$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/c4946efd-1521-3de8-b345-a5a5a880c146.roa File: c4946efd-1521-3de8-b345-a5a5a880c146.roa (raw, json) Hash identifier: NWOQiYz4lr6zaSjF/l954TlrhGWo/2tA/zcT20aJpTQ= Subject key identifier: D6:C5:D1:E2:CB:2B:81:F3:08:F1:1C:E8:9A:24:09:71:87:65:FE:21 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F43285849D594DE52AEBF67737AFA1B40 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/c4946efd-1521-3de8-b345-a5a5a880c146.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 20278 IP address blocks: 172.93.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:de:52:ae:bf:67:73:7a:fa:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=f5c09971-441b-4661-a8e5-0575e9ecfe75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:30:80:cd:ae:12:94:b4:d2:dc:5a:3c:97:6a: ab:9c:d5:1d:f1:e4:b9:5b:33:85:0a:d6:78:c8:ec: 8c:54:d2:11:6b:f6:b4:de:59:09:cd:c7:52:1f:38: 1e:91:af:92:30:de:a4:ee:9c:52:d9:00:bc:09:24: 47:05:c5:18:dc:61:d4:53:09:88:64:9f:d9:fb:51: c3:0a:dd:3e:94:52:85:e3:15:f8:2b:1f:0f:75:d8: 6e:6e:42:0b:8f:db:15:c1:14:f6:37:a2:fb:f5:a5: db:15:70:ee:05:15:68:ab:8c:2e:d7:e1:a7:36:38: d6:b2:75:2c:50:41:97:06:88:4b:01:90:d1:08:e2: c0:cf:3c:7d:c2:5e:50:41:e7:fb:29:63:69:35:3d: ce:2b:d3:1b:18:18:24:b7:9a:39:d8:94:3f:c7:c5: e4:a4:83:fa:e0:79:59:5d:70:63:e5:f4:bf:eb:fe: 03:8f:aa:dc:40:cf:ec:34:e4:70:0f:39:1a:d4:f9: af:1b:13:bd:1f:8a:7a:82:e1:18:4a:74:ae:e2:94: a9:09:ac:8a:f6:f6:f0:a0:9c:bc:9a:21:f3:ba:74: d8:28:16:18:d9:e5:9a:a9:a7:4f:93:9b:b1:ce:51: 08:10:81:20:60:21:d9:b8:8c:1a:d2:81:12:27:be: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C5:D1:E2:CB:2B:81:F3:08:F1:1C:E8:9A:24:09:71:87:65:FE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/c4946efd-1521-3de8-b345-a5a5a880c146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 172.93.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6d:92:8c:05:c6:47:33:52:f4:d6:ae:6b:0e:06:b2:5f:86: ff:3f:4c:14:6c:66:b4:5c:a3:a3:02:3a:51:eb:f8:e1:e3:06: 0a:1e:82:65:21:34:63:ae:a4:1d:d1:a4:35:66:28:7b:cb:70: d8:77:2a:c1:1b:a8:60:25:b9:87:ad:1d:31:f3:ab:04:c0:dd: 4a:f3:b7:22:b0:d6:de:de:e8:6c:1c:c0:9f:e7:2e:60:90:02: 91:b3:fa:f4:fb:67:05:ff:12:ab:84:62:52:81:05:f0:2e:86: dc:b9:26:5e:70:b0:ba:5c:c2:49:b2:13:e5:6c:7e:98:85:9e: d4:bb:6e:eb:e1:e7:32:cf:0a:9a:84:91:3b:f7:77:6d:6e:84: aa:a4:9d:c6:de:62:b9:61:ca:bc:bf:25:a3:7b:94:34:af:fa: 7c:75:ea:a4:78:08:6a:c4:4f:2e:2c:8c:cf:e0:43:05:50:36: 1b:9b:18:09:41:28:c0:99:99:0b:14:6d:a2:57:92:b7:0d:47: 9a:d1:7b:cf:8a:d7:a5:5f:67:ad:2c:87:bf:7b:bc:e5:42:75: 32:c3:95:33:25:53:0d:2e:20:2b:9f:1f:a1:6e:a0:2f:96:83: cb:fd:9f:3c:0e:06:d3:c3:48:e0:7d:db:84:1b:4a:4f:6b:e4: 26:b7:0d:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlN5Srr9nc3r6G0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZjVjMDk5NzEtNDQxYi00NjYxLWE4ZTUtMDU3NWU5ZWNmZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jCAza4SlLTS3Fo8l2qrnNUd8eS5WzOFCtZ4 yOyMVNIRa/a03lkJzcdSHzgeka+SMN6k7pxS2QC8CSRHBcUY3GHUUwmIZJ/Z+1HD Ct0+lFKF4xX4Kx8PddhubkILj9sVwRT2N6L79aXbFXDuBRVoq4wu1+GnNjjWsnUs UEGXBohLAZDRCOLAzzx9wl5QQef7KWNpNT3OK9MbGBgkt5o52JQ/x8XkpIP64HlZ XXBj5fS/6/4Dj6rcQM/sNORwDzka1PmvGxO9H4p6guEYSnSu4pSpCayK9vbwoJy8 miHzunTYKBYY2eWaqadPk5uxzlEIEIEgYCHZuIwa0oESJ76YjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbF0eLLK4HzCPEc6JokCXGHZf4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvYzQ5NDZlZmQtMTUyMS0z ZGU4LWIzNDUtYTVhNWE4ODBjMTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErF3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFtkowFxkczUvTWrmsOBrJfhv8/TBRsZrRco6MCOlHr+OHjBgoegmUh NGOupB3RpDVmKHvLcNh3KsEbqGAluYetHTHzqwTA3UrztyKw1t7e6GwcwJ/nLmCQ ApGz+vT7ZwX/EquEYlKBBfAuhty5Jl5wsLpcwkmyE+VsfpiFntS7buvh5zLPCpqE kTv3d21uhKqkncbeYrlhyry/JaN7lDSv+nx16qR4CGrETy4sjM/gQwVQNhubGAlB KMCZmQsUbaJXkrcNR5rRe8+K16VfZ60sh797vOVCdTLDlTMlUw0uICufH6FuoC+W g8v9nzwOBtPDSOB924QbSk9r5Ca3DUI= -----END CERTIFICATE-----Generated at Fri Jun 6 19:03:30 2025 by rpki-client