$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa File: af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa (raw, json) Hash identifier: G62Sm7LIIy5ZipKM8OGf5BTKewghFEZLNLOLWmxSVjk= Subject key identifier: 82:7D:B7:FA:B4:E7:17:EB:67:3A:E6:E6:B7:EB:56:4B:AC:6E:8F:66 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584A84122BB8AD658A2E68CEB900 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 172.102.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:2b:b8:ad:65:8a:2e:68:ce:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=807388f8-d20b-4ab1-9f04-ccf044a66d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:ed:c8:0c:11:93:db:63:92:02:95:12:ea: a2:52:ff:ff:59:94:ed:f5:28:6c:58:2c:00:98:04: e5:f6:50:99:3b:3b:7d:b4:f0:7c:63:19:48:d0:a7: 5a:f9:60:06:7e:d7:30:53:bb:8b:b1:6b:3a:f9:e2: 0e:1c:c2:e1:06:13:c9:0a:3d:57:81:e8:47:fe:d8: 76:b0:b0:87:69:21:6f:b2:74:40:1b:ee:30:f8:aa: 01:e5:d8:66:d7:74:01:29:c6:9c:88:5f:65:d0:fd: 89:66:dc:f1:47:ec:4b:34:e8:b6:4c:d1:a9:16:fa: d1:ca:6f:c7:67:9a:00:3a:9c:6f:a4:ed:b5:aa:44: 16:c8:54:3f:49:80:45:4b:ad:9b:9d:1c:ef:80:33: e2:b0:39:6c:b5:81:38:17:5e:b7:f6:11:34:20:8f: a3:32:1a:18:8f:6f:9b:5c:cb:5c:29:97:ef:55:db: 63:75:b3:08:29:7a:7f:9b:5d:8a:a1:cf:73:90:ef: 55:77:27:e0:45:4f:7f:98:cf:ea:9c:0e:41:d9:dc: 4f:52:88:17:42:d0:44:20:0d:84:6a:de:93:5d:38: cf:da:b8:8f:4b:be:a5:14:1a:c7:73:44:1c:e5:ef: e8:20:31:a1:a2:62:bc:6b:fa:b4:53:e3:a2:d7:0b: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7D:B7:FA:B4:E7:17:EB:67:3A:E6:E6:B7:EB:56:4B:AC:6E:8F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/af1e45bb-3d5f-3a3b-8818-884ece6c1541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:70:49:70:e9:93:d1:ba:d0:87:9a:47:49:1f:95:b3:4f:45: 11:ff:f7:f4:64:31:3d:fa:33:43:1c:ac:f1:d8:7d:55:5b:ee: df:fd:c1:82:b6:bb:78:38:5b:a5:91:c3:03:74:8c:5c:4c:5c: 17:0a:cf:4c:f7:04:81:59:f3:b2:9e:d3:dd:7a:5d:ad:26:71: 01:d7:58:7f:31:a7:3a:fe:bf:1a:77:99:7a:39:50:52:b2:b5: 83:16:b9:ca:9f:23:0c:db:c0:f9:e6:02:96:2e:00:76:d7:21: 69:cd:8f:a4:bb:1c:a1:bf:ac:00:72:15:e2:f9:68:25:5d:c7: 76:ab:4c:97:9d:67:36:0d:96:de:b8:d1:5b:a0:ec:85:16:9c: 7e:4b:56:13:94:12:ee:e8:2a:ac:3f:f0:44:d0:ba:ce:60:31: 54:dd:17:ed:b7:1b:b4:09:e8:c3:75:3b:bf:08:59:da:40:99: 17:6f:a5:c5:2e:86:89:d6:a0:cd:63:a7:cf:be:06:c7:67:32: 57:ae:9d:f8:05:41:88:d5:84:4f:ce:14:8d:08:f6:37:3b:60: 3e:85:b9:c9:d8:2b:25:c4:90:ff:09:b6:b8:59:8b:eb:b4:ec: 4f:79:36:39:6d:f4:2a:1f:03:4e:3d:34:42:03:5e:b7:a1:0f: 64:00:68:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiu4rWWKLmjOuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODA3Mzg4ZjgtZDIwYi00YWIxLTlmMDQtY2NmMDQ0YTY2ZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4vtyAwRk9tjkgKVEuqiUv//WZTt9ShsWCwA mATl9lCZOzt9tPB8YxlI0Kda+WAGftcwU7uLsWs6+eIOHMLhBhPJCj1XgehH/th2 sLCHaSFvsnRAG+4w+KoB5dhm13QBKcaciF9l0P2JZtzxR+xLNOi2TNGpFvrRym/H Z5oAOpxvpO21qkQWyFQ/SYBFS62bnRzvgDPisDlstYE4F1639hE0II+jMhoYj2+b XMtcKZfvVdtjdbMIKXp/m12Koc9zkO9VdyfgRU9/mM/qnA5B2dxPUogXQtBEIA2E at6TXTjP2riPS76lFBrHc0Qc5e/oIDGhomK8a/q0U+Oi1wtxEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJ9t/q05xfrZzrm5rfrVkusbo9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvYWYxZTQ1YmItM2Q1Zi0z YTNiLTg4MTgtODg0ZWNlNmMxNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGYJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItwSXDpk9G60IeaR0kflbNPRRH/9/RkMT36M0McrPHYfVVb7t/9wYK2 u3g4W6WRwwN0jFxMXBcKz0z3BIFZ87Ke0916Xa0mcQHXWH8xpzr+vxp3mXo5UFKy tYMWucqfIwzbwPnmApYuAHbXIWnNj6S7HKG/rAByFeL5aCVdx3arTJedZzYNlt64 0Vug7IUWnH5LVhOUEu7oKqw/8ETQus5gMVTdF+23G7QJ6MN1O78IWdpAmRdvpcUu honWoM1jp8++BsdnMleunfgFQYjVhE/OFI0I9jc7YD6FucnYKyXEkP8JtrhZi+u0 7E95Njlt9CofA049NEIDXrehD2QAaB4= -----END CERTIFICATE-----Generated at Sat Jul 26 07:22:35 2025 by rpki-client