$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c940b386-3fd7-33ec-96e2-aa67c508d548.roa File: c940b386-3fd7-33ec-96e2-aa67c508d548.roa (raw, json) Hash identifier: 6I+KqAu5TgZoTrID9djKTk7Olu6Qj5fkNjD9+FnzBcI= Subject key identifier: A9:22:E1:4F:67:B0:E8:74:49:C7:6C:71:E2:76:23:02:4C:01:CC:A1 Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F4328584A1B600AA001F12E3A83CD1870 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c940b386-3fd7-33ec-96e2-aa67c508d548.roa Signing time: Sat 07 Jun 2025 01:00:50 +0000 ROA not before: Sat 07 Jun 2025 01:00:50 +0000 ROA not after: Fri 05 Sep 2025 01:00:50 +0000 asID: 7657 IP address blocks: 47.72.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:60:0a:a0:01:f1:2e:3a:83:cd:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Jun 7 01:00:50 2025 GMT Not After : Sep 5 01:00:50 2025 GMT Subject: CN=539bd8df-c8b8-4a09-a98b-ed428506d28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:ea:fd:5b:67:45:79:ef:44:d7:cd:d4:a1: cf:34:d7:2d:4c:eb:3a:88:de:14:44:6a:a7:cf:92: cb:80:fc:51:ba:0f:e8:13:17:26:aa:4e:b1:c9:92: cd:9c:54:21:86:dc:c6:fc:b9:3a:55:6c:f6:e1:98: a6:cd:3f:22:8f:62:22:19:7f:4e:0c:20:0f:1c:e1: 2f:b8:a7:7e:47:78:71:f3:a4:03:cb:5a:64:bb:55: 25:ff:f5:15:91:b4:2a:ab:fc:83:8c:e9:39:a9:8f: 42:29:35:6d:76:90:c4:1d:18:7f:5a:5e:b3:62:4b: 93:de:aa:56:99:05:06:55:28:96:b1:88:89:f5:53: ba:e1:e1:fb:14:b2:87:bd:41:97:1b:f3:7c:c8:0f: e0:65:c4:4e:c2:f1:b2:14:0e:49:03:c6:87:03:48: 1f:7f:3f:0a:3c:89:78:39:ee:7b:33:3e:e8:62:af: 05:30:16:3d:9f:4d:9a:7b:37:89:f5:5e:66:cb:dd: c7:96:d7:cd:c8:0e:9e:c9:ed:d2:74:b8:a8:a2:3b: bf:d2:20:ae:f3:c6:36:90:f9:76:16:39:fe:1c:48: ef:23:01:de:76:2e:b0:5f:45:52:57:e7:b7:a1:23: 0f:2f:d8:a1:b0:b8:2f:75:53:b0:e3:aa:92:3a:36: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:22:E1:4F:67:B0:E8:74:49:C7:6C:71:E2:76:23:02:4C:01:CC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c940b386-3fd7-33ec-96e2-aa67c508d548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:39:37:1e:34:8f:03:98:16:d6:72:c8:f5:57:53:27:ce:f9: 6c:b5:5b:82:16:03:67:ed:85:07:cf:df:65:8b:32:84:f8:a3: 7d:27:25:6b:37:5f:eb:8c:34:39:9e:08:04:ee:2c:03:26:31: 4b:dd:19:5d:a5:8c:b9:74:ea:40:11:2e:8c:51:b7:d4:a8:8b: 77:22:97:aa:81:1f:c9:cd:c6:0d:55:33:10:94:f4:3c:fd:0b: 0c:3e:bf:65:a2:ca:da:47:0b:0b:e6:b8:7b:1d:24:6b:2f:ed: 7d:38:39:3a:33:94:d8:56:f4:74:8f:6a:e8:82:bc:58:b3:3c: e9:df:a3:14:f8:23:23:42:cc:5a:de:36:b4:2b:15:99:25:c7: af:2b:f7:28:96:78:16:99:39:a9:65:7f:51:b2:c5:4c:45:67: 56:8c:7f:bb:91:09:29:89:fb:f6:ae:82:da:7f:79:82:77:ff: d0:54:62:b2:df:e7:18:ab:89:6d:50:47:6a:40:06:45:fb:4a: d5:31:53:9b:23:8a:93:29:f6:a8:70:e9:1f:63:26:a2:69:e8: 62:95:b8:5f:a6:8a:9b:f0:df:0c:d8:1f:e3:4f:5e:c0:f1:98: 20:78:aa:9e:b2:14:d1:1f:90:30:a2:4d:20:21:a1:d9:34:57: 5f:7d:51:93 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEobYAqgAfEuOoPNGHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk NTM5YmQ4ZGYtYzhiOC00YTA5LWE5OGItZWQ0Mjg1MDZkMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB/q/VtnRXnvRNfN1KHPNNctTOs6iN4URGqn z5LLgPxRug/oExcmqk6xyZLNnFQhhtzG/Lk6VWz24ZimzT8ij2IiGX9ODCAPHOEv uKd+R3hx86QDy1pku1Ul//UVkbQqq/yDjOk5qY9CKTVtdpDEHRh/Wl6zYkuT3qpW mQUGVSiWsYiJ9VO64eH7FLKHvUGXG/N8yA/gZcROwvGyFA5JA8aHA0gffz8KPIl4 Oe57Mz7oYq8FMBY9n02aezeJ9V5my93HltfNyA6eye3SdLiooju/0iCu88Y2kPl2 Fjn+HEjvIwHedi6wX0VSV+e3oSMPL9ihsLgvdVOw46qSOjZpEwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKki4U9nsOh0ScdsceJ2IwJMAcyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvYzk0MGIzODYtM2ZkNy0z M2VjLTk2ZTItYWE2N2M1MDhkNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL0gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGjk3HjSPA5gW1nLI9VdTJ875bLVbghYDZ+2FB8/fZYsyhPijfSclazdf 64w0OZ4IBO4sAyYxS90ZXaWMuXTqQBEujFG31KiLdyKXqoEfyc3GDVUzEJT0PP0L DD6/ZaLK2kcLC+a4ex0kay/tfTg5OjOU2Fb0dI9q6IK8WLM86d+jFPgjI0LMWt42 tCsVmSXHryv3KJZ4Fpk5qWV/UbLFTEVnVox/u5EJKYn79q6C2n95gnf/0FRist/n GKuJbVBHakAGRftK1TFTmyOKkyn2qHDpH2MmomnoYpW4X6aKm/DfDNgf409ewPGY IHiqnrIU0R+QMKJNICGh2TRXX31Rkw== -----END CERTIFICATE-----Generated at Sun Jun 15 21:43:17 2025 by rpki-client