$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/d65d7a2e-852c-3d68-84b2-a73464061000.roa File: d65d7a2e-852c-3d68-84b2-a73464061000.roa (raw, json) Hash identifier: tK7Wx6rCDEz6eWAaDrPAoukoDEf2t39ll2CBw0JL7gk= Subject key identifier: E0:30:64:30:47:84:1A:47:96:BA:AC:B1:4F:6A:7E:1C:D0:17:1C:20 Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F4328584A60658D5821252C300A3C8500 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/d65d7a2e-852c-3d68-84b2-a73464061000.roa Signing time: Tue 01 Jul 2025 18:22:59 +0000 ROA not before: Tue 01 Jul 2025 18:22:59 +0000 ROA not after: Mon 29 Sep 2025 18:22:59 +0000 asID: 834 IP address blocks: 172.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:65:8d:58:21:25:2c:30:0a:3c:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Jul 1 18:22:59 2025 GMT Not After : Sep 29 18:22:59 2025 GMT Subject: CN=9cbba923-6dd0-4187-a92e-4bc12992ea3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0b:3c:37:bb:9f:9a:ab:3d:86:98:eb:72:7a: 92:2d:07:6a:92:0e:36:48:b5:0e:fc:e4:4e:bb:82: ed:ac:df:43:04:91:b2:60:48:47:ca:49:22:31:35: 39:8a:85:15:21:12:21:e8:80:42:f3:1c:ad:f5:a1: 92:53:13:0d:54:ec:43:88:65:d5:d2:1f:cd:b3:df: 44:d3:e6:e2:66:c0:c0:29:69:20:6a:e8:19:bf:a8: 80:ab:79:c8:08:d5:87:95:17:9c:e5:b6:7e:5d:5e: 84:b0:49:f5:22:66:7e:8e:e1:ca:fa:f5:c9:fb:6b: 20:09:9f:40:4c:9e:dc:83:d8:e8:76:c8:5b:37:27: 9e:8d:59:15:65:1c:c5:c4:08:89:11:cf:be:0d:d8: 8a:fd:99:ce:f1:28:1c:2e:0d:8d:b3:69:57:35:78: b5:47:8b:0a:7b:d5:e9:bd:4e:dc:8d:6f:76:1c:c0: bb:38:0e:cb:88:b1:df:98:5b:14:20:0a:ba:8b:08: 08:cb:8d:19:a5:fe:04:36:6b:67:db:00:3e:5b:20: 0e:63:a1:c1:5c:b9:99:6a:c1:94:50:88:b0:23:31: 63:b0:73:20:bc:85:d8:2e:1c:77:b0:00:02:dd:0c: 95:9e:a1:57:a9:bd:8e:48:b4:0f:47:de:49:79:3a: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:30:64:30:47:84:1A:47:96:BA:AC:B1:4F:6A:7E:1C:D0:17:1C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/d65d7a2e-852c-3d68-84b2-a73464061000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 172.96.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:36:96:11:6f:00:39:b1:51:6d:b3:8b:05:9d:fd:55:08:2d: 20:54:43:9c:7b:66:68:09:b6:01:22:e8:e9:4a:d6:0c:2c:8d: f6:ae:41:e9:c3:f5:3c:2b:b3:90:bd:e2:34:c5:32:20:02:77: 7a:10:af:5a:f5:2b:7a:ea:95:a7:55:c6:6f:a6:3d:59:65:99: b3:c8:e7:c0:78:57:1b:f9:2a:2a:bd:64:80:43:27:87:97:44: 43:4b:c3:f7:f5:6f:5d:55:fa:e8:11:12:5d:23:c7:2a:0b:b5: 6c:90:62:03:58:ea:8d:bf:36:4f:22:bb:96:fd:ff:76:bf:99: 42:2f:81:69:a1:78:49:fd:9c:91:40:73:43:e7:d6:9c:6c:3e: d4:5d:d8:97:0b:9f:49:24:ab:75:e3:05:00:72:89:a6:99:fb: 59:ad:38:2c:c2:ff:ff:28:b9:da:3b:b1:bb:78:a6:de:ec:e8: 5c:f1:52:a8:6e:45:c1:4a:73:8c:6a:c6:45:72:d9:e0:56:eb: f5:91:18:0e:e2:a7:79:b0:12:a9:68:9e:a2:a2:7a:2d:08:81: a6:8b:6d:a6:16:14:2f:b3:6a:1b:6d:80:68:0a:9f:28:23:15: bb:09:94:40:5e:92:c6:89:82:b7:bf:4d:6e:18:48:7f:9d:c9: 1a:b1:f5:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpgZY1YISUsMAo8hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MDcwMTE4MjI1OVoXDTI1MDkyOTE4MjI1OVowLzEtMCsGA1UEAxMk OWNiYmE5MjMtNmRkMC00MTg3LWE5MmUtNGJjMTI5OTJlYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAs8N7ufmqs9hpjrcnqSLQdqkg42SLUO/ORO u4LtrN9DBJGyYEhHykkiMTU5ioUVIRIh6IBC8xyt9aGSUxMNVOxDiGXV0h/Ns99E 0+biZsDAKWkgaugZv6iAq3nICNWHlRec5bZ+XV6EsEn1ImZ+juHK+vXJ+2sgCZ9A TJ7cg9jodshbNyeejVkVZRzFxAiJEc++DdiK/ZnO8SgcLg2Ns2lXNXi1R4sKe9Xp vU7cjW92HMC7OA7LiLHfmFsUIAq6iwgIy40Zpf4ENmtn2wA+WyAOY6HBXLmZasGU UIiwIzFjsHMgvIXYLhx3sAAC3QyVnqFXqb2OSLQPR95JeTrHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAwZDBHhBpHlrqssU9qfhzQFxwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvZDY1ZDdhMmUtODUyYy0z ZDY4LTg0YjItYTczNDY0MDYxMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE02lhFvADmxUW2ziwWd/VUILSBUQ5x7ZmgJtgEi6OlK1gwsjfauQenD 9Twrs5C94jTFMiACd3oQr1r1K3rqladVxm+mPVllmbPI58B4Vxv5Kiq9ZIBDJ4eX RENLw/f1b11V+ugREl0jxyoLtWyQYgNY6o2/Nk8iu5b9/3a/mUIvgWmheEn9nJFA c0Pn1pxsPtRd2JcLn0kkq3XjBQByiaaZ+1mtOCzC//8oudo7sbt4pt7s6FzxUqhu RcFKc4xqxkVy2eBW6/WRGA7ip3mwEqlonqKiei0IgaaLbaYWFC+zahttgGgKnygj FbsJlEBeksaJgre/TW4YSH+dyRqx9Rc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:41:48 2025 by rpki-client