$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa File: 0d4e5656-afae-30a6-9a06-129f4ade41da.roa (raw, json) Hash identifier: zO4htmT/MFmp1tmWr3MY8qHTUCinhE0POibaKR4y7PM= Subject key identifier: 0B:04:A3:D2:59:96:22:C6:EB:6F:53:4C:C0:C5:01:25:48:65:3C:B7 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584A88409BA145C3DA0D6EAA9300 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 11325 IP address blocks: 172.102.196.0/24 maxlen: 24 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9b:a1:45:c3:da:0d:6e:aa:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=8471f595-64f3-4751-8f34-ae935a8e3de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:8f:cd:ff:4d:44:a4:34:4b:ee:79:82:53: 9d:e0:fc:56:ed:cd:06:71:b3:8b:a9:e6:9f:a8:bc: dc:ba:69:06:2b:88:59:fd:7d:1b:d1:5b:39:c1:56: 43:b7:5d:c5:5d:9f:54:19:5f:68:24:8b:7b:17:3f: 24:f9:6b:9c:58:00:6f:69:4f:48:ac:a0:91:16:0f: 8f:a7:50:84:9b:3b:f3:93:e7:a0:1f:48:24:be:83: 08:f8:51:aa:f8:a7:70:09:60:e1:09:e0:0b:7c:3a: 8a:37:fb:f1:3d:fe:db:26:6a:7f:25:06:3b:64:99: 0e:95:31:fe:d1:6a:92:17:7d:a0:cc:59:68:fe:25: bb:cd:37:32:62:fa:6e:00:0f:50:60:30:6e:79:17: fa:2d:31:e1:d7:28:16:eb:19:a4:d0:a1:48:33:67: 4d:86:d4:a9:b6:1d:3e:a2:16:c0:1a:3d:48:17:1e: 94:95:38:58:c7:a3:3c:12:ab:2d:b9:f1:9c:92:17: d5:e5:32:a2:e2:21:a5:db:e5:b1:9a:d7:6e:e8:16: d4:f6:0d:df:fc:33:72:7f:07:74:5e:7f:57:b6:9d: 1e:8f:7b:ab:26:3c:e6:25:11:af:b4:9e:4a:a2:0b: 09:19:fd:98:50:a7:fa:b3:a9:11:a2:50:d8:e5:24: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:04:A3:D2:59:96:22:C6:EB:6F:53:4C:C0:C5:01:25:48:65:3C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.196.0/24 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ba:42:8e:24:03:6b:99:16:1c:ac:15:ea:99:34:9d:ef:2b: d9:c5:28:1c:89:e9:ef:70:7a:ae:c5:f8:95:5c:92:23:c7:07: 8e:5a:63:46:3e:6e:24:58:c4:9a:3d:db:e3:d2:45:81:9e:54: 07:39:cc:30:51:9c:e8:c8:40:23:1e:b8:79:b0:a0:71:d7:24: 82:90:34:a2:82:8f:fa:dd:84:37:4f:a3:7e:e2:b1:ec:c7:48: 80:41:4a:3b:94:87:0c:75:1a:e8:8b:62:81:8f:de:99:64:43: 54:92:c5:d5:ef:99:34:c3:3e:93:62:5f:f3:7e:4d:a3:5f:47: b6:f2:be:22:ff:bc:56:9c:a7:91:3d:31:79:c5:fb:b2:51:36: 9a:ce:11:08:0e:27:67:26:6a:ab:6c:3c:70:43:cb:6d:e8:c3: 2a:07:1b:03:1e:b2:2e:82:55:1f:49:7c:5e:12:a8:bf:de:a5: 91:24:d5:6a:b2:60:70:d4:8f:68:b0:18:6d:eb:55:50:f9:d5: 4c:e5:1b:e7:9d:4a:1e:5b:36:dd:4b:ca:d5:81:f3:e3:c5:f6: 7f:12:f9:7b:97:20:08:58:4c:ec:a3:60:30:6c:b2:9a:b1:51: b5:e4:04:30:b3:e0:2a:54:92:e9:5a:36:2e:c8:8b:ef:55:3d: 6c:a1:8a:b7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqIQJuhRcPaDW6qkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ODQ3MWY1OTUtNjRmMy00NzUxLThmMzQtYWU5MzVhOGUzZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTGPzf9NRKQ0S+55glOd4PxW7c0GcbOLqeaf qLzcumkGK4hZ/X0b0Vs5wVZDt13FXZ9UGV9oJIt7Fz8k+WucWABvaU9IrKCRFg+P p1CEmzvzk+egH0gkvoMI+FGq+KdwCWDhCeALfDqKN/vxPf7bJmp/JQY7ZJkOlTH+ 0WqSF32gzFlo/iW7zTcyYvpuAA9QYDBueRf6LTHh1ygW6xmk0KFIM2dNhtSpth0+ ohbAGj1IFx6UlThYx6M8EqstufGckhfV5TKi4iGl2+Wxmtdu6BbU9g3f/DNyfwd0 Xn9Xtp0ej3urJjzmJRGvtJ5KogsJGf2YUKf6s6kRolDY5STlWwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAsEo9JZliLG629TTMDFASVIZTy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMGQ0ZTU2NTYtYWZhZS0z MGE2LTlhMDYtMTI5ZjRhZGU0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbEAwQA rGbUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIS6Qo4kA2uZFhysFeqZNJ3vK9nFKByJ6e9weq7F+JVckiPH B45aY0Y+biRYxJo92+PSRYGeVAc5zDBRnOjIQCMeuHmwoHHXJIKQNKKCj/rdhDdP o37isezHSIBBSjuUhwx1GuiLYoGP3plkQ1SSxdXvmTTDPpNiX/N+TaNfR7byviL/ vFacp5E9MXnF+7JRNprOEQgOJ2cmaqtsPHBDy23owyoHGwMesi6CVR9JfF4SqL/e pZEk1WqyYHDUj2iwGG3rVVD51UzlG+edSh5bNt1LytWB8+PF9n8S+XuXIAhYTOyj YDBsspqxUbXkBDCz4CpUkulaNi7Ii+9VPWyhirc= -----END CERTIFICATE-----Generated at Tue Jul 29 07:40:18 2025 by rpki-client