$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa File: 8833246e-b4d3-3227-9a27-5ac70001ee6c.roa (raw, json) Hash identifier: 6DTXN3QOszG0DyCHZwk5QbXm7Jxnh8HPD9Lo5dBkhI4= Subject key identifier: 15:E4:73:A6:DE:A4:21:60:1B:C3:39:CA:CE:CB:AF:72:E1:25:6B:6A Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584A84117DECCBCF8245AB13EA20 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 172.102.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:7d:ec:cb:cf:82:45:ab:13:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=532267d6-9b30-4c1a-8fcb-49325b7563f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8e:44:1b:aa:be:96:08:dc:7e:d0:8e:fa:cf: 02:c6:3e:24:d0:e9:e8:97:41:70:c2:5b:08:08:81: 5a:62:08:3d:d9:29:d0:fc:4c:5a:a9:45:3c:18:30: 42:97:36:ee:8a:80:9d:83:42:2c:a0:09:cc:e1:3d: 65:3e:c9:77:1e:7c:62:9b:0e:69:2a:47:49:2c:24: c7:98:21:e1:8a:94:91:29:fe:11:11:23:45:18:8a: 02:19:60:81:52:b1:ee:c7:e6:01:00:63:0c:4c:83: bf:98:95:3e:e0:36:29:ca:bd:ff:8d:cd:db:cf:fa: e2:7b:00:4f:11:7e:8d:5a:f6:26:33:d7:dc:6d:03: d9:52:f2:e1:bd:95:63:47:74:27:a0:d0:e1:ef:39: 37:ff:a3:9e:e7:bd:56:4e:b0:10:55:ab:27:d5:39: ae:dc:fb:76:36:42:58:f3:05:df:7d:89:62:ac:4d: d9:86:9f:c4:d4:9a:ca:d7:c4:01:05:f4:6a:75:bb: 05:ed:6e:81:b4:6e:51:13:9a:20:49:b2:4a:9a:4e: b9:b9:aa:95:c8:08:45:b4:9a:29:c0:35:7b:6c:75: 77:9e:85:7b:9c:32:0d:f3:d3:08:a3:3d:7c:be:33: 12:33:bd:e5:f7:8e:18:a6:8d:e1:49:3a:7c:5a:ab: 04:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E4:73:A6:DE:A4:21:60:1B:C3:39:CA:CE:CB:AF:72:E1:25:6B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a6:46:fe:53:0b:f3:3d:c5:60:2f:3c:8e:b4:d1:07:9c:a7: 87:67:26:f2:0d:34:12:db:ab:4b:c7:63:1d:96:0c:7d:42:80: 49:73:01:e6:5b:3f:e4:8e:d0:73:40:01:2c:64:48:2a:73:e7: 22:99:0a:72:f4:eb:c7:1f:9b:9f:db:3e:82:1c:02:62:8b:dc: 03:23:cc:81:1b:46:6c:4c:8f:d5:bd:92:9e:a9:32:4b:cc:9b: af:a6:cb:ea:d3:9f:f6:c0:db:88:99:f9:93:87:a5:4e:7c:21: 8f:02:7b:3c:fa:8d:5b:e7:83:fd:04:7a:09:1a:f3:52:a2:e4: 89:74:82:5d:11:f2:4e:42:fc:ae:35:55:20:6b:eb:bf:d5:b7: ee:08:4b:05:2b:8b:15:66:c9:5c:0d:0a:e1:0d:89:e4:7d:52: b6:35:b7:5c:11:6e:b1:1a:0a:bb:52:8d:66:73:08:b3:f2:6a: 66:c7:88:e0:35:fb:11:11:ac:d5:3f:8f:dd:7b:49:bf:41:60: d0:d3:11:b7:b2:03:3b:4f:eb:cb:06:0b:a0:96:3f:da:bc:ea: 89:06:53:4b:b1:4d:e2:09:41:4e:26:f7:b4:8d:05:31:11:6e: 83:57:a6:c9:c1:65:b8:d9:3d:62:67:51:a5:a1:66:72:91:9f: 8a:46:a9:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEX3sy8+CRasT6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTMyMjY3ZDYtOWIzMC00YzFhLThmY2ItNDkzMjViNzU2M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I5EG6q+lgjcftCO+s8Cxj4k0Onol0FwwlsI CIFaYgg92SnQ/ExaqUU8GDBClzbuioCdg0IsoAnM4T1lPsl3Hnximw5pKkdJLCTH mCHhipSRKf4RESNFGIoCGWCBUrHux+YBAGMMTIO/mJU+4DYpyr3/jc3bz/riewBP EX6NWvYmM9fcbQPZUvLhvZVjR3QnoNDh7zk3/6Oe571WTrAQVasn1Tmu3Pt2NkJY 8wXffYlirE3Zhp/E1JrK18QBBfRqdbsF7W6BtG5RE5ogSbJKmk65uaqVyAhFtJop wDV7bHV3noV7nDIN89MIoz18vjMSM73l944Ypo3hSTp8WqsEzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXkc6bepCFgG8M5ys7Lr3LhJWtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvODgzMzI0NmUtYjRkMy0z MjI3LTlhMjctNWFjNzAwMDFlZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGYNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGumRv5TC/M9xWAvPI600Qecp4dnJvINNBLbq0vHYx2WDH1CgElzAeZb P+SO0HNAASxkSCpz5yKZCnL068cfm5/bPoIcAmKL3AMjzIEbRmxMj9W9kp6pMkvM m6+my+rTn/bA24iZ+ZOHpU58IY8Cezz6jVvng/0Eegka81Ki5Il0gl0R8k5C/K41 VSBr67/Vt+4ISwUrixVmyVwNCuENieR9UrY1t1wRbrEaCrtSjWZzCLPyambHiOA1 +xERrNU/j917Sb9BYNDTEbeyAztP68sGC6CWP9q86okGU0uxTeIJQU4m97SNBTER boNXpsnBZbjZPWJnUaWhZnKRn4pGqYM= -----END CERTIFICATE-----Generated at Sat Jul 26 07:24:12 2025 by rpki-client