$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa File: d336b8a0-5ab3-39bf-9100-3461a0074eab.roa (raw, json) Hash identifier: c8kbk0vU4IBkZAL7/04xzvNJ5tfMhYrE3zyDnVHLvDQ= Subject key identifier: 44:A8:86:4C:DE:A1:C8:09:8D:7C:57:8E:57:23:E1:80:C0:A8:20:E8 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584A2C20213550DFC54F7F553D80 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 19740 IP address blocks: 172.84.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:21:35:50:df:c5:4f:7f:55:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=24486c70-5b7f-4cb5-8233-4ce0a4420e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:ca:72:7c:26:6d:a7:19:28:f4:9b:1b:be: 29:0c:d1:4c:8f:ec:1b:8c:96:71:f6:9c:07:b4:b6: 02:2b:0f:2a:ae:1d:0b:70:4a:5f:b4:67:58:0c:0c: dd:3d:93:46:f5:16:24:4c:38:9a:43:79:e7:ae:72: 07:bb:9b:8c:f4:fb:9c:34:3c:0d:19:4e:0e:24:cc: 3d:1d:d5:ce:e3:06:ea:58:b0:7c:40:8e:b2:02:36: f2:f9:ee:b8:72:41:d5:50:a3:ae:97:2f:4d:41:b7: b9:ac:8c:96:02:f8:88:33:50:47:e3:2c:4f:a8:2a: a2:3d:ab:bc:31:fa:e1:f4:d9:26:64:2e:af:cc:62: e4:bb:d2:2c:aa:86:bd:98:70:00:55:30:84:78:fa: 03:c4:b4:ff:c2:a4:87:31:b2:6e:ef:a6:d6:51:bd: 90:e9:6f:e1:02:50:7a:11:be:ac:60:35:a5:a9:de: d7:ec:d8:47:d0:c9:a0:7a:2b:21:9e:11:4e:15:48: d1:a7:1c:5f:a0:ae:3a:3a:08:05:ee:bf:d8:17:42: 14:98:e1:61:78:97:a2:14:cb:72:9d:80:8d:60:f2: 14:6f:79:91:a9:cc:ce:48:ce:6e:8b:e2:04:55:4c: 02:39:70:71:b6:c8:d7:15:85:c9:05:10:99:be:14: 3c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A8:86:4C:DE:A1:C8:09:8D:7C:57:8E:57:23:E1:80:C0:A8:20:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d336b8a0-5ab3-39bf-9100-3461a0074eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:60:7b:b7:8a:f5:3a:92:b0:70:47:ee:f5:7f:0a:4f:75:b1: 1e:bd:35:f3:6e:bd:86:dd:de:9f:44:10:02:db:f2:19:d5:a6: 6f:02:f9:60:99:6d:95:87:43:78:0e:0d:0d:91:4d:2c:71:10: 63:b2:69:6b:16:22:02:93:76:58:af:a6:f2:70:da:09:78:31: c5:51:24:2e:95:22:1f:80:c3:41:72:35:ac:29:2d:f6:a2:08: f7:ea:9b:bc:11:81:5d:0d:41:de:e0:c4:51:f7:8f:ae:31:f4: 72:f0:31:7d:42:af:d1:fd:a9:ae:1a:78:e1:7a:69:b3:7b:b4: 6a:1b:7a:76:57:9e:6f:0b:9e:a3:a9:fc:e4:7e:9e:df:94:f3: 3d:da:f1:ed:34:b1:eb:6b:92:f4:36:3d:a0:88:23:bb:43:85: 8e:b1:15:55:13:d7:ac:a4:6c:4e:c8:52:e0:0c:ef:d2:ba:c1: da:27:0a:12:3b:a0:74:f9:b8:5d:2c:16:13:da:e4:a1:6c:12: c8:f8:3d:37:8b:b5:11:62:24:68:79:b5:8d:7a:ea:74:76:a1: ec:bd:81:dc:4e:ca:ff:b0:a5:43:f0:61:21:e5:83:0a:0b:2d: 43:6f:d2:e7:ae:b3:71:b0:ab:a9:fd:79:7d:a3:97:91:5c:89: d0:6a:a3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosICE1UN/FT39VPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MjQ0ODZjNzAtNWI3Zi00Y2I1LTgyMzMtNGNlMGE0NDIwZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr/KcnwmbacZKPSbG74pDNFMj+wbjJZx9pwH tLYCKw8qrh0LcEpftGdYDAzdPZNG9RYkTDiaQ3nnrnIHu5uM9PucNDwNGU4OJMw9 HdXO4wbqWLB8QI6yAjby+e64ckHVUKOuly9NQbe5rIyWAviIM1BH4yxPqCqiPau8 Mfrh9NkmZC6vzGLku9Isqoa9mHAAVTCEePoDxLT/wqSHMbJu76bWUb2Q6W/hAlB6 Eb6sYDWlqd7X7NhH0MmgeishnhFOFUjRpxxfoK46OggF7r/YF0IUmOFheJeiFMty nYCNYPIUb3mRqczOSM5ui+IEVUwCOXBxtsjXFYXJBRCZvhQ8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESohkzeocgJjXxXjlcj4YDAqCDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvZDMzNmI4YTAtNWFiMy0z OWJmLTkxMDAtMzQ2MWEwMDc0ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChge7eK9TqSsHBH7vV/Ck91sR69NfNuvYbd3p9EEALb8hnVpm8C+WCZ bZWHQ3gODQ2RTSxxEGOyaWsWIgKTdlivpvJw2gl4McVRJC6VIh+Aw0FyNawpLfai CPfqm7wRgV0NQd7gxFH3j64x9HLwMX1Cr9H9qa4aeOF6abN7tGobenZXnm8LnqOp /OR+nt+U8z3a8e00setrkvQ2PaCII7tDhY6xFVUT16ykbE7IUuAM79K6wdonChI7 oHT5uF0sFhPa5KFsEsj4PTeLtRFiJGh5tY166nR2oey9gdxOyv+wpUPwYSHlgwoL LUNv0ueus3Gwq6n9eX2jl5FcidBqoyM= -----END CERTIFICATE-----Generated at Sun Jun 15 17:36:29 2025 by rpki-client