$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa File: 0d4e5656-afae-30a6-9a06-129f4ade41da.roa (raw, json) Hash identifier: RlxN2BjX6u79Ts0gKs2wvUHiNDduphaBkijR04b/IFE= Subject key identifier: 1A:A8:BA:B3:0B:9E:93:9B:28:2B:E1:B1:65:46:11:5F:30:74:52:2C Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584B68FC98CE62C1E37C3A1FAB0C Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 11325 IP address blocks: 172.102.196.0/24 maxlen: 24 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:98:ce:62:c1:e3:7c:3a:1f:ab:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=16bfee71-c17c-4033-94a1-9042db322967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:58:53:a0:1e:55:37:d3:80:4f:fe:f0:90: dd:8d:4c:f9:d6:8f:0b:d8:4e:b0:b4:98:60:54:6b: dd:31:6c:80:75:ac:53:26:ce:3d:00:98:9c:0b:ee: 57:76:e3:15:d6:f6:fb:46:01:80:f9:dd:5e:4c:6b: d7:4c:86:35:52:89:2f:b7:4e:6f:3b:69:77:d8:a4: f7:5a:fa:0b:05:4c:ae:20:27:7c:cb:c1:fc:04:5d: 09:42:27:66:fc:99:fe:fb:ca:5f:57:90:3b:51:a8: 8e:d4:99:91:b3:f8:0f:31:7d:a8:fb:3b:dd:d7:fd: 53:40:6d:ac:92:cc:01:5c:55:d9:9e:d3:24:07:7a: 61:2e:6b:0d:82:80:10:2a:bf:e6:c2:cc:c6:16:3d: f0:d0:33:43:04:eb:a4:6a:2f:e6:e1:f4:69:12:9c: 33:a2:0c:de:6e:cc:32:08:f1:07:5c:51:0b:40:54: 9d:e5:f6:82:60:b5:c2:37:a3:88:82:f9:05:0d:0a: d9:39:99:fd:00:5e:8a:c4:ad:08:2c:3f:d9:89:38: 71:a6:14:a3:d9:fc:f2:52:d2:58:ec:f2:f1:d3:5b: 74:dc:ee:64:40:6c:b0:6a:d7:fe:37:36:42:ac:f6: 00:06:f2:35:a0:ab:82:70:b7:ee:f1:21:3a:c5:a5: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:BA:B3:0B:9E:93:9B:28:2B:E1:B1:65:46:11:5F:30:74:52:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.196.0/24 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:33:d2:30:31:0a:90:db:f0:c0:ff:98:22:76:19:83:15:43: 16:8e:ce:0c:84:29:66:dd:3b:72:8e:7c:df:f2:de:5b:9f:8e: 96:54:89:5d:da:a6:73:74:e4:d5:7a:ea:aa:15:99:c1:a8:6c: 66:87:51:bd:b8:13:94:86:ab:68:dd:c0:39:40:65:2c:b4:92: 64:fb:e0:b9:f4:2f:56:70:50:01:fc:4c:d6:30:6e:34:68:a2: 01:cb:ef:bc:02:ef:22:f8:55:ab:98:b6:df:c5:95:ed:01:23: 91:dd:0e:de:e4:27:57:3e:ca:52:29:d1:1f:18:99:97:7e:d3: ea:3f:e0:0e:e8:95:5b:87:da:82:03:0b:5b:42:b1:3c:e6:b4: 5c:6f:7c:fd:56:d9:bf:a4:93:ef:db:34:8f:8d:de:f2:72:d4: 25:ff:f5:c1:75:92:a0:d9:46:5c:30:d3:57:d9:4c:31:d5:6e: 27:21:82:2f:10:94:7b:51:e8:0e:9f:aa:cd:94:e5:db:a8:d9: 31:17:2b:8e:78:bd:42:0b:66:b7:6b:aa:af:74:31:a0:cd:1d: 9e:65:e3:0e:47:98:e4:6f:1a:3c:03:55:07:7f:63:27:96:b9: 61:ac:9a:5e:e0:ba:22:59:d6:97:c6:f7:49:48:32:25:95:a6: f6:f3:58:97 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEto/JjOYsHjfDofqwwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk MTZiZmVlNzEtYzE3Yy00MDMzLTk0YTEtOTA0MmRiMzIyOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGJYU6AeVTfTgE/+8JDdjUz51o8L2E6wtJhg VGvdMWyAdaxTJs49AJicC+5XduMV1vb7RgGA+d1eTGvXTIY1Uokvt05vO2l32KT3 WvoLBUyuICd8y8H8BF0JQidm/Jn++8pfV5A7UaiO1JmRs/gPMX2o+zvd1/1TQG2s kswBXFXZntMkB3phLmsNgoAQKr/mwszGFj3w0DNDBOukai/m4fRpEpwzogzebswy CPEHXFELQFSd5faCYLXCN6OIgvkFDQrZOZn9AF6KxK0ILD/ZiThxphSj2fzyUtJY 7PLx01t03O5kQGywatf+NzZCrPYABvI1oKuCcLfu8SE6xaV9gQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBqourMLnpObKCvhsWVGEV8wdFIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMGQ0ZTU2NTYtYWZhZS0z MGE2LTlhMDYtMTI5ZjRhZGU0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbEAwQA rGbUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGsz0jAxCpDb8MD/mCJ2GYMVQxaOzgyEKWbdO3KOfN/y3luf jpZUiV3apnN05NV66qoVmcGobGaHUb24E5SGq2jdwDlAZSy0kmT74Ln0L1ZwUAH8 TNYwbjRoogHL77wC7yL4VauYtt/Fle0BI5HdDt7kJ1c+ylIp0R8YmZd+0+o/4A7o lVuH2oIDC1tCsTzmtFxvfP1W2b+kk+/bNI+N3vJy1CX/9cF1kqDZRlww01fZTDHV bichgi8QlHtR6A6fqs2U5duo2TEXK454vUILZrdrqq90MaDNHZ5l4w5HmORvGjwD VQd/YyeWuWGsml7guiJZ1pfG90lIMiWVpvbzWJc= -----END CERTIFICATE-----Generated at Sat Oct 11 04:28:20 2025 by rpki-client