$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa File: d6fed470-07a0-3210-99f9-cb0d4504744a.roa (raw, json) Hash identifier: 9C7Ru6zNDSyv19vgjZr9SYDWsJI9zrbmvZxyLx6NheM= Subject key identifier: 21:F8:37:15:38:6A:6A:4A:DD:61:92:F3:D5:7C:B5:E3:53:AC:3B:28 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584A41105E13CC6176199B246170 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 40676 IP address blocks: 172.84.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:5e:13:cc:61:76:19:9b:24:61:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=3eb539a9-2811-44bc-9bfe-3013d606682f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:e5:f6:dc:d6:41:67:c6:27:39:72:cd:86: 7c:ef:13:2c:4e:e2:cf:f0:aa:dc:ee:dd:67:c2:13: cf:04:1c:cd:b2:f3:0e:53:2a:9c:1e:bc:ba:b7:d8: c9:ac:91:f8:58:b2:23:d4:54:25:ac:b5:c6:3a:3f: 7e:8f:17:30:42:66:53:3a:9d:c8:5d:1e:bb:1d:02: 43:1d:d4:0d:b9:d5:1d:29:05:a7:c0:fb:85:03:01: 47:e1:9f:4b:c9:60:90:33:c6:a5:47:b9:b4:aa:bc: 13:bf:05:62:6a:93:60:05:3c:bb:67:72:63:97:cd: ee:f1:33:82:d0:91:97:28:02:94:e9:eb:8f:bf:64: 86:2a:e1:67:e7:e0:aa:c1:0e:25:d9:71:e5:11:8d: cc:a5:03:de:94:d3:21:b8:c3:bf:4d:72:c3:e1:de: 62:52:64:2a:9c:d9:7d:e1:a0:ab:6a:3d:6b:63:8c: 04:cb:16:59:0b:02:d7:06:34:6e:80:08:23:40:f8: 53:9b:d4:ce:cc:80:bb:32:90:02:81:4e:d9:2e:f5: 57:79:63:54:07:5d:9f:3b:3e:2e:98:fe:0a:d4:75: 32:ff:5a:5c:d1:ab:b9:6e:31:b2:98:0e:81:91:42: 72:f2:59:6a:ce:4a:43:5a:7a:9a:c3:3d:a5:2d:c9: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F8:37:15:38:6A:6A:4A:DD:61:92:F3:D5:7C:B5:E3:53:AC:3B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ea:b7:9f:af:fa:d1:4e:d6:e5:5b:0c:f2:b3:2b:2d:78:8d: 00:cb:49:52:c0:41:03:99:cd:94:0b:42:73:bf:ea:7d:93:b8: 08:e8:c3:06:7e:da:53:ba:1d:11:64:53:18:63:ad:34:ff:cf: b5:b8:aa:8a:cc:f0:fc:31:5c:15:96:8a:87:95:00:84:a6:61: e0:c2:ea:60:e5:83:2c:de:49:c7:38:f8:ae:17:40:7d:6f:cf: 98:2e:d9:8a:3d:2e:f5:7d:eb:5a:79:d2:3d:32:90:a8:f7:9b: 38:b8:6f:09:02:bd:a5:4e:85:64:5e:4f:1b:16:c2:81:63:57: 42:a1:a5:8d:37:80:d6:84:27:ed:08:d1:ae:3e:c5:69:5c:fa: 24:05:57:fb:45:40:bb:5f:57:ec:4c:08:b8:1e:14:a0:2a:f2: 08:8b:d8:5f:9d:e3:a7:f2:d0:d1:23:a1:83:8e:74:aa:29:1d: 9c:22:84:c4:e8:32:e2:4b:53:b6:1d:7d:5c:f9:8f:74:2d:b8: 8d:92:16:c3:05:46:e9:ac:aa:7a:56:00:a7:77:72:21:05:9f: 83:04:e5:08:0a:3c:84:6b:a5:84:0c:12:35:59:ba:ac:bf:88: 7b:ac:01:01:f3:45:80:2f:16:36:c5:69:80:f0:a0:fc:49:e4: 46:6c:4c:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEF4TzGF2GZskYXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk M2ViNTM5YTktMjgxMS00NGJjLTliZmUtMzAxM2Q2MDY2ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVXl9tzWQWfGJzlyzYZ87xMsTuLP8Krc7t1n whPPBBzNsvMOUyqcHry6t9jJrJH4WLIj1FQlrLXGOj9+jxcwQmZTOp3IXR67HQJD HdQNudUdKQWnwPuFAwFH4Z9LyWCQM8alR7m0qrwTvwViapNgBTy7Z3Jjl83u8TOC 0JGXKAKU6euPv2SGKuFn5+CqwQ4l2XHlEY3MpQPelNMhuMO/TXLD4d5iUmQqnNl9 4aCraj1rY4wEyxZZCwLXBjRugAgjQPhTm9TOzIC7MpACgU7ZLvVXeWNUB12fOz4u mP4K1HUy/1pc0au5bjGymA6BkUJy8llqzkpDWnqawz2lLcm1NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH4NxU4ampK3WGS89V8teNTrDsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvZDZmZWQ0NzAtMDdhMC0z MjEwLTk5ZjktY2IwZDQ1MDQ3NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvqt5+v+tFO1uVbDPKzKy14jQDLSVLAQQOZzZQLQnO/6n2TuAjowwZ+ 2lO6HRFkUxhjrTT/z7W4qorM8PwxXBWWioeVAISmYeDC6mDlgyzeScc4+K4XQH1v z5gu2Yo9LvV961p50j0ykKj3mzi4bwkCvaVOhWReTxsWwoFjV0KhpY03gNaEJ+0I 0a4+xWlc+iQFV/tFQLtfV+xMCLgeFKAq8giL2F+d46fy0NEjoYOOdKopHZwihMTo MuJLU7YdfVz5j3QtuI2SFsMFRumsqnpWAKd3ciEFn4ME5QgKPIRrpYQMEjVZuqy/ iHusAQHzRYAvFjbFaYDwoPxJ5EZsTKI= -----END CERTIFICATE-----Generated at Fri Jul 25 18:19:49 2025 by rpki-client