$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9346a099-c69f-3899-964e-256ab153b160.roa File: 9346a099-c69f-3899-964e-256ab153b160.roa (raw, json) Hash identifier: rBrxeqvlC9WbGQ7aua9laUgaBMiwRBSt6o1L8F3dlCs= Subject key identifier: 76:C0:68:4C:08:D5:7D:85:73:32:91:49:ED:A4:D9:1D:B9:FD:63:AA Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAF2339F7E342E734C4F00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9346a099-c69f-3899-964e-256ab153b160.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 54858 IP address blocks: 172.92.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:f2:33:9f:7e:34:2e:73:4c:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=7ef5bac6-9552-4f84-b249-210c5de9b73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:fb:a5:70:a6:2d:7c:d5:96:14:d2:c9:a4: 2b:79:42:2c:29:fd:4e:0d:8c:ee:6f:ab:12:e2:65: 10:b8:b7:d6:6c:ce:d0:32:bd:63:db:92:c6:4e:e0: cb:9a:c9:97:64:c3:5b:1e:86:aa:bb:f9:74:ff:83: 1b:c8:1e:d1:24:f5:60:21:ab:7b:f8:63:e0:a7:90: a6:76:22:71:c8:c2:2a:79:3d:1a:be:13:31:20:b2: 4c:91:96:5b:b6:b6:56:8a:9a:c9:bf:82:46:81:0f: f9:76:16:06:50:f4:c5:21:bb:59:25:73:8c:c8:d0: e8:1f:ac:9e:78:59:1b:bf:00:10:42:1d:b7:35:37: 19:b2:ae:9d:e8:91:ca:0f:e1:5a:93:d5:47:7f:d9: 66:71:44:05:84:d4:1d:14:44:d8:e2:a1:07:28:d5: bc:5c:2a:26:45:5b:0f:8f:5a:e9:aa:9a:e9:56:f5: c0:7c:73:a3:4a:51:c4:d3:c7:8b:8d:d7:1d:2c:86: e4:19:b5:56:d7:a8:58:cb:c9:64:2e:ab:72:84:c2: 5d:5e:b7:c4:fb:7c:59:b5:25:10:46:2e:c9:08:5e: ee:ed:0b:27:b5:c3:e1:c3:65:02:3f:68:25:2e:93: ed:b2:71:7b:cd:73:ba:05:00:4f:41:01:b7:a4:cf: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C0:68:4C:08:D5:7D:85:73:32:91:49:ED:A4:D9:1D:B9:FD:63:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9346a099-c69f-3899-964e-256ab153b160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 172.92.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:68:8a:7b:c7:c5:21:dd:62:e6:da:ca:7d:1e:6f:f7:bc:83: 2a:5c:7e:3c:35:70:56:9e:6f:a4:0c:75:af:8b:68:c2:e2:97: cb:3d:44:9b:6b:ac:35:af:47:a2:bb:66:95:9d:16:a4:ad:3b: 3a:e0:3a:7a:47:d5:e7:99:c7:14:20:54:a6:a6:d3:e6:bf:53: b6:70:81:4e:80:03:c4:1c:96:90:67:7a:45:7a:97:26:aa:4a: a9:ac:b6:9a:b6:97:d2:87:83:c6:81:66:df:56:09:d5:72:ef: 5c:29:fc:52:5d:89:cc:80:70:e1:fa:52:e8:95:0d:fc:26:17: 8c:71:1b:3a:94:35:ac:02:e5:83:47:78:33:b7:69:25:12:38: 48:c1:7b:64:db:15:9c:5a:87:42:52:1e:d8:89:76:3b:8f:b9: f1:d0:89:b6:b9:9a:27:f2:45:eb:bd:e6:6d:c1:89:28:44:b9: 63:ad:9f:29:1f:b1:d4:10:53:6a:c0:dd:44:63:9e:04:72:3f: 29:83:0f:d3:c5:3d:66:2f:f0:83:ca:aa:7a:fe:f6:24:4b:27: eb:5f:d2:c6:c1:ea:f3:c6:c6:60:51:21:4a:4f:90:11:1e:d3: 8e:98:7d:5f:27:0d:36:1c:3f:d9:24:57:39:a3:af:67:8b:b2: 1a:5b:41:f2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoquvIzn340LnNMTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk N2VmNWJhYzYtOTU1Mi00Zjg0LWIyNDktMjEwYzVkZTliNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Kv7pXCmLXzVlhTSyaQreUIsKf1ODYzub6sS 4mUQuLfWbM7QMr1j25LGTuDLmsmXZMNbHoaqu/l0/4MbyB7RJPVgIat7+GPgp5Cm diJxyMIqeT0avhMxILJMkZZbtrZWiprJv4JGgQ/5dhYGUPTFIbtZJXOMyNDoH6ye eFkbvwAQQh23NTcZsq6d6JHKD+Fak9VHf9lmcUQFhNQdFETY4qEHKNW8XComRVsP j1rpqprpVvXAfHOjSlHE08eLjdcdLIbkGbVW16hYy8lkLqtyhMJdXrfE+3xZtSUQ Ri7JCF7u7QsntcPhw2UCP2glLpPtsnF7zXO6BQBPQQG3pM/JNwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHbAaEwI1X2FczKRSe2k2R25/WOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTM0NmEwOTktYzY5Zi0z ODk5LTk2NGUtMjU2YWIxNTNiMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArFwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAR2iKe8fFId1i5trKfR5v97yDKlx+PDVwVp5vpAx1r4towuKXyz1Em2us Na9HortmlZ0WpK07OuA6ekfV55nHFCBUpqbT5r9TtnCBToADxByWkGd6RXqXJqpK qay2mraX0oeDxoFm31YJ1XLvXCn8Ul2JzIBw4fpS6JUN/CYXjHEbOpQ1rALlg0d4 M7dpJRI4SMF7ZNsVnFqHQlIe2Il2O4+58dCJtrmaJ/JF673mbcGJKES5Y62fKR+x 1BBTasDdRGOeBHI/KYMP08U9Zi/wg8qqev72JEsn61/SxsHq88bGYFEhSk+QER7T jph9XycNNhw/2SRXOaOvZ4uyGltB8g== -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:01 2025 by rpki-client