$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa File: 3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa (raw, json) Hash identifier: enxVcg7f0OKDp46RAyJUO8bK8X5sAtC9ExaP9eJBoEU= Subject key identifier: 55:19:C1:73:38:41:32:13:01:65:84:68:A0:59:40:6B:DE:5C:AF:F0 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC227AB3C4ABC3E21D80C0 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 24.96.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:22:7a:b3:c4:ab:c3:e2:1d:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=1ea3caba-54a6-4742-9c83-22085b8721da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:5c:12:fb:62:a8:e1:f5:c5:f9:cf:93:a2: eb:c8:fe:a1:9e:cc:ec:c2:35:42:f1:50:9f:96:6d: f2:69:a8:9d:b7:09:8c:4e:d3:31:fa:33:36:89:73: 95:b7:a5:85:4e:c9:b1:50:5e:fe:55:72:1f:82:64: 46:99:01:bc:0c:a7:1e:f7:9d:63:d1:f6:f8:6b:98: 85:fd:0b:da:cc:67:99:91:4f:6c:f4:48:21:3a:68: aa:d2:d1:de:27:f4:ea:35:c9:95:c9:96:fd:3c:dd: e8:e4:84:df:c7:67:cf:49:e4:55:7d:f3:ef:10:09: 0c:1c:23:4f:b7:0f:de:4e:29:bd:be:57:16:a9:a6: 46:96:36:e0:dc:c3:0d:6f:1c:82:c4:64:44:8a:b2: 32:58:33:03:e7:48:8f:f6:4f:9b:b1:01:c5:98:7e: f0:01:e0:7e:73:2a:15:11:9f:68:a1:6b:91:23:94: 49:9e:79:b6:0f:fd:20:05:fa:36:ae:93:ac:30:0b: 73:4e:6c:ea:8a:b8:7e:27:42:95:34:65:97:85:4b: 1e:2c:c6:b9:3a:e0:9b:06:6e:ff:94:87:0d:ed:01: 2c:06:af:0e:ea:a3:44:c6:4f:61:eb:51:04:71:0f: 3c:9e:02:4c:62:4b:7c:c7:6e:8a:ed:65:ff:ac:ad: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:C1:73:38:41:32:13:01:65:84:68:A0:59:40:6B:DE:5C:AF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.96.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:de:91:9f:4c:d2:23:bb:05:a3:54:fa:e9:83:4f:07:fd:b5: 39:ba:55:bc:03:2e:10:be:3a:05:56:6c:dd:3d:49:be:99:3e: 7a:34:a0:f5:49:66:38:a3:5e:47:38:3d:9f:02:e6:aa:46:f4: 3e:95:7e:73:1f:78:cc:62:42:07:b1:2c:04:88:e0:44:50:8b: 65:85:7e:ba:61:9c:7d:60:a6:08:8f:c6:25:ce:c3:67:6f:90: d0:20:6a:72:5b:a1:39:be:9b:27:9c:67:d3:b7:d4:27:d8:8f: 0d:e5:17:ab:c4:2a:03:1d:f1:31:4c:a8:8a:43:55:2f:98:c8: 23:fa:d0:c9:ce:2e:eb:e9:86:be:3a:52:5a:3f:62:24:58:08: 52:25:f9:bd:e3:0f:64:33:13:f8:db:0e:a7:4d:3a:d4:65:10: bf:d4:13:c8:2c:e1:b9:43:4a:f8:b8:73:e1:f3:31:c0:f9:3a: 3d:dc:27:4a:c9:92:ca:3f:17:1e:ee:f1:da:17:08:13:b5:89: 16:43:b1:1d:d2:59:b5:b6:e5:e1:77:d6:31:4a:76:da:63:07: c6:04:e4:7e:15:ef:e3:2a:55:19:50:3c:3f:49:60:cd:e0:0f: f2:0f:3b:8f:f0:b1:a1:8f:09:66:86:e6:0c:8f:db:3e:61:b1: 33:6b:db:31 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEshzCJ6s8Srw+IdgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MWVhM2NhYmEtNTRhNi00NzQyLTljODMtMjIwODViODcyMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXNcEvtiqOH1xfnPk6LryP6hnszswjVC8VCf lm3yaaidtwmMTtMx+jM2iXOVt6WFTsmxUF7+VXIfgmRGmQG8DKce951j0fb4a5iF /QvazGeZkU9s9EghOmiq0tHeJ/TqNcmVyZb9PN3o5ITfx2fPSeRVffPvEAkMHCNP tw/eTim9vlcWqaZGljbg3MMNbxyCxGREirIyWDMD50iP9k+bsQHFmH7wAeB+cyoV EZ9ooWuRI5RJnnm2D/0gBfo2rpOsMAtzTmzqirh+J0KVNGWXhUseLMa5OuCbBm7/ lIcN7QEsBq8O6qNExk9h61EEcQ88ngJMYkt8x26K7WX/rK1MNQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFUZwXM4QTITAWWEaKBZQGveXK/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2ExY2UzNWMtNzBlYy0z YzAwLWFlNzktZjQwZGRkNTlhYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGGAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdN6Rn0zSI7sFo1T66YNPB/21ObpVvAMuEL46BVZs3T1Jvpk+ejSg9Ulm OKNeRzg9nwLmqkb0PpV+cx94zGJCB7EsBIjgRFCLZYV+umGcfWCmCI/GJc7DZ2+Q 0CBqcluhOb6bJ5xn07fUJ9iPDeUXq8QqAx3xMUyoikNVL5jII/rQyc4u6+mGvjpS Wj9iJFgIUiX5veMPZDMT+NsOp0061GUQv9QTyCzhuUNK+Lhz4fMxwPk6PdwnSsmS yj8XHu7x2hcIE7WJFkOxHdJZtbbl4XfWMUp22mMHxgTkfhXv4ypVGVA8P0lgzeAP 8g87j/CxoY8JZobmDI/bPmGxM2vbMQ== -----END CERTIFICATE-----Generated at Sat Oct 11 15:51:34 2025 by rpki-client