$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa File: 915472ec-3ee3-374f-a1cf-a02c24d2a966.roa (raw, json) Hash identifier: rLb6EKvkD7fDOU8ohAnn7CMTTpEFFwvwJDauHMzew9s= Subject key identifier: F0:58:EC:DC:2F:AB:E9:EA:E7:92:A5:B7:CF:97:AA:FD:50:93:98:84 Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F4328584A2ABACD2A3E04F7C6854C0BE0 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 19437 IP address blocks: 172.96.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:cd:2a:3e:04:f7:c6:85:4c:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=e74d18ff-bfb7-4a1a-a347-eb2fcce1e6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d0:88:a5:3d:fc:73:1f:37:84:07:ba:de:d1: e0:96:70:d3:ca:82:6b:ca:bc:4e:6e:f3:c6:85:9b: c6:69:1a:4e:b1:ac:62:5b:cc:b0:23:43:fe:be:d4: b4:11:bc:4b:c5:8d:02:e7:b8:28:2b:da:7d:f8:96: 4a:d3:ef:a3:f0:b2:21:5a:26:8d:86:6b:70:24:f6: 59:e1:3f:66:28:60:ae:67:17:a9:36:15:2b:c3:8f: ef:75:8e:b6:63:00:79:56:21:31:8a:cf:6d:6f:65: 3f:d9:1e:70:73:60:89:96:8b:0b:c0:47:28:33:1c: 62:49:ad:c2:27:e6:8b:79:c2:cb:36:4a:63:63:88: 09:d7:fc:71:eb:04:eb:e2:73:ec:3e:fa:a3:56:e5: e9:ae:bb:82:99:67:f5:7b:c8:eb:6f:10:7b:cb:54: 0d:9a:46:9d:35:c6:67:76:09:a0:a9:07:18:27:2d: 9a:af:fb:08:7f:6e:49:39:f1:dd:0e:bd:9f:f4:74: 7c:e1:1f:08:b3:86:49:54:90:40:fd:c7:db:4b:34: 54:fb:58:24:dc:c0:11:1e:82:5c:f1:23:f3:51:07: 52:2a:de:2d:20:11:ef:7d:5a:3c:24:1a:8a:21:46: a7:8d:d7:3d:7c:71:b4:93:a9:0b:89:ad:01:cc:db: ee:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:58:EC:DC:2F:AB:E9:EA:E7:92:A5:B7:CF:97:AA:FD:50:93:98:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/915472ec-3ee3-374f-a1cf-a02c24d2a966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 172.96.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d8:3f:c3:64:f6:55:c9:bf:1e:d8:ce:26:04:f9:ff:1f:8e: 3a:ed:d4:84:b0:f5:8d:33:78:56:80:e7:e0:75:8c:01:4e:fc: 85:e0:f1:e6:31:e0:f9:59:93:6c:84:b2:8d:c8:a8:4b:0d:d4: db:e1:fc:5c:97:2e:c1:14:43:05:0d:2c:60:84:cd:d0:f4:8c: f8:3b:80:dd:99:6b:40:75:d7:c1:f0:11:54:60:47:8f:0d:01: ab:59:0b:ca:41:51:eb:a2:37:5f:f5:e2:e1:e5:8a:53:70:d2: 8d:6b:53:79:72:2c:af:82:67:d3:b3:82:3d:ec:28:f0:7a:0a: f9:7d:33:fa:b5:41:fd:e8:17:16:f3:be:d2:da:b8:73:74:37: 01:5e:f7:ec:56:8f:5f:88:78:2b:9c:15:e3:8e:c6:d7:9d:ad: b6:b9:20:7f:ad:c6:30:9d:59:89:99:09:5a:9b:8d:9b:29:45: b9:d3:fd:33:21:8e:5c:1d:cc:0e:38:d5:5a:a3:8d:d8:62:62: 59:55:bd:ce:1b:4e:4a:62:7c:9f:a9:09:82:4d:fd:b5:85:e4: 84:a7:25:a4:d8:38:ba:e9:70:a2:9f:a5:38:85:bd:ee:a2:da: 73:74:0e:0d:82:78:87:15:d0:de:43:61:0d:02:00:52:15:9c: 04:57:a3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqus0qPgT3xoVMC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZTc0ZDE4ZmYtYmZiNy00YTFhLWEzNDctZWIyZmNjZTFlNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNCIpT38cx83hAe63tHglnDTyoJryrxObvPG hZvGaRpOsaxiW8ywI0P+vtS0EbxLxY0C57goK9p9+JZK0++j8LIhWiaNhmtwJPZZ 4T9mKGCuZxepNhUrw4/vdY62YwB5ViExis9tb2U/2R5wc2CJlosLwEcoMxxiSa3C J+aLecLLNkpjY4gJ1/xx6wTr4nPsPvqjVuXprruCmWf1e8jrbxB7y1QNmkadNcZn dgmgqQcYJy2ar/sIf25JOfHdDr2f9HR84R8Is4ZJVJBA/cfbSzRU+1gk3MARHoJc 8SPzUQdSKt4tIBHvfVo8JBqKIUanjdc9fHG0k6kLia0BzNvu/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBY7Nwvq+nq55Klt8+Xqv1Qk5iEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvOTE1NDcyZWMtM2VlMy0z NzRmLWExY2YtYTAyYzI0ZDJhOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHYP8Nk9lXJvx7YziYE+f8fjjrt1ISw9Y0zeFaA5+B1jAFO/IXg8eYx 4PlZk2yEso3IqEsN1Nvh/FyXLsEUQwUNLGCEzdD0jPg7gN2Za0B118HwEVRgR48N AatZC8pBUeuiN1/14uHlilNw0o1rU3lyLK+CZ9Ozgj3sKPB6Cvl9M/q1Qf3oFxbz vtLauHN0NwFe9+xWj1+IeCucFeOOxtedrba5IH+txjCdWYmZCVqbjZspRbnT/TMh jlwdzA441VqjjdhiYllVvc4bTkpifJ+pCYJN/bWF5ISnJaTYOLrpcKKfpTiFve6i 2nN0Dg2CeIcV0N5DYQ0CAFIVnARXo0A= -----END CERTIFICATE-----Generated at Sun Jun 15 04:49:47 2025 by rpki-client