$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa File: a2212d2b-8250-3896-b964-9c6440e53224.roa (raw, json) Hash identifier: qHP8hq0GBoAd4mOV2v5fXmlo8GyDwHIZdXCvpVZqbLU= Subject key identifier: FF:D0:04:2B:7A:79:86:CA:65:58:BC:92:38:E6:92:5C:B3:4A:75:A8 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584AB91C06EB8BA4CF435EE9FF40 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 26658 IP address blocks: 172.87.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1c:06:eb:8b:a4:cf:43:5e:e9:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=d07d2c63-025d-41ed-ba93-c31f0291acb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:b2:01:d8:c0:00:8b:79:cb:e1:55:35:bf: d2:01:a5:8b:2b:e3:2c:54:0e:ab:11:a2:15:b5:99: 45:c4:98:cc:40:a9:41:33:a3:15:6a:38:9f:f6:ea: 93:c6:85:bb:1c:dc:9b:ff:e8:cc:fb:7d:77:62:c7: 7f:6a:06:ae:3c:26:32:c5:13:20:ab:1c:d7:0d:e8: 8a:bc:71:ed:7d:7e:06:39:30:fb:8c:57:e7:29:9e: 8e:2b:df:3d:50:39:c3:c0:51:85:b5:94:79:14:69: 3a:07:83:ac:10:3d:2d:84:b3:50:df:6e:16:00:7b: 48:9e:2a:ea:ca:02:50:d1:24:57:bf:c9:ea:eb:21: a1:24:d6:95:4b:20:9b:1f:3a:be:ac:b7:b5:8f:11: a2:1b:6a:8a:00:38:24:34:2f:b1:68:98:e8:5b:1a: 29:20:4e:e8:45:e1:a6:2a:26:85:92:3f:66:19:eb: b0:78:28:1c:1e:ce:bf:ac:5b:cc:04:a6:b6:16:1f: 3e:9e:1c:0a:70:7d:11:d7:60:a1:a5:03:b0:c5:81: 43:b0:d5:4f:a8:d2:59:ab:2c:1b:a8:e3:bf:ba:e6: 4a:34:ee:fc:1d:64:4a:79:a9:39:c1:01:55:40:8c: 81:a2:99:86:3b:ac:02:0d:83:8a:65:5c:9a:f0:33: c6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D0:04:2B:7A:79:86:CA:65:58:BC:92:38:E6:92:5C:B3:4A:75:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:59:2d:92:2f:34:5a:d9:16:fc:5c:68:c7:c0:f0:90:95:45: d8:d5:2b:72:f0:7c:3c:8c:f1:1a:2c:16:e0:9f:ef:41:57:33: 98:7a:48:61:fa:fb:15:c1:4d:4d:3d:a5:cb:15:45:80:c8:5f: 64:98:41:0c:e1:ea:c5:49:ba:f9:75:a7:92:fd:eb:bd:bb:20: 0b:bc:b8:37:cf:8e:e9:37:94:e3:cb:b1:87:60:06:43:fe:6d: aa:ba:ed:dc:37:86:73:61:fb:92:a6:30:df:7c:e6:5e:c0:da: cc:ca:37:62:d1:28:83:05:02:24:05:d1:4f:77:7f:03:7d:c7: 3e:20:3a:43:98:40:54:82:67:10:8f:2e:c6:ca:16:da:20:d5: e7:36:30:71:f3:e2:cf:77:53:11:1f:63:0c:97:c2:f8:37:c9: 4c:3a:41:64:4a:ed:25:c3:60:11:ad:6d:b6:35:60:2f:bf:17: 06:2c:27:8f:5a:19:01:fd:04:53:3e:2e:42:f5:8d:06:68:8a: 0d:6b:57:e3:e8:4b:61:e8:85:f2:25:d5:30:c7:41:ad:a4:cf: 28:19:ea:5e:92:a7:4a:3c:00:45:56:77:95:05:fd:96:99:4d: 5d:0c:dd:bf:3f:f0:63:95:0b:93:42:1b:f7:51:a4:e0:68:bd: 0b:dc:89:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5HAbri6TPQ17p/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZDA3ZDJjNjMtMDI1ZC00MWVkLWJhOTMtYzMxZjAyOTFhY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2SyAdjAAIt5y+FVNb/SAaWLK+MsVA6rEaIV tZlFxJjMQKlBM6MVajif9uqTxoW7HNyb/+jM+313Ysd/agauPCYyxRMgqxzXDeiK vHHtfX4GOTD7jFfnKZ6OK989UDnDwFGFtZR5FGk6B4OsED0thLNQ324WAHtInirq ygJQ0SRXv8nq6yGhJNaVSyCbHzq+rLe1jxGiG2qKADgkNC+xaJjoWxopIE7oReGm KiaFkj9mGeuweCgcHs6/rFvMBKa2Fh8+nhwKcH0R12ChpQOwxYFDsNVPqNJZqywb qOO/uuZKNO78HWRKeak5wQFVQIyBopmGO6wCDYOKZVya8DPGuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/QBCt6eYbKZVi8kjjmklyzSnWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYTIyMTJkMmItODI1MC0z ODk2LWI5NjQtOWM2NDQwZTUzMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErFfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNZLZIvNFrZFvxcaMfA8JCVRdjVK3LwfDyM8RosFuCf70FXM5h6SGH6 +xXBTU09pcsVRYDIX2SYQQzh6sVJuvl1p5L96727IAu8uDfPjuk3lOPLsYdgBkP+ baq67dw3hnNh+5KmMN985l7A2szKN2LRKIMFAiQF0U93fwN9xz4gOkOYQFSCZxCP LsbKFtog1ec2MHHz4s93UxEfYwyXwvg3yUw6QWRK7SXDYBGtbbY1YC+/FwYsJ49a GQH9BFM+LkL1jQZoig1rV+PoS2HohfIl1TDHQa2kzygZ6l6Sp0o8AEVWd5UF/ZaZ TV0M3b8/8GOVC5NCG/dRpOBovQvciZk= -----END CERTIFICATE-----Generated at Wed Aug 6 00:42:38 2025 by rpki-client