$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa File: 4a99249e-6e25-30fa-8e16-0fa2326d6959.roa (raw, json) Hash identifier: sNb+fNzUaUj9/qlwnMxenBms9ws7/qBmc38zz9NFJ58= Subject key identifier: 33:52:F9:12:FE:AD:DC:F6:03:49:00:6C:CD:F1:BD:DB:92:FF:6B:7C Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584A94D0D345BB1C1057A790A880 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 209854 IP address blocks: 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:d3:45:bb:1c:10:57:a7:90:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=be7da335-2052-46d2-939c-b0dcb24d00d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:71:2f:e3:b2:b3:6f:27:41:92:2e:0b:09:bb: 2e:5f:d2:42:90:67:7e:4a:77:f5:e1:18:6f:34:22: 90:77:ed:e7:2a:78:63:a1:e7:1a:c9:93:19:2a:d5: 24:8a:b7:d4:94:0b:76:e7:23:1c:40:59:a6:87:75: ce:44:23:4f:12:2d:c5:0a:68:70:6f:8e:0a:34:c9: ea:a9:2c:18:85:69:cd:17:2a:34:ec:81:0d:0d:0f: dc:09:19:56:e7:86:3c:8c:42:3c:dd:70:38:de:0d: 26:3b:13:da:b6:da:65:dd:9c:15:97:31:55:5a:c7: 1e:17:aa:df:5a:2e:3c:ab:2a:ba:c0:9e:84:64:5d: a3:08:59:e7:f8:4d:87:6b:9b:d9:73:7c:cf:b5:c3: 35:00:49:37:74:e6:da:c8:32:71:65:17:96:96:03: ff:7e:9f:a7:a0:20:0c:ff:57:c1:bb:61:62:b1:c3: 09:2c:1d:91:a5:63:a9:b2:0a:c3:1e:de:c3:39:12: b0:46:0e:c3:03:bb:da:d6:86:ad:b1:6c:f0:c8:f2: 3f:43:ac:19:e8:19:35:71:3b:f6:fe:e6:fe:55:1f: d6:84:a1:3a:23:ce:4e:9c:2b:ce:75:53:13:3a:aa: 4a:c4:de:6d:d4:20:a1:8d:3a:3a:d3:ee:9e:3c:53: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:52:F9:12:FE:AD:DC:F6:03:49:00:6C:CD:F1:BD:DB:92:FF:6B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4a99249e-6e25-30fa-8e16-0fa2326d6959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4f:f2:ab:2b:59:77:27:c3:df:15:71:11:e8:54:0c:ba:76: f4:fd:fb:82:5e:0f:aa:60:c0:b8:6b:ff:a8:39:aa:be:34:4e: 03:bd:36:80:64:74:b9:a5:48:5c:9a:8c:a5:55:d5:4e:c7:5a: 5a:c4:0d:e8:d7:e2:5b:3c:c9:bc:d8:86:d8:ce:84:8d:81:06: 80:c5:71:c7:22:74:bf:51:86:0c:0e:b6:99:c7:89:3b:1f:3a: b2:6e:c0:ae:6f:b9:4d:d6:6f:ab:ff:a0:84:ff:8d:b0:24:d9: a0:ce:ca:bd:30:28:ca:df:db:fb:f2:b4:c0:ce:c3:ac:25:44: 24:e7:eb:42:06:44:8f:af:b3:70:a1:c6:75:6f:b5:f1:7c:14: bd:80:40:c1:94:ee:35:d9:2c:12:cf:4d:20:85:07:de:6a:ea: 19:ae:ad:a3:b2:98:6f:39:f4:53:0a:f4:25:74:81:ee:88:df: 0c:b0:33:05:17:ad:5b:24:6c:f3:3f:55:12:25:88:96:51:41: 56:c9:45:d2:2b:7b:dc:0a:0a:b6:37:54:ae:f3:39:b9:3c:e2: df:b2:cb:8a:8c:21:ce:9e:f9:38:2a:c2:fc:da:47:2e:20:9d: fa:6b:dd:dd:f1:3b:22:e5:df:c2:dd:dc:1b:ba:24:a8:76:de: 25:94:38:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NNFuxwQV6eQqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk YmU3ZGEzMzUtMjA1Mi00NmQyLTkzOWMtYjBkY2IyNGQwMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHEv47KzbydBki4LCbsuX9JCkGd+Snf14Rhv NCKQd+3nKnhjoecayZMZKtUkirfUlAt25yMcQFmmh3XORCNPEi3FCmhwb44KNMnq qSwYhWnNFyo07IENDQ/cCRlW54Y8jEI83XA43g0mOxPattpl3ZwVlzFVWsceF6rf Wi48qyq6wJ6EZF2jCFnn+E2Ha5vZc3zPtcM1AEk3dObayDJxZReWlgP/fp+noCAM /1fBu2FiscMJLB2RpWOpsgrDHt7DORKwRg7DA7va1oatsWzwyPI/Q6wZ6Bk1cTv2 /ub+VR/WhKE6I85OnCvOdVMTOqpKxN5t1CChjTo60+6ePFNCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNS+RL+rdz2A0kAbM3xvduS/2t8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvNGE5OTI0OWUtNmUyNS0z MGZhLThlMTYtMGZhMjMyNmQ2OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZP8qsrWXcnw98VcRHoVAy6dvT9+4JeD6pgwLhr/6g5qr40TgO9NoBk dLmlSFyajKVV1U7HWlrEDejX4ls8ybzYhtjOhI2BBoDFcccidL9RhgwOtpnHiTsf OrJuwK5vuU3Wb6v/oIT/jbAk2aDOyr0wKMrf2/vytMDOw6wlRCTn60IGRI+vs3Ch xnVvtfF8FL2AQMGU7jXZLBLPTSCFB95q6hmuraOymG859FMK9CV0ge6I3wywMwUX rVskbPM/VRIliJZRQVbJRdIre9wKCrY3VK7zObk84t+yy4qMIc6e+TgqwvzaRy4g nfpr3d3xOyLl38Ld3Bu6JKh23iWUOAA= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:59 2025 by rpki-client