$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa File: 5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa (raw, json) Hash identifier: nR7RH8x0Dup5Q+BCHCHUpLBDn6Jp35q0PB5oH/RRs/Q= Subject key identifier: F3:29:8A:CB:5C:2F:55:4C:78:7D:C2:A5:52:D3:34:30:51:67:90:41 Certificate issuer: /CN=78108340-c24e-45fa-a787-5578ce17c653 Certificate serial: 010D0C9F4328584A6825FDF90BF2154F5EC21200 Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 11796 IP address blocks: 172.82.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:25:fd:f9:0b:f2:15:4f:5e:c2:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=39f9960c-0b62-4b70-871a-d5e0dbbb1a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:21:b8:34:c2:aa:a1:1b:a4:d9:90:66:b3: ed:f0:7e:d4:6d:1c:de:29:57:2a:b9:39:33:79:5f: e7:db:70:98:a6:31:ee:4a:42:ac:15:b4:81:84:b3: ac:98:4a:38:ac:fc:eb:6c:33:b4:a1:82:6e:e5:d6: c8:43:66:04:d1:8f:14:7b:cd:db:b6:43:e7:79:65: ee:b9:7c:a7:9f:81:bb:c0:06:43:e0:11:47:19:a5: ce:6c:ef:6b:b2:64:e1:59:93:c1:8f:24:71:62:9f: 86:d9:0a:37:93:90:ee:bc:96:f9:6d:16:27:e5:b3: 70:ea:cc:5d:9c:55:0d:d0:52:a6:33:16:7a:b4:16: 27:44:39:a3:b6:e5:3a:2c:99:b6:ad:e1:d0:29:9a: 67:99:2f:e2:28:5c:37:8f:48:df:15:eb:34:82:a7: f6:f2:f6:51:f0:0a:b1:bf:a4:b1:90:aa:75:73:f9: 2e:e2:06:52:af:55:54:2c:5b:f6:bd:33:5a:3b:6a: 82:df:b8:d5:d3:b8:87:0c:52:e4:eb:b5:38:a4:01: 28:b0:2e:5c:38:32:0d:35:15:c1:6f:b6:f3:98:f3: f6:2d:ab:57:27:de:11:34:3b:e8:e9:ed:6e:ed:48: 3a:15:b9:44:ac:e2:0d:96:07:e3:07:65:dd:fc:73: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:29:8A:CB:5C:2F:55:4C:78:7D:C2:A5:52:D3:34:30:51:67:90:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl X509v3 Authority Key Identifier: keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer sbgp-ipAddrBlock: critical IPv4: 172.82.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7f:43:97:3c:d4:27:7a:04:4b:e9:8f:c8:fb:0e:b8:74:80: 18:02:82:7a:e6:15:72:30:e2:14:fa:74:0b:5d:0c:bf:dd:87: d0:f3:d8:58:ed:4f:74:2d:73:75:b3:71:26:d9:62:6e:3a:86: cc:47:9a:a5:2e:cd:97:6f:62:80:d2:7f:1e:bb:13:05:1b:57: 0f:5d:7b:07:1d:1e:72:21:22:29:cc:6e:c2:f8:9a:41:72:7d: 66:65:9c:69:a4:dd:d1:51:e4:a4:69:c2:a1:0f:17:3a:d1:4d: ba:fb:85:d6:63:57:0f:06:4c:01:03:2a:81:a8:cb:b7:40:96: 23:ff:ad:42:e9:0e:f2:4d:a4:2a:72:b9:dc:cb:fe:46:6a:f4: 06:d9:9f:c0:36:2c:12:14:bb:42:10:76:44:04:cf:c0:d7:d0: 58:9c:74:eb:70:37:65:15:e4:37:8d:c1:ab:95:28:ef:ac:45: 11:b9:39:be:c5:f3:41:97:5f:ad:18:39:cc:b2:f0:1c:7c:e6: f8:4e:44:17:54:17:01:70:04:f4:c8:e6:bb:c8:2b:08:86:65: 49:86:ef:74:8f:47:ee:d9:3e:d2:ef:23:5e:9a:5b:2d:e1:44: 05:fe:c1:b4:21:7c:97:33:d2:5d:7b:65:93:4a:ff:24:29:04: 62:77:4c:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJf35C/IVT17CEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgxMDgzNDAtYzI0ZS00NWZhLWE3ODctNTU3OGNlMTdj NjUzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk MzlmOTk2MGMtMGI2Mi00YjcwLTg3MWEtZDVlMGRiYmIxYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyYhuDTCqqEbpNmQZrPt8H7UbRzeKVcquTkz eV/n23CYpjHuSkKsFbSBhLOsmEo4rPzrbDO0oYJu5dbIQ2YE0Y8Ue83btkPneWXu uXynn4G7wAZD4BFHGaXObO9rsmThWZPBjyRxYp+G2Qo3k5DuvJb5bRYn5bNw6sxd nFUN0FKmMxZ6tBYnRDmjtuU6LJm2reHQKZpnmS/iKFw3j0jfFes0gqf28vZR8Aqx v6SxkKp1c/ku4gZSr1VULFv2vTNaO2qC37jV07iHDFLk67U4pAEosC5cODINNRXB b7bzmPP2LatXJ94RNDvo6e1u7Ug6FblErOINlgfjB2Xd/HNTGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMpistcL1VMeH3CpVLTNDBRZ5BBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ODEw ODM0MC1jMjRlLTQ1ZmEtYTc4Ny01NTc4Y2UxN2M2NTMvNWM1MGI5YWQtNTFkZC0z MjY3LTlkMGUtMDJiOTJkZDk2NTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzgxMDgzNDAtYzI0ZS00NWZhLWE3 ODctNTU3OGNlMTdjNjUzLzc4MTA4MzQwLWMyNGUtNDVmYS1hNzg3LTU1NzhjZTE3 YzY1My5jcmwwHwYDVR0jBBgwFoAUlrQrgxk9eYhysk3Zt20b4bFWQ90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83ODEwODM0MC1jMjRlLTQ1ZmEtYTc4Ny01NTc4 Y2UxN2M2NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR/Q5c81Cd6BEvpj8j7Drh0gBgCgnrmFXIw4hT6dAtdDL/dh9Dz2Fjt T3Qtc3WzcSbZYm46hsxHmqUuzZdvYoDSfx67EwUbVw9dewcdHnIhIinMbsL4mkFy fWZlnGmk3dFR5KRpwqEPFzrRTbr7hdZjVw8GTAEDKoGoy7dAliP/rULpDvJNpCpy udzL/kZq9AbZn8A2LBIUu0IQdkQEz8DX0FicdOtwN2UV5DeNwauVKO+sRRG5Ob7F 80GXX60YOcyy8Bx85vhORBdUFwFwBPTI5rvIKwiGZUmG73SPR+7ZPtLvI16aWy3h RAX+wbQhfJcz0l17ZZNK/yQpBGJ3TGw= -----END CERTIFICATE-----Generated at Fri Jul 11 04:55:09 2025 by rpki-client