$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa File: 79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa (raw, json) Hash identifier: h7SnGm2qjc21kznTKG/gWT8RGGTIhjzXatxUIkXfZqA= Subject key identifier: A7:FD:2D:82:D5:26:73:DA:B5:04:25:DC:79:51:5A:40:7F:E9:63:CA Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F43285849D910A99FEB70A09490E51E80 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa Signing time: Wed 14 May 2025 06:57:49 +0000 ROA not before: Wed 14 May 2025 06:57:49 +0000 ROA not after: Tue 12 Aug 2025 06:57:49 +0000 asID: 26658 IP address blocks: 172.87.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:10:a9:9f:eb:70:a0:94:90:e5:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: May 14 06:57:49 2025 GMT Not After : Aug 12 06:57:49 2025 GMT Subject: CN=bbd89e4b-abba-429d-a507-781f8600e515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:71:7d:b6:94:70:c5:88:a7:2b:04:ae:42: ed:8a:4d:08:0d:fb:27:40:a7:97:81:26:b2:58:d3: 12:8a:3f:39:13:42:11:0c:d1:12:25:ef:ec:3c:49: a7:e8:21:0b:20:57:a6:3f:6c:dd:00:b2:10:90:8a: 74:3b:4b:f5:00:5c:8b:02:7a:6a:f9:dc:44:be:55: dc:0f:0a:a3:75:93:0c:34:11:31:9f:61:3f:7f:36: ce:d5:3c:cc:13:cf:a8:df:1a:70:9c:bc:49:56:26: 24:57:c5:3b:72:a3:54:21:bd:75:5b:8c:d7:77:5b: 4f:b8:96:a5:74:d3:b0:04:d1:3a:46:7b:25:9f:ef: 87:51:ad:ac:08:a2:ef:ec:6a:c6:5a:a1:a3:10:27: 07:1f:ad:16:8f:6b:42:9c:3f:1e:2f:ec:47:18:81: b0:f7:73:45:f1:21:c2:3c:d0:ad:6f:f0:ce:b5:b0: 76:66:2e:ba:69:cb:22:a9:35:f1:21:40:65:40:72: 44:01:18:d8:db:5b:f1:b8:a9:da:f0:71:7b:7a:82: f6:f2:71:64:a2:98:1b:50:41:78:12:b7:8d:20:35: a6:64:c9:bf:75:2a:07:89:f6:87:a4:d8:2f:aa:68: b5:ae:53:04:49:da:78:3b:dd:19:f6:09:ca:98:db: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:2D:82:D5:26:73:DA:B5:04:25:DC:79:51:5A:40:7F:E9:63:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/79ab41d2-867b-3a5f-a61c-726c2b1ccd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:49:d1:c1:54:49:f4:01:57:74:f5:c0:85:d7:61:f4:fb:6c: 5e:46:bd:c1:cc:9c:86:66:f7:9e:3f:f8:1d:aa:ba:3b:6b:27: f9:28:1c:d6:67:c1:3d:44:e8:42:2a:c0:89:ce:5a:ab:82:ff: 2f:05:1b:af:c1:6f:c5:73:f9:6c:d7:03:52:14:68:54:41:b2: 83:d0:be:8d:6b:14:2d:b9:78:8f:a8:20:04:26:89:99:94:4f: ee:1e:47:ae:6d:f9:ba:1f:3b:3d:5b:77:71:cc:29:75:f0:59: f9:c6:29:e0:ae:1d:55:75:3c:39:a2:de:16:01:30:9f:1b:d9: ba:eb:3c:42:75:f3:87:aa:8e:31:3e:4c:1b:33:64:4f:64:6e: 2a:0e:35:da:40:58:82:eb:8c:b9:c4:5b:b8:b5:c1:79:46:15: 60:94:c8:30:72:11:67:90:6f:fe:12:54:5c:23:e8:58:d3:35: c0:81:f1:13:90:8b:cd:f1:6b:13:9a:a2:17:1c:a1:99:fd:51: 0a:93:b9:a9:ca:2d:b9:77:89:9a:f5:69:27:c3:60:6a:be:78: c0:2a:89:c1:68:72:e9:fc:08:a1:a6:99:f7:f8:53:ee:ec:62: eb:23:51:de:76:6c:c9:a8:92:79:0a:7a:de:4a:65:2f:5d:58: a8:47:44:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZEKmf63CglJDlHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDUxNDA2NTc0OVoXDTI1MDgxMjA2NTc0OVowLzEtMCsGA1UEAxMk YmJkODllNGItYWJiYS00MjlkLWE1MDctNzgxZjg2MDBlNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp9xfbaUcMWIpysErkLtik0IDfsnQKeXgSay WNMSij85E0IRDNESJe/sPEmn6CELIFemP2zdALIQkIp0O0v1AFyLAnpq+dxEvlXc DwqjdZMMNBExn2E/fzbO1TzME8+o3xpwnLxJViYkV8U7cqNUIb11W4zXd1tPuJal dNOwBNE6Rnsln++HUa2sCKLv7GrGWqGjECcHH60Wj2tCnD8eL+xHGIGw93NF8SHC PNCtb/DOtbB2Zi66acsiqTXxIUBlQHJEARjY21vxuKna8HF7eoL28nFkopgbUEF4 EreNIDWmZMm/dSoHifaHpNgvqmi1rlMESdp4O90Z9gnKmNsPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKf9LYLVJnPatQQl3HlRWkB/6WPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNzlhYjQxZDItODY3Yi0z YTVmLWE2MWMtNzI2YzJiMWNjZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFfBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9J0cFUSfQBV3T1wIXXYfT7bF5GvcHMnIZm954/+B2qujtrJ/koHNZn wT1E6EIqwInOWquC/y8FG6/Bb8Vz+WzXA1IUaFRBsoPQvo1rFC25eI+oIAQmiZmU T+4eR65t+bofOz1bd3HMKXXwWfnGKeCuHVV1PDmi3hYBMJ8b2brrPEJ184eqjjE+ TBszZE9kbioONdpAWILrjLnEW7i1wXlGFWCUyDByEWeQb/4SVFwj6FjTNcCB8ROQ i83xaxOaohccoZn9UQqTuanKLbl3iZr1aSfDYGq+eMAqicFocun8CKGmmff4U+7s YusjUd52bMmoknkKet5KZS9dWKhHRKc= -----END CERTIFICATE-----Generated at Mon Jun 16 15:35:13 2025 by rpki-client