$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa File: bfb2273f-712e-3f5f-b862-366e898e589d.roa (raw, json) Hash identifier: GvnDt6+D5E22n6qmjwKrBPNVSsAk2XKvoLx+4WklF6Q= Subject key identifier: FA:7B:65:E9:8D:4B:CD:3C:14:C0:EE:F7:98:AE:9C:3E:AB:0D:D3:35 Certificate issuer: /CN=798448e2-55be-4c24-8014-28c2c70dfc84 Certificate serial: 010D0C9F4328584B0746BB253F7BE78F5DD66800 Authority key identifier: C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 36601 IP address blocks: 172.83.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:bb:25:3f:7b:e7:8f:5d:d6:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798448e2-55be-4c24-8014-28c2c70dfc84 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=672f99a6-2e2f-4c05-a825-2b218df02d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:6f:b8:f9:2a:00:c5:f7:0e:5a:9c:90:41: b7:d3:54:c8:ed:ae:17:be:ce:00:79:41:69:9b:a5: df:b1:ad:cf:c6:c8:58:36:06:8f:b5:08:e0:dc:27: 15:17:71:a4:b7:5c:e0:1d:77:cd:59:22:f9:ac:16: 00:6b:40:0c:59:69:ef:f2:b2:78:a4:99:7a:10:73: 5a:30:8d:87:f7:61:9e:f0:5c:0c:c8:b8:38:26:b7: 30:74:9c:55:78:c5:ab:62:05:28:59:af:5a:f2:1e: 54:58:89:cb:f7:33:a7:7b:8a:ee:a3:91:ce:82:a8: 88:f1:7f:03:c3:2c:fb:8b:ad:f5:a0:fb:5c:49:2a: 32:97:f2:7a:13:f8:58:40:de:cd:ff:ea:0e:00:d9: 99:ea:48:1c:d9:3f:50:e4:3b:6b:f1:16:30:1d:f0: 24:d5:6c:8a:f3:73:9b:54:69:21:44:19:49:d6:9b: 59:3b:85:f7:05:ae:8a:47:ad:4d:3b:a5:e8:df:76: a3:ec:9f:0f:91:6b:38:83:a9:86:33:64:3e:6e:fa: 5e:ae:c4:98:30:32:05:33:df:39:58:80:58:01:5d: 15:f3:b1:9e:3e:d7:83:cc:fe:6a:62:6d:67:3b:a8: 06:db:ff:36:7a:94:2c:84:7c:82:96:bb:57:5c:9d: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7B:65:E9:8D:4B:CD:3C:14:C0:EE:F7:98:AE:9C:3E:AB:0D:D3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/bfb2273f-712e-3f5f-b862-366e898e589d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84/798448e2-55be-4c24-8014-28c2c70dfc84.crl X509v3 Authority Key Identifier: keyid:C6:70:25:5D:39:7D:E7:0D:25:72:01:A7:2B:BD:EB:72:84:D2:D6:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798448e2-55be-4c24-8014-28c2c70dfc84.cer sbgp-ipAddrBlock: critical IPv4: 172.83.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:05:07:34:66:b9:5a:f4:7f:57:65:b5:0d:c5:72:54:2b:84: 5c:be:2d:7b:16:4e:9b:82:02:fb:45:85:f9:7e:cd:eb:c7:b6: 25:22:10:5e:1a:83:ad:a4:31:31:ae:db:55:63:91:98:b8:b1: 74:50:c1:c4:8c:cb:48:52:c1:59:e7:54:51:ea:7c:a9:17:9e: 99:0f:ce:5d:33:14:91:73:61:75:8f:07:7e:de:2a:db:28:e8: 59:36:89:35:6d:37:ca:2a:d8:9b:ab:b2:eb:62:a9:c8:f7:d5: b5:1e:1f:60:50:e4:81:35:f1:fd:52:f7:c3:71:08:44:06:a4: c2:d4:fc:0e:9d:8d:96:c7:2d:55:f1:b0:df:54:bb:03:f6:c1: 1f:09:cd:70:44:9f:d3:a5:a1:40:f9:be:61:5b:b9:8f:8d:79: eb:57:4c:4d:81:96:8a:8d:70:27:82:bf:1a:bf:01:cb:79:2f: c4:97:7e:4b:67:c6:db:a1:72:ba:3e:16:30:ae:fb:ca:6e:3d: 18:cf:57:5f:36:71:08:75:2b:20:c3:42:e1:00:e9:29:4d:70: 1d:b6:19:ce:28:49:29:70:d0:a9:29:10:6c:6f:bc:14:0c:40: fd:ba:6d:50:d9:4e:c4:69:14:ba:89:94:c3:04:aa:03:43:6e: 6d:f8:de:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrslP3vnj13WaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4NDQ4ZTItNTViZS00YzI0LTgwMTQtMjhjMmM3MGRm Yzg0MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NjcyZjk5YTYtMmUyZi00YzA1LWE4MjUtMmIyMThkZjAyZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO5vuPkqAMX3DlqckEG301TI7a4Xvs4AeUFp m6Xfsa3PxshYNgaPtQjg3CcVF3Gkt1zgHXfNWSL5rBYAa0AMWWnv8rJ4pJl6EHNa MI2H92Ge8FwMyLg4JrcwdJxVeMWrYgUoWa9a8h5UWInL9zOne4ruo5HOgqiI8X8D wyz7i631oPtcSSoyl/J6E/hYQN7N/+oOANmZ6kgc2T9Q5Dtr8RYwHfAk1WyK83Ob VGkhRBlJ1ptZO4X3Ba6KR61NO6Xo33aj7J8PkWs4g6mGM2Q+bvpersSYMDIFM985 WIBYAV0V87GePteDzP5qYm1nO6gG2/82epQshHyClrtXXJ34JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp7ZemNS808FMDu95iunD6rDdM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0 NDhlMi01NWJlLTRjMjQtODAxNC0yOGMyYzcwZGZjODQvYmZiMjI3M2YtNzEyZS0z ZjVmLWI4NjItMzY2ZTg5OGU1ODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzk4NDQ4ZTItNTViZS00YzI0LTgw MTQtMjhjMmM3MGRmYzg0Lzc5ODQ0OGUyLTU1YmUtNGMyNC04MDE0LTI4YzJjNzBk ZmM4NC5jcmwwHwYDVR0jBBgwFoAUxnAlXTl95w0lcgGnK73rcoTS1tcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83OTg0NDhlMi01NWJlLTRjMjQtODAxNC0yOGMy YzcwZGZjODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYFBzRmuVr0f1dltQ3FclQrhFy+LXsWTpuCAvtFhfl+zevHtiUiEF4a g62kMTGu21VjkZi4sXRQwcSMy0hSwVnnVFHqfKkXnpkPzl0zFJFzYXWPB37eKtso 6Fk2iTVtN8oq2Jursutiqcj31bUeH2BQ5IE18f1S98NxCEQGpMLU/A6djZbHLVXx sN9UuwP2wR8JzXBEn9OloUD5vmFbuY+NeetXTE2BloqNcCeCvxq/Act5L8SXfktn xtuhcro+FjCu+8puPRjPV182cQh1KyDDQuEA6SlNcB22Gc4oSSlw0KkpEGxvvBQM QP26bVDZTsRpFLqJlMMEqgNDbm343s0= -----END CERTIFICATE-----Generated at Sat Oct 11 14:17:42 2025 by rpki-client