$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa File: 9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa (raw, json) Hash identifier: uGnJX9AMGLG0Bz4RmdYFdIg37fKRh3165tYPG+5ftrg= Subject key identifier: 93:B0:4B:77:E7:55:4E:5D:FA:AC:7D:74:68:9C:B6:88:BF:E2:04:5B Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F4328584B583C8F70622AE36FF1614480 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 63306 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8f:70:62:2a:e3:6f:f1:61:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=5c1a1ca0-4fce-44bb-9ce3-41baf182d33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:75:1c:f9:98:e1:6a:cd:39:25:bb:b5:b4: b8:51:6a:4a:ba:ca:64:a9:b2:7e:6a:37:f4:1c:bc: ea:ce:c7:59:0d:48:dc:88:83:71:7e:b6:3d:a8:7a: 41:0c:3a:de:f7:a5:b3:90:54:06:2d:9e:15:44:f7: 88:fa:fe:93:71:11:7e:b8:13:72:29:1a:ff:89:3f: 00:97:df:93:d1:fa:d8:c6:fc:53:45:23:82:23:f1: 5a:63:22:d8:4d:1a:69:3f:58:33:90:b4:92:49:f6: 09:f6:84:4a:f6:af:1b:b0:b7:03:d9:fd:5e:ec:76: 6d:1b:35:bb:07:e5:d6:a9:2a:e1:3c:53:3a:69:61: c8:59:b4:28:25:2c:f9:b7:5c:ce:d0:6d:a1:aa:0f: af:e7:15:03:92:36:55:e7:08:b5:e6:e0:ed:f9:81: af:03:ae:76:24:32:1f:8f:30:29:4c:9c:63:ce:5b: fe:00:6d:b8:df:f6:24:e1:7f:68:47:34:f3:d9:8f: ba:a8:8f:30:a8:3a:a8:b5:a1:27:b4:5a:fd:8b:b0: 8b:c7:0a:9e:4a:8f:0e:1d:7d:b5:06:d1:b6:c4:61: cc:ab:9d:d7:e3:c4:82:52:17:22:c5:e0:75:e7:2e: 68:d8:d1:49:a2:4c:e1:47:9d:8c:7d:ae:41:fb:c1: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:4B:77:E7:55:4E:5D:FA:AC:7D:74:68:9C:B6:88:BF:E2:04:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:de:81:6a:89:33:91:f3:83:1d:95:49:16:77:4d:59:22:f9: b6:4e:01:26:65:21:da:19:c5:f6:f6:ca:ab:49:ac:28:7e:cb: 99:32:f0:ba:91:6c:1b:b3:9b:57:90:96:02:c3:8f:2f:07:16: 57:e7:44:6f:7d:72:7e:84:67:bc:06:32:0b:2d:81:b8:f4:7c: 0d:b6:80:a1:05:ec:a6:b8:98:2e:ae:1d:b7:69:ae:27:46:cd: c5:45:4a:6f:a0:1b:a6:49:cb:2f:b9:cf:e0:58:a8:f9:f3:97: d3:5d:50:4e:5a:10:b7:97:dc:a4:b2:78:3c:aa:86:39:ac:fe: 32:7f:52:b2:2d:d1:2a:73:76:93:d7:ec:3c:42:75:ab:1d:8e: 0a:09:52:aa:76:ba:46:0b:41:54:6d:ff:75:88:36:4a:1c:3b: 8b:aa:de:e5:9c:4e:0b:41:ad:bb:63:b3:e8:36:53:b7:13:c9: 9d:52:44:dd:80:4e:bf:f8:d1:5f:e0:80:e3:2e:2f:ec:c7:4d: 5d:08:a7:2b:f2:a4:9b:b7:b4:11:2e:8d:03:04:af:11:ef:f8: 61:a7:a4:c3:e2:5f:80:06:b0:69:30:da:90:c3:fa:cb:e4:78: f3:bd:e8:92:11:3c:bd:f3:ee:3a:d0:70:e0:10:48:d1:9f:26: 34:83:2c:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI9wYirjb/FhRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NWMxYTFjYTAtNGZjZS00NGJiLTljZTMtNDFiYWYxODJkMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsZ1HPmY4WrNOSW7tbS4UWpKuspkqbJ+ajf0 HLzqzsdZDUjciINxfrY9qHpBDDre96WzkFQGLZ4VRPeI+v6TcRF+uBNyKRr/iT8A l9+T0frYxvxTRSOCI/FaYyLYTRppP1gzkLSSSfYJ9oRK9q8bsLcD2f1e7HZtGzW7 B+XWqSrhPFM6aWHIWbQoJSz5t1zO0G2hqg+v5xUDkjZV5wi15uDt+YGvA652JDIf jzApTJxjzlv+AG243/Yk4X9oRzTz2Y+6qI8wqDqotaEntFr9i7CLxwqeSo8OHX21 BtG2xGHMq53X48SCUhcixeB15y5o2NFJokzhR52Mfa5B+8GPCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOwS3fnVU5d+qx9dGictoi/4gRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvOWJhZTQ1YWUtY2JjMy0z ZDgxLTg3MmMtN2Q2NTU4ZDAxNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnegWqJM5Hzgx2VSRZ3TVki+bZOASZlIdoZxfb2yqtJrCh+y5ky8LqR bBuzm1eQlgLDjy8HFlfnRG99cn6EZ7wGMgstgbj0fA22gKEF7Ka4mC6uHbdpridG zcVFSm+gG6ZJyy+5z+BYqPnzl9NdUE5aELeX3KSyeDyqhjms/jJ/UrIt0SpzdpPX 7DxCdasdjgoJUqp2ukYLQVRt/3WINkocO4uq3uWcTgtBrbtjs+g2U7cTyZ1SRN2A Tr/40V/ggOMuL+zHTV0IpyvypJu3tBEujQMErxHv+GGnpMPiX4AGsGkw2pDD+svk ePO96JIRPL3z7jrQcOAQSNGfJjSDLDA= -----END CERTIFICATE-----Generated at Sat Oct 11 06:04:14 2025 by rpki-client