$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa File: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (raw, json) Hash identifier: yt5EEkiHe7wV43zWi99nICm6dcHRc8bslv4Gwb8Hgqg= Subject key identifier: 9C:E4:67:62:FA:85:43:29:A3:61:DC:23:0A:2C:8D:85:8C:63:03:56 Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584A1A41DC61E0D55559AFE5A000 Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa Signing time: Fri 06 Jun 2025 15:24:29 +0000 ROA not before: Fri 06 Jun 2025 15:24:29 +0000 ROA not after: Thu 04 Sep 2025 15:24:29 +0000 asID: 63083 IP address blocks: 172.99.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1a:41:dc:61:e0:d5:55:59:af:e5:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Jun 6 15:24:29 2025 GMT Not After : Sep 4 15:24:29 2025 GMT Subject: CN=91278214-b308-47b3-8b43-cd2818f68a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:43:2c:24:81:80:27:2c:7f:d9:cf:ca:82: 12:03:09:6a:67:0a:4f:f8:bb:6d:1e:df:66:7e:cd: 7b:22:ad:8a:0a:24:f8:d7:e6:b4:e2:58:a8:0f:bb: 19:f8:0a:e9:29:e7:68:a4:7e:54:f7:90:04:36:5d: be:fa:3e:cc:81:00:f0:3a:f2:76:6b:05:3a:4a:f5: 73:b3:b8:41:c3:7c:b1:80:6f:0a:2a:68:15:24:04: 1c:13:d6:85:b9:5c:9b:7d:46:0f:95:9d:94:26:37: dc:b8:b9:bb:da:14:71:7c:a1:55:de:82:34:9e:f6: be:3c:9b:7e:c5:c5:a6:26:29:10:94:96:cd:a9:dd: 56:a2:12:70:67:a2:c9:6b:e0:bd:fa:86:81:91:81: 49:37:ff:aa:dd:c7:ba:58:bf:fc:c6:fe:81:c0:02: 4d:47:fc:50:ea:65:ff:1a:7a:1a:7a:39:29:94:d0: 28:1a:67:96:47:ea:d9:ef:db:79:55:08:8f:4f:a6: e9:3b:ff:f8:e0:53:1e:59:60:65:53:8d:db:6c:8b: c5:ee:80:bc:63:03:10:1a:e6:16:cf:32:07:2c:f3: f0:2d:3e:2d:6e:49:6d:ac:07:65:4e:48:d9:79:3f: aa:45:b5:86:be:6c:22:31:3b:af:54:3b:67:db:2b: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E4:67:62:FA:85:43:29:A3:61:DC:23:0A:2C:8D:85:8C:63:03:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: 172.99.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:01:87:9b:f1:dc:9f:26:29:7a:46:f0:a4:4b:99:4c:7a:47: 70:94:0c:9a:5a:ab:62:f8:44:d0:38:7a:c6:96:9c:34:4d:36: 75:50:a1:8f:5c:05:80:0a:12:25:45:93:18:35:8e:52:58:cc: 10:ee:56:64:15:e6:59:2c:b9:c0:61:2b:8a:70:fd:3e:e0:5b: 7b:a6:65:46:9f:16:a1:cc:a6:57:1c:0d:8a:bb:24:26:55:40: 7a:d9:21:c7:8f:e8:3e:39:cb:15:43:e1:1e:8e:06:6e:da:a9: e3:b3:14:5d:25:9c:0d:d9:83:e0:d2:18:75:99:e9:95:f6:5c: 34:38:0c:d1:aa:0e:eb:34:7e:a8:c6:a9:80:4c:82:4c:30:3b: e0:34:47:e7:d8:02:46:af:c3:53:99:44:4f:7f:c4:58:3a:e3: b1:03:21:19:0e:4a:08:5a:70:bf:16:92:f7:64:5d:60:e8:dd: 97:39:ce:01:81:5a:26:cb:79:1e:8a:64:55:70:2b:be:c3:95: ba:16:92:4a:8b:4e:32:e4:60:8f:22:7e:2a:2a:65:90:b0:6b: 7b:19:b5:6f:03:66:7f:ac:f3:29:53:40:7f:80:79:6d:92:1a: a2:c1:02:91:86:50:c1:f8:a1:5b:cf:22:c9:77:50:df:d1:f2: c2:36:1c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoaQdxh4NVVWa/loAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI1MDYwNjE1MjQyOVoXDTI1MDkwNDE1MjQyOVowLzEtMCsGA1UEAxMk OTEyNzgyMTQtYjMwOC00N2IzLThiNDMtY2QyODE4ZjY4YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJdDLCSBgCcsf9nPyoISAwlqZwpP+LttHt9m fs17Iq2KCiT41+a04lioD7sZ+ArpKedopH5U95AENl2++j7MgQDwOvJ2awU6SvVz s7hBw3yxgG8KKmgVJAQcE9aFuVybfUYPlZ2UJjfcuLm72hRxfKFV3oI0nva+PJt+ xcWmJikQlJbNqd1WohJwZ6LJa+C9+oaBkYFJN/+q3ce6WL/8xv6BwAJNR/xQ6mX/ GnoaejkplNAoGmeWR+rZ79t5VQiPT6bpO//44FMeWWBlU43bbIvF7oC8YwMQGuYW zzIHLPPwLT4tbkltrAdlTkjZeT+qRbWGvmwiMTuvVDtn2yshcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzkZ2L6hUMpo2HcIwosjYWMYwNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvM2FhNzJlZDctZTg4OS0z NWI4LTk0MTYtMTY4ZTJlYWU4OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4Bh5vx3J8mKXpG8KRLmUx6R3CUDJpaq2L4RNA4esaWnDRNNnVQoY9c BYAKEiVFkxg1jlJYzBDuVmQV5lksucBhK4pw/T7gW3umZUafFqHMplccDYq7JCZV QHrZIceP6D45yxVD4R6OBm7aqeOzFF0lnA3Zg+DSGHWZ6ZX2XDQ4DNGqDus0fqjG qYBMgkwwO+A0R+fYAkavw1OZRE9/xFg647EDIRkOSghacL8WkvdkXWDo3Zc5zgGB WibLeR6KZFVwK77DlboWkkqLTjLkYI8ifioqZZCwa3sZtW8DZn+s8ylTQH+AeW2S GqLBApGGUMH4oVvPIsl3UN/R8sI2HLc= -----END CERTIFICATE-----Generated at Thu Jun 19 20:56:04 2025 by rpki-client