$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa File: d6fed470-07a0-3210-99f9-cb0d4504744a.roa (raw, json) Hash identifier: uenlfm6cARvgO6WBS3N1SzRhTDG0diambGTOeP11BwU= Subject key identifier: EE:33:B7:83:9D:D5:A4:F8:3F:A7:EE:61:DE:E7:1A:16:0C:91:48:4E Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584B21CC2D113235309746D51BE0 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 40676 IP address blocks: 172.84.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2d:11:32:35:30:97:46:d5:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=3221719c-dbc8-4346-83bb-ebe9786583d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:0b:87:96:b8:f6:5c:64:ff:7d:e5:17:7d: 1a:db:57:30:64:d7:d8:b2:2f:3d:40:b2:11:c3:cd: fc:52:63:db:30:87:3e:c1:ef:6d:37:51:21:58:3b: 5c:6e:9b:a4:42:b1:e0:f0:74:42:af:b7:94:28:9a: 0a:72:ff:98:7c:78:74:ff:99:8a:a0:04:51:e9:48: 40:4d:a2:6e:b7:89:fa:42:8b:de:cb:02:5c:83:a7: f8:dd:3b:ee:93:8e:a7:f2:c5:b4:62:ed:06:d7:02: 91:64:82:77:e3:84:be:b7:3e:a0:26:4a:65:98:b4: 76:ad:c6:9b:df:2f:fb:b7:2b:e0:f0:d3:1e:03:e0: 81:9f:38:15:79:e4:0f:1a:39:24:89:65:b1:53:ea: 04:ce:66:6d:76:d8:d1:93:3f:02:fc:ec:f5:91:64: fa:cf:4b:d5:1b:ed:4f:ae:c9:95:46:6d:19:9f:1a: 17:00:0d:47:b1:07:21:69:e9:52:2d:7b:00:c7:08: 32:ec:f8:f8:8f:65:24:25:07:84:0f:c5:b3:7a:35: 9a:4c:06:d3:49:be:3d:82:12:d4:dd:04:fd:73:69: 5b:ca:33:75:57:eb:65:a0:de:cd:a6:8f:6a:52:a9: ec:42:ec:5f:92:a3:6f:fd:24:18:95:93:2d:f2:ae: 46:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:33:B7:83:9D:D5:A4:F8:3F:A7:EE:61:DE:E7:1A:16:0C:91:48:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e7:aa:20:93:85:37:a5:6d:14:d6:ad:bc:3a:84:0e:a6:04: e8:30:1a:83:62:ca:00:3a:c4:1f:f7:72:9a:e5:aa:b2:4f:42: 49:85:f2:33:23:53:b3:15:31:7e:c3:44:0c:2d:c9:e5:94:55: 98:78:d1:39:e7:cf:df:78:30:46:02:a9:f1:77:5c:dd:3b:84: 65:85:f0:37:f9:65:b6:d4:b2:61:7a:34:81:f5:c8:1c:3f:d7: 54:74:8e:01:c1:38:3d:ec:f1:fe:fe:c6:d0:4e:bd:0e:96:a1: 06:af:5a:56:fd:bc:84:38:26:67:60:43:20:97:b6:55:16:7b: 5a:c0:58:91:14:a1:f1:be:3f:f6:39:85:47:fc:24:88:4e:bc: e4:31:d2:eb:af:bd:54:a6:f5:4e:16:57:0d:07:a7:23:95:d6: 2c:44:f3:58:98:d0:e4:0e:2f:05:e5:7b:0f:6e:db:ac:ee:69: a5:dd:8e:d7:88:d6:7d:4d:99:c8:cb:c5:a6:9e:b0:1b:a8:ca: b8:1c:a8:b0:38:86:db:f4:e0:58:c4:ba:6c:ce:b8:fe:7f:47: f0:5a:9b:66:02:1f:37:fb:25:50:bd:f7:51:4d:04:a9:f0:2a: 77:88:1a:02:cf:2c:33:ce:b3:35:cc:cd:20:dc:08:d9:10:b6: 30:e5:e9:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzC0RMjUwl0bVG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MzIyMTcxOWMtZGJjOC00MzQ2LTgzYmItZWJlOTc4NjU4M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjoLh5a49lxk/33lF30a21cwZNfYsi89QLIR w838UmPbMIc+we9tN1EhWDtcbpukQrHg8HRCr7eUKJoKcv+YfHh0/5mKoARR6UhA TaJut4n6QoveywJcg6f43Tvuk46n8sW0Yu0G1wKRZIJ344S+tz6gJkplmLR2rcab 3y/7tyvg8NMeA+CBnzgVeeQPGjkkiWWxU+oEzmZtdtjRkz8C/Oz1kWT6z0vVG+1P rsmVRm0ZnxoXAA1HsQchaelSLXsAxwgy7Pj4j2UkJQeED8WzejWaTAbTSb49ghLU 3QT9c2lbyjN1V+tloN7Npo9qUqnsQuxfkqNv/SQYlZMt8q5GGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4zt4Od1aT4P6fuYd7nGhYMkUhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvZDZmZWQ0NzAtMDdhMC0z MjEwLTk5ZjktY2IwZDQ1MDQ3NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnnqiCThTelbRTWrbw6hA6mBOgwGoNiygA6xB/3cprlqrJPQkmF8jMj U7MVMX7DRAwtyeWUVZh40Tnnz994MEYCqfF3XN07hGWF8Df5ZbbUsmF6NIH1yBw/ 11R0jgHBOD3s8f7+xtBOvQ6WoQavWlb9vIQ4JmdgQyCXtlUWe1rAWJEUofG+P/Y5 hUf8JIhOvOQx0uuvvVSm9U4WVw0HpyOV1ixE81iY0OQOLwXlew9u26zuaaXdjteI 1n1NmcjLxaaesBuoyrgcqLA4htv04FjEumzOuP5/R/Bam2YCHzf7JVC991FNBKnw KneIGgLPLDPOszXMzSDcCNkQtjDl6Xw= -----END CERTIFICATE-----Generated at Wed Sep 17 17:36:54 2025 by rpki-client