$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa File: b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa (raw, json) Hash identifier: QgKWkuMaamlHUpphpGhH0Fz9LTdGI4z8A4+L/W1AkDs= Subject key identifier: F1:63:6D:53:05:1A:CD:FC:05:67:25:32:52:DA:26:24:EF:22:56:C3 Certificate issuer: /CN=4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d Certificate serial: 010D0C9F4328584A2C40917AA2498D8493FE2C00 Authority key identifier: 33:A7:C4:EC:EA:F1:1A:B4:2D:8D:29:06:E5:19:23:E4:E0:10:F8:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa Signing time: Fri 13 Jun 2025 02:06:26 +0000 ROA not before: Fri 13 Jun 2025 02:06:26 +0000 ROA not after: Thu 11 Sep 2025 02:06:26 +0000 asID: 399230 IP address blocks: 172.82.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:40:91:7a:a2:49:8d:84:93:fe:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d Validity Not Before: Jun 13 02:06:26 2025 GMT Not After : Sep 11 02:06:26 2025 GMT Subject: CN=0b39c99a-3b01-4a3d-90a0-dc3dac92f13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:90:23:bc:94:f1:23:d0:de:95:b9:63:c2:64: 87:ff:6b:7a:c6:cf:d3:a7:af:a8:12:3e:aa:4f:93: b6:74:2e:5b:2c:0c:6a:eb:2e:49:fc:de:4b:36:f9: 35:c4:f6:57:2c:ad:25:1f:b5:bf:24:b5:4b:66:c6: 9a:72:e5:b0:54:7c:b7:40:87:62:f9:92:1d:8c:a9: 8f:87:4b:92:88:a5:0c:3c:a8:4a:54:15:91:a7:8b: 58:8f:aa:aa:68:dd:bb:4f:bc:ee:97:cc:05:7c:64: 3c:02:c0:5f:df:ae:f9:b9:0a:e7:b2:eb:43:74:69: 95:16:37:3c:24:c6:61:8c:23:23:0f:25:3e:49:83: d8:39:5e:06:13:2e:bf:1f:6f:22:52:d1:3d:5f:69: 1a:d7:40:4c:c5:7f:81:66:8a:aa:08:56:fa:02:f8: c6:9a:27:0b:73:c1:5d:88:81:ba:3e:53:33:e9:05: ee:d1:f1:69:0b:1e:7a:f1:80:22:a7:e2:6b:2d:40: 43:fc:7d:55:21:89:b8:4e:b7:46:ca:96:3c:6a:ec: ca:1b:53:cd:88:87:41:e8:ef:18:e7:7a:dd:9a:dd: 81:9e:c6:86:18:c3:ec:9e:97:15:d2:3d:ca:5f:f3: e6:5d:27:79:b9:dd:c3:7c:a5:fa:2f:a1:d2:c9:66: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:63:6D:53:05:1A:CD:FC:05:67:25:32:52:DA:26:24:EF:22:56:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.crl X509v3 Authority Key Identifier: keyid:33:A7:C4:EC:EA:F1:1A:B4:2D:8D:29:06:E5:19:23:E4:E0:10:F8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer sbgp-ipAddrBlock: critical IPv4: 172.82.