$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa File: 3a5025bf-ee37-315a-a197-68996a369c6a.roa (raw, json) Hash identifier: Qyj1i82nlcMpgKocETmGlsekdiCNVPPnZW0EGTzN38M= Subject key identifier: 71:E1:7C:79:75:A7:5D:86:CF:B7:FB:1F:85:97:D9:7E:66:2C:71:94 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F4328584B583C8EFFA7384B4A399E6280 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 54714 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8e:ff:a7:38:4b:4a:39:9e:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=6316eed0-23b5-4bc5-9fe6-0c72ca6f742c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:ba:b0:92:88:a2:85:05:d4:b7:6e:72:5e: 01:db:35:40:9c:ef:bb:04:d0:7a:05:de:fe:96:6e: d6:67:7b:9c:70:f7:b3:d7:33:b6:b8:a9:d2:0f:2c: 89:ef:52:88:42:f5:d0:0d:3a:c8:05:20:17:18:cc: 9c:94:dc:ed:d0:97:cd:0c:c2:4b:4e:a0:d3:93:41: 5f:c5:69:36:ab:70:9a:f3:98:e7:6c:9b:17:f3:08: 9f:58:56:d7:2d:b4:64:6b:b3:99:93:a8:e7:7f:e7: 5a:10:bd:3b:b9:4c:df:29:98:cf:46:17:8a:c1:48: 63:25:b9:83:e3:4f:48:07:fd:19:86:06:1f:74:12: b4:97:f3:a0:d2:ea:70:bb:cb:fa:a8:25:e6:22:7a: be:b5:97:d6:3a:5a:3f:06:74:c0:7f:12:f7:3b:f8: 80:2a:d3:4a:79:58:1d:bb:07:93:7e:78:47:0e:51: 29:0b:18:eb:12:85:cb:15:72:6c:43:14:7e:f2:91: 1d:6a:f4:84:64:15:10:c5:0b:be:b9:c4:57:21:30: 76:d2:93:93:d9:6e:6b:50:47:c8:35:ad:1f:8a:03: 19:98:67:f3:d1:cd:13:b6:d8:f6:9d:59:a5:16:af: 46:5f:83:44:05:55:ec:8b:aa:0f:35:ab:1f:3d:d4: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E1:7C:79:75:A7:5D:86:CF:B7:FB:1F:85:97:D9:7E:66:2C:71:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:79:ef:98:2f:32:40:df:c7:11:70:e4:a9:53:a1:bb:2e:c4: 7d:9f:0d:48:11:71:ef:81:49:3a:22:c7:cb:2e:e1:0a:05:ee: aa:fc:37:46:cc:70:a2:1d:9b:fb:36:4c:16:f4:04:87:ba:cc: db:be:60:6b:43:79:c2:39:9a:b2:9c:7a:78:4c:68:cd:dd:0e: b5:4b:6f:bd:dc:ba:3e:98:21:c6:98:21:15:22:6a:8a:93:02: f6:5a:53:ed:3a:d2:1c:ab:16:a1:ef:37:a8:cd:0b:1d:75:39: 19:08:0d:a0:a4:23:93:02:17:06:f2:e3:92:62:86:a8:5e:b9: 08:62:2a:22:35:5c:b1:57:83:c6:95:ce:61:ce:64:e6:14:3a: 32:fb:f3:c6:78:39:fb:b8:4b:34:31:97:bf:d0:4e:62:a8:57: 37:e2:7c:3f:30:cc:9d:35:36:26:b6:c1:fb:32:77:8e:25:1a: d7:0e:8b:e9:17:74:f6:9e:d4:86:ca:75:cc:24:98:6a:37:5c: 45:19:d7:3d:f8:74:96:aa:00:cf:f7:76:36:4f:28:9c:26:d3: d3:6c:e2:a7:9d:e0:bd:cd:96:73:e8:2e:f3:f0:27:7f:7c:b1: a7:71:03:59:e0:ab:04:d9:f7:87:8d:87:b7:ad:7b:d9:f9:b4: 2f:de:e3:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI7/pzhLSjmeYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjMxNmVlZDAtMjNiNS00YmM1LTlmZTYtMGM3MmNhNmY3NDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlW6sJKIooUF1Lducl4B2zVAnO+7BNB6Bd7+ lm7WZ3uccPez1zO2uKnSDyyJ71KIQvXQDTrIBSAXGMyclNzt0JfNDMJLTqDTk0Ff xWk2q3Ca85jnbJsX8wifWFbXLbRka7OZk6jnf+daEL07uUzfKZjPRheKwUhjJbmD 409IB/0ZhgYfdBK0l/Og0upwu8v6qCXmInq+tZfWOlo/BnTAfxL3O/iAKtNKeVgd uweTfnhHDlEpCxjrEoXLFXJsQxR+8pEdavSEZBUQxQu+ucRXITB20pOT2W5rUEfI Na0figMZmGfz0c0Tttj2nVmlFq9GX4NEBVXsi6oPNasfPdTGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHhfHl1p12Gz7f7H4WX2X5mLHGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvM2E1MDI1YmYtZWUzNy0z MTVhLWExOTctNjg5OTZhMzY5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5575gvMkDfxxFw5KlTobsuxH2fDUgRce+BSToix8su4QoF7qr8N0bM cKIdm/s2TBb0BIe6zNu+YGtDecI5mrKcenhMaM3dDrVLb73cuj6YIcaYIRUiaoqT AvZaU+060hyrFqHvN6jNCx11ORkIDaCkI5MCFwby45JihqheuQhiKiI1XLFXg8aV zmHOZOYUOjL788Z4Ofu4SzQxl7/QTmKoVzfifD8wzJ01Nia2wfsyd44lGtcOi+kX dPae1IbKdcwkmGo3XEUZ1z34dJaqAM/3djZPKJwm09Ns4qed4L3NlnPoLvPwJ398 sadxA1ngqwTZ94eNh7ete9n5tC/e4zc= -----END CERTIFICATE-----Generated at Sat Oct 11 11:58:55 2025 by rpki-client