:ae:eb:74:a2:75:aa:98:d8:ac:5c:0b:c7:98: 46:96:85:8b:a0:70:cb:2a:a9:07:a3:32:95:80:9c:2f:f8:d7: 30:90:22:ef:4f:a3:31:56:5c:12:5d:33:d4:66:5e:f3:6d:19: ed:f7:43:a2:b3:1d:55:52:5d:90:46:10:c9:cf:53:29:84:8d: a9:f5:d6:59:9c:12:f3:af:5c:75:bd:d6:fa:1d:dc:89:b7:80: b5:bd:a7:11:56:93:53:4e:b9:e8:fd:0d:2e:c5:26:57:8a:91: 00:7d:66:2b:8b:e0:70:14:07:bf:69:95:9c:cb:6e:87:74:94: 54:e7:2b:82:5b:13:31:c8:0e:eb:4f:6c:92:14:bc:51:ec:2d: c4:ad:cb:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEleb6cdxQna9cISb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDMzMTA4NDQ0N1oXDTI1MDYyOTA4NDQ0N1owLzEtMCsGA1UEAxMk MDM3ZDRkNmUtN2FhOS00MGMzLTkxMDYtYzY1OWY3ZDA3NTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHEQ0hB1knt7jIeBTOn8j0D6052BUdL7XSvl GFwKAMa/wvvfRkbqqadasSdpivDR4DwYq39Dp3A6Lsr3YVE4EEK8Q0tDNNi5fQrN y3A08gzLSUc3W58SKIURVlHOpQCXCKbAw643gLtcNmfwKNBisAisKs3fbS4MTvag SUR19hYnGEMsw1m1Kh2/GRQqqicA/EIzWiCX9ioKkxZh5wRcQVmWb9R3FgiX3Jp/ oacUrL4P7/FggNKtpqxMnhGhyZg5/WY4f74JYxY0pIzzVIPFWPX2Ty0zqDJVlnse WpRC99ZMo8N+HmEuxwFUXJM1kBzXGqYgLurtYPpkMC/EaWSFMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHTjPIin8gZuEMDFsH/5QGlCBU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNGVlMTIwNTgtZmRkYS0z OGNjLWJkYTEtZGNiZmY5MjRkYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrFfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVCZKuKby00fU4gAneE9BrCIEAuFYN4ujxxqH9oouOPZxxvdBJOUVGi MvUR92xDvwEL8SUNtRivff7L58LQn5dn5ftovTaya+sFgWXtc96ZcnTMU1WpRKSn CijMf1xm0D5KSC7FG2wSqkq9FLxYhItTrut0onWqmNisXAvHmEaWhYugcMsqqQej MpWAnC/41zCQIu9PozFWXBJdM9RmXvNtGe33Q6KzHVVSXZBGEMnPUymEjan11lmc EvOvXHW91vod3Im3gLW9pxFWk1NOuej9DS7FJleKkQB9ZiuL4HAUB79plZzLbod0 lFTnK4JbEzHIDutPbJIUvFHsLcSty+I= -----END CERTIFICATE-----Generated at Sat Apr 26 16:14:40 2025 by rpki-client