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a7:57:ae:08:85:ad:2f:f6:ab:2c:a7:5e:92:b3:c2:bd:da: fc:21:1a:f3:e8:f9:78:04:38:4f:d2:65:87:94:0c:ee:b6:fb: ba:f2:57:70:69:e8:c4:c7:10:c9:33:a6:76:08:b3:b7:9e:32: 80:7f:a1:68:eb:ae:ff:e8:3c:7b:1c:88:23:10:3c:07:46:70: 89:5e:f9:0d:8a:fb:fb:b0:8a:44:57:fe:c9:bb:90:7e:dd:c5: b1:1d:79:b9:fd:b9:2d:75:b7:52:f5:de:81:eb:29:8f:8c:52: 10:e4:68:08:ba:c4:01:f1:ab:6b:e2:a7:fa:64:f3:46:84:c7: b6:fe:9b:29:67:2b:3e:0d:01:bd:49:62:b2:03:c1:bd:0b:0b: 61:18:4a:00:37:04:2c:db:1a:69:f3:ab:c7:25:58:bc:26:0d: b9:f5:f4:ae:d2:6b:45:21:ef:31:a6:fa:78:0d:92:cb:fe:5a: 43:41:03:41:d9:d4:c9:bc:97:ef:09:66:0a:82:55:1a:6b:03: 28:92:5e:07:7d:f6:05:25:eb:40:a9:43:bb:2b:ef:34:82:79: bc:29:ea:b3:e8:fa:14:99:bd:6e:46:cc:e4:02:43:34:42:5e: e4:89:a7:68:a4:a4:91:50:69:29:56:9c:78:dd:f2:76:68:da: 48:60:7f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosQJF6okmNhJP+LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE0MDVjYTktZThhNS00MWE2LWJlYzktM2JmY2M5ZDAx ZTlkMB4XDTI1MDYxMzAyMDYyNloXDTI1MDkxMTAyMDYyNlowLzEtMCsGA1UEAxMk MGIzOWM5OWEtM2IwMS00YTNkLTkwYTAtZGMzZGFjOTJmMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZAjvJTxI9DelbljwmSH/2t6xs/Tp6+oEj6q T5O2dC5bLAxq6y5J/N5LNvk1xPZXLK0lH7W/JLVLZsaacuWwVHy3QIdi+ZIdjKmP h0uSiKUMPKhKVBWRp4tYj6qqaN27T7zul8wFfGQ8AsBf3675uQrnsutDdGmVFjc8 JMZhjCMjDyU+SYPYOV4GEy6/H28iUtE9X2ka10BMxX+BZoqqCFb6AvjGmicLc8Fd iIG6PlMz6QXu0fFpCx568YAip+JrLUBD/H1VIYm4TrdGypY8auzKG1PNiIdB6O8Y 53rdmt2BnsaGGMPsnpcV0j3KX/PmXSd5ud3DfKX6L6HSyWYZxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFjbVMFGs38BWclMlLaJiTvIlbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YTQw NWNhOS1lOGE1LTQxYTYtYmVjOS0zYmZjYzlkMDFlOWQvYjAwYjBjMWMtMDg4NC0z ZGY1LWE5OWQtZjJkOTg2YTA3ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGE0MDVjYTktZThhNS00MWE2LWJl YzktM2JmY2M5ZDAxZTlkLzRhNDA1Y2E5LWU4YTUtNDFhNi1iZWM5LTNiZmNjOWQw MWU5ZC5jcmwwHwYDVR0jBBgwFoAUM6fE7OrxGrQtjSkG5Rkj5OAQ+DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YTQwNWNhOS1lOGE1LTQxYTYtYmVjOS0zYmZj YzlkMDFlOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICnV64Iha0v9qssp16Ss8K92vwhGvPo+XgEOE/SZYeUDO62+7ryV3Bp 6MTHEMkzpnYIs7eeMoB/oWjrrv/oPHsciCMQPAdGcIle+Q2K+/uwikRX/sm7kH7d xbEdebn9uS11t1L13oHrKY+MUhDkaAi6xAHxq2vip/pk80aEx7b+mylnKz4NAb1J YrIDwb0LC2EYSgA3BCzbGmnzq8clWLwmDbn19K7Sa0Uh7zGm+ngNksv+WkNBA0HZ 1Mm8l+8JZgqCVRprAyiSXgd99gUl60CpQ7sr7zSCebwp6rPo+hSZvW5GzOQCQzRC XuSJp2ikpJFQaSlWnHjd8nZo2khgf/c= -----END CERTIFICATE-----Generated at Thu Jun 19 14:13:36 2025 by rpki-client