$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/f62c8e4d-8d24-33db-9af0-30f48e927f54.roa File: f62c8e4d-8d24-33db-9af0-30f48e927f54.roa (raw, json) Hash identifier: AS5DzGRpV/BNS3N03Ydt8PfgHP27V1Zfg+xAJoencA4= Subject key identifier: 8E:DA:67:4D:F0:95:13:71:C0:92:C5:6C:D2:8A:F5:C5:9E:B3:0C:1E Certificate issuer: /CN=786ab4fb-a46d-40d6-8281-3c79061676da Certificate serial: 010D0C9F4328584A374ACD6C97E0B6D6E96651A0 Authority key identifier: A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/f62c8e4d-8d24-33db-9af0-30f48e927f54.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 30263 IP address blocks: 69.36.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cd:6c:97:e0:b6:d6:e9:66:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786ab4fb-a46d-40d6-8281-3c79061676da Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=1c99e995-51e0-41c1-a24f-b37727aa9618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:52:ce:37:e2:ed:a8:05:b1:2e:74:6b:c7: a2:26:d6:71:75:4d:2f:d9:39:98:a4:07:2c:88:9b: 0a:bc:6b:6e:76:c2:35:3d:8a:27:55:aa:a5:e7:cc: 1c:e7:c2:e0:97:62:71:0d:0e:ec:6c:5b:c0:40:d1: d4:c9:77:1c:4c:eb:10:3b:bb:45:16:12:c4:05:09: 2f:f9:aa:91:3d:e8:5f:43:96:28:68:40:06:80:90: 17:f6:ff:97:99:db:8c:57:54:9a:0e:c3:f6:78:72: 38:17:59:cd:be:a2:8f:7c:30:03:d8:3c:98:aa:ef: 08:0d:28:ca:5a:68:f5:09:11:6b:ac:37:6e:55:93: 34:e7:48:a0:3c:dc:77:0e:55:bd:12:3a:20:1f:54: 91:55:ff:13:15:3b:66:0a:ba:a6:92:40:c5:59:91: ba:81:d9:d1:d2:a2:58:58:0a:a4:1a:43:0f:39:f2: 1e:3a:a1:a4:03:b3:8c:c8:65:25:69:92:c1:7c:b2: d2:8c:10:ca:71:c0:5a:e7:2c:c7:0e:00:5a:ca:b2: fa:55:fc:ee:45:40:f9:d5:46:0b:4c:85:b6:ea:29: a9:20:64:5e:0c:6d:13:ee:21:72:88:fd:a2:eb:2d: eb:0b:6b:18:eb:3a:20:f8:ec:7f:71:5a:06:71:4b: 01:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:67:4D:F0:95:13:71:C0:92:C5:6C:D2:8A:F5:C5:9E:B3:0C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/f62c8e4d-8d24-33db-9af0-30f48e927f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl X509v3 Authority Key Identifier: keyid:A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer sbgp-ipAddrBlock: critical IPv4: 69.36.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:71:ae:a1:4c:60:99:f3:1b:89:39:21:af:81:4f:3c:ad:54: fe:a6:24:6a:c2:3f:bb:9b:e8:b3:03:8f:58:be:6e:69:c7:10: c2:21:58:4c:da:b5:7f:1c:26:f5:20:09:7a:13:4d:aa:ea:d7: d9:c5:7e:83:7a:a2:54:9f:e7:86:84:4f:d5:c2:0c:cc:1f:4a: 7f:4f:9b:3e:75:77:c3:ab:84:2c:35:1e:6c:06:af:28:d2:35: f2:6f:12:c2:89:27:19:e4:83:76:40:36:67:39:f6:5f:fa:b4: 66:96:3d:a4:f9:46:43:b3:e4:33:d1:f8:25:63:e1:fd:d6:b3: 98:42:2b:90:f7:dc:04:98:f4:22:d1:b4:b3:88:0e:72:03:2a: ff:42:d6:75:52:eb:ff:15:2a:ce:26:a9:9e:bf:3d:29:60:81: dc:b4:cd:a5:65:67:9d:e9:42:71:48:e7:23:b2:f1:4c:f9:29: 69:07:0d:62:30:b1:c5:b4:26:da:4a:88:e3:50:0a:c7:e3:4e: c7:b7:4b:cf:69:43:e5:59:94:23:49:d4:f3:45:41:92:24:23: 9a:76:5d:e7:af:be:21:13:77:0f:ec:04:1b:0c:50:53:f3:e0: 93:be:1b:83:f1:78:9f:2f:1a:7d:1d:41:bf:93:de:45:f8:67: 21:38:90:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss1sl+C21ulmUaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg2YWI0ZmItYTQ2ZC00MGQ2LTgyODEtM2M3OTA2MTY3 NmRhMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MWM5OWU5OTUtNTFlMC00MWMxLWEyNGYtYjM3NzI3YWE5NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohBSzjfi7agFsS50a8eiJtZxdU0v2TmYpAcs iJsKvGtudsI1PYonVaql58wc58Lgl2JxDQ7sbFvAQNHUyXccTOsQO7tFFhLEBQkv +aqRPehfQ5YoaEAGgJAX9v+XmduMV1SaDsP2eHI4F1nNvqKPfDAD2DyYqu8IDSjK Wmj1CRFrrDduVZM050igPNx3DlW9EjogH1SRVf8TFTtmCrqmkkDFWZG6gdnR0qJY WAqkGkMPOfIeOqGkA7OMyGUlaZLBfLLSjBDKccBa5yzHDgBayrL6VfzuRUD51UYL TIW26impIGReDG0T7iFyiP2i6y3rC2sY6zog+Ox/cVoGcUsBtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7aZ03wlRNxwJLFbNKK9cWeswweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ODZh YjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5MDYxNjc2ZGEvZjYyYzhlNGQtOGQyNC0z M2RiLTlhZjAtMzBmNDhlOTI3ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzg2YWI0ZmItYTQ2ZC00MGQ2LTgy ODEtM2M3OTA2MTY3NmRhLzc4NmFiNGZiLWE0NmQtNDBkNi04MjgxLTNjNzkwNjE2 NzZkYS5jcmwwHwYDVR0jBBgwFoAUpym4Sy5G2Sq7BGjUOx0Yofi46tYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ODZhYjRmYi1hNDZkLTQwZDYtODI4MS0zYzc5 MDYxNjc2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJxrqFMYJnzG4k5Ia+BTzytVP6mJGrCP7ub6LMDj1i+bmnHEMIhWEza tX8cJvUgCXoTTarq19nFfoN6olSf54aET9XCDMwfSn9Pmz51d8OrhCw1HmwGryjS NfJvEsKJJxnkg3ZANmc59l/6tGaWPaT5RkOz5DPR+CVj4f3Ws5hCK5D33ASY9CLR tLOIDnIDKv9C1nVS6/8VKs4mqZ6/PSlggdy0zaVlZ53pQnFI5yOy8Uz5KWkHDWIw scW0JtpKiONQCsfjTse3S89pQ+VZlCNJ1PNFQZIkI5p2XeevviETdw/sBBsMUFPz 4JO+G4PxeJ8vGn0dQb+T3kX4ZyE4kEs= -----END CERTIFICATE-----Generated at Tue Jul 1 09:03:40 2025 by rpki-client