$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa File: cebdec51-99ad-378c-9ad6-936ea7e7b823.roa (raw, json) Hash identifier: Roq3t32VcW9wFr+tga0k3PwdLyMHoYOO8H6ToQm6BQ4= Subject key identifier: 4E:27:9E:CA:B9:F7:0A:0F:A4:FE:FF:29:52:6A:1F:01:73:49:D3:5A Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584A2C20211549B9CF6724CBBE30 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 19740 IP address blocks: 172.84.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:21:15:49:b9:cf:67:24:cb:be:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=079b51b9-5702-4ae7-93c3-51a881a9d829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:aa:d1:47:e9:9b:27:88:68:2c:84:3e:2d: 73:da:bb:75:46:d7:f3:0a:f6:9a:80:c4:9c:9f:1d: f7:7b:fc:c0:7f:a6:d0:bb:e9:39:07:81:aa:8f:03: 4b:70:72:93:3d:8b:a3:c3:52:48:45:32:46:8d:c8: 38:39:6f:bc:4c:4d:c2:6b:99:ad:bf:c6:64:16:e8: 36:94:95:a8:15:03:28:76:f6:ae:0d:ac:58:11:b9: 85:1a:80:8a:8f:57:e8:6e:4f:4b:d2:3c:5f:d4:b3: 70:45:e4:d6:6e:08:8e:7a:b6:a6:dc:b8:61:7a:9a: f2:a9:80:12:d7:54:b7:75:a3:4c:22:d7:15:9f:e3: bf:b1:9c:c4:f8:ed:c6:df:b0:fd:01:51:4b:0b:41: 00:f7:74:73:c8:87:02:be:63:f5:1c:29:7c:41:93: 0a:0e:16:ac:3f:66:40:78:25:a3:28:3b:ef:28:75: b8:c2:bc:b5:70:cb:f0:04:cb:98:32:4c:fa:99:71: 58:a7:9b:a7:b1:85:b7:ff:06:f0:73:45:61:c9:55: b6:ad:96:92:dd:8b:c9:42:71:2e:d9:66:91:0e:47: 7a:6f:26:7b:f5:36:ea:0e:be:33:ec:8e:aa:6f:7f: b0:e0:3f:4f:89:dd:b2:8f:1f:c3:90:21:54:b9:53: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:27:9E:CA:B9:F7:0A:0F:A4:FE:FF:29:52:6A:1F:01:73:49:D3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/cebdec51-99ad-378c-9ad6-936ea7e7b823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:67:88:9c:e4:49:24:b3:ba:1b:52:a3:50:06:93:7c:0a:71: 76:22:40:a0:a8:39:73:2c:32:07:b9:27:f6:a2:e0:cb:51:7c: 9b:4d:25:af:06:95:a3:aa:75:05:ea:47:28:94:1f:36:d7:b4: 84:d3:a1:11:e2:4c:15:6d:ef:60:05:2d:9f:a0:4e:ac:93:c1: 07:b1:6d:78:73:df:bb:e7:69:e3:2e:24:b2:b7:42:35:22:37: e5:1f:20:f6:c7:c3:79:2f:54:aa:75:f2:14:b1:b1:31:ff:60: d3:25:0d:5b:00:c2:be:e0:f5:0a:39:b8:d4:db:8f:4e:d8:34: 0f:56:39:45:2b:7f:86:e2:a1:be:1e:a0:bb:d7:6d:6b:1f:aa: 34:e2:f9:4c:8d:ff:f9:5a:8f:fc:cd:e2:bb:bd:0b:6d:7e:52: 0a:9a:a1:7b:31:8b:c0:1f:8b:6f:b7:8a:4f:9f:8e:75:97:e0: 2a:85:61:f9:77:36:3d:99:97:58:b2:2b:40:fe:b3:17:de:81: 9f:b0:f5:00:99:ca:62:35:42:a6:ec:80:e8:48:d6:f4:06:5d: d8:64:6b:fd:3e:fa:8b:71:d4:35:1a:83:70:f9:f1:62:09:1f: 12:68:86:05:14:35:76:c9:72:48:1c:9f:3f:47:01:23:91:f2: 07:66:eb:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICEVSbnPZyTLvjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MDc5YjUxYjktNTcwMi00YWU3LTkzYzMtNTFhODgxYTlkODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDeq0UfpmyeIaCyEPi1z2rt1RtfzCvaagMSc nx33e/zAf6bQu+k5B4GqjwNLcHKTPYujw1JIRTJGjcg4OW+8TE3Ca5mtv8ZkFug2 lJWoFQModvauDaxYEbmFGoCKj1fobk9L0jxf1LNwReTWbgiOeram3LhhepryqYAS 11S3daNMItcVn+O/sZzE+O3G37D9AVFLC0EA93RzyIcCvmP1HCl8QZMKDhasP2ZA eCWjKDvvKHW4wry1cMvwBMuYMkz6mXFYp5unsYW3/wbwc0VhyVW2rZaS3YvJQnEu 2WaRDkd6byZ79TbqDr4z7I6qb3+w4D9Pid2yjx/DkCFUuVMwJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4nnsq59woPpP7/KVJqHwFzSdNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvY2ViZGVjNTEtOTlhZC0z NzhjLTlhZDYtOTM2ZWE3ZTdiODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBniJzkSSSzuhtSo1AGk3wKcXYiQKCoOXMsMge5J/ai4MtRfJtNJa8G laOqdQXqRyiUHzbXtITToRHiTBVt72AFLZ+gTqyTwQexbXhz37vnaeMuJLK3QjUi N+UfIPbHw3kvVKp18hSxsTH/YNMlDVsAwr7g9Qo5uNTbj07YNA9WOUUrf4biob4e oLvXbWsfqjTi+UyN//laj/zN4ru9C21+UgqaoXsxi8Afi2+3ik+fjnWX4CqFYfl3 Nj2Zl1iyK0D+sxfegZ+w9QCZymI1QqbsgOhI1vQGXdhka/0++otx1DUag3D58WIJ HxJohgUUNXbJckgcnz9HASOR8gdm60I= -----END CERTIFICATE-----Generated at Sun Jun 15 15:48:41 2025 by rpki-client