$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d2611ab3-092b-36f3-a9b3-f89c07a1cf5b.roa File: d2611ab3-092b-36f3-a9b3-f89c07a1cf5b.roa (raw, json) Hash identifier: QkgENmbjqmbHQL8siFaLTN27gyh9oO5j95l8Eh68+mA= Subject key identifier: 57:52:0B:59:9C:AE:F2:73:FB:A2:13:DF:C4:B4:CE:1F:0D:70:75:FC Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B21CC2E026F54134B177537C0 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d2611ab3-092b-36f3-a9b3-f89c07a1cf5b.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 24.35.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2e:02:6f:54:13:4b:17:75:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=4124c899-b171-46b0-ba67-fe74760796cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:8d:4e:98:d0:c6:3a:06:08:63:c2:45:65: cf:3f:73:b0:84:6a:55:c4:63:fb:1e:4a:be:af:32: b3:30:f9:9e:8a:e1:86:71:18:88:b9:a5:53:75:82: e7:0d:30:11:f1:21:cd:d5:80:38:f8:e5:28:ae:13: b4:99:63:b1:9d:bd:24:5d:13:c0:a8:d2:e0:7d:2a: 9c:19:3c:47:33:2d:a5:2f:3a:81:ec:3f:98:53:a0: a1:ab:9e:3d:2d:9e:46:94:73:e6:cb:c5:b0:9f:bf: ce:52:44:56:a9:0a:2a:e3:3c:29:76:c8:93:81:ac: a0:17:dc:e2:d5:98:88:02:38:60:3d:60:d4:68:35: 5f:da:95:20:0d:c6:3a:83:c6:bf:ec:6c:1a:85:40: 0d:89:e5:8a:b6:07:66:04:f6:56:1c:a0:27:06:bc: e7:e1:14:3c:f3:a3:de:dd:40:3d:67:1c:99:be:8e: 21:ff:5e:67:f7:45:3c:34:71:93:e6:b6:ea:bf:85: f5:ef:59:94:a2:dd:9f:00:bd:ff:47:f5:78:f8:63: 89:dd:90:8a:6b:60:a0:a3:c4:d8:4c:0f:e4:d2:79: 2b:38:c0:9b:e6:c8:7f:6e:ca:3d:2d:cc:7d:1e:38: ab:47:7c:de:f7:c7:55:73:7b:eb:c8:8a:a0:6d:21: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:0B:59:9C:AE:F2:73:FB:A2:13:DF:C4:B4:CE:1F:0D:70:75:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/d2611ab3-092b-36f3-a9b3-f89c07a1cf5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.35.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e3:6f:36:94:3c:61:d0:a1:8c:ad:00:15:01:2b:f7:66:ec: ba:3f:2d:11:7f:03:b7:df:1d:a5:03:a4:f0:f8:9d:47:2e:9e: e8:0b:e9:ee:72:56:c9:f0:d0:75:17:f9:0e:c8:18:22:12:c3: ff:40:44:28:e8:0d:8e:ee:f2:c5:3f:b1:e0:a0:90:db:02:5e: 7d:c1:8e:1e:8a:9a:e1:c9:33:92:4e:e5:1f:31:b4:51:9f:f4: be:56:5c:15:29:0c:87:21:d5:d3:40:c2:8b:1b:88:6b:5e:52: f0:e7:0f:6f:02:97:a1:40:72:0b:cc:d6:89:ab:47:9b:7b:dc: 46:63:16:81:c6:11:03:d0:3d:38:a7:ee:4c:c6:2f:69:50:ae: 66:45:ec:d6:19:29:46:ff:2d:d1:e5:0c:40:3a:e0:dd:1d:c9: 8b:84:74:6b:a1:80:58:f7:fd:bc:49:ab:34:ed:c3:9b:f1:d9: f9:aa:85:0b:f5:b7:57:3d:c8:a4:d5:4c:c8:e1:d3:39:09:1e: bd:6e:21:dd:88:2b:5b:77:c3:75:a9:7e:2c:39:ae:b1:17:af: 1b:59:26:ca:e0:41:b8:f3:93:fb:09:da:20:01:38:eb:97:f1: 87:12:90:de:65:6c:1f:f6:01:87:1a:7c:2b:ba:19:ce:48:07: e8:fa:79:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzC4Cb1QTSxd1N8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NDEyNGM4OTktYjE3MS00NmIwLWJhNjctZmU3NDc2MDc5NmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+mNTpjQxjoGCGPCRWXPP3OwhGpVxGP7Hkq+ rzKzMPmeiuGGcRiIuaVTdYLnDTAR8SHN1YA4+OUorhO0mWOxnb0kXRPAqNLgfSqc GTxHMy2lLzqB7D+YU6Chq549LZ5GlHPmy8Wwn7/OUkRWqQoq4zwpdsiTgaygF9zi 1ZiIAjhgPWDUaDVf2pUgDcY6g8a/7GwahUANieWKtgdmBPZWHKAnBrzn4RQ886Pe 3UA9ZxyZvo4h/15n90U8NHGT5rbqv4X171mUot2fAL3/R/V4+GOJ3ZCKa2Cgo8TY TA/k0nkrOMCb5sh/bso9Lcx9HjirR3ze98dVc3vryIqgbSEHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdSC1mcrvJz+6IT38S0zh8NcHX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZDI2MTFhYjMtMDkyYi0z NmYzLWE5YjMtZjg5YzA3YTFjZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGCMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLjbzaUPGHQoYytABUBK/dm7Lo/LRF/A7ffHaUDpPD4nUcunugL6e5y Vsnw0HUX+Q7IGCISw/9ARCjoDY7u8sU/seCgkNsCXn3Bjh6KmuHJM5JO5R8xtFGf 9L5WXBUpDIch1dNAwosbiGteUvDnD28Cl6FAcgvM1omrR5t73EZjFoHGEQPQPTin 7kzGL2lQrmZF7NYZKUb/LdHlDEA64N0dyYuEdGuhgFj3/bxJqzTtw5vx2fmqhQv1 t1c9yKTVTMjh0zkJHr1uId2IK1t3w3Wpfiw5rrEXrxtZJsrgQbjzk/sJ2iABOOuX 8YcSkN5lbB/2AYcafCu6Gc5IB+j6eTo= -----END CERTIFICATE-----Generated at Sat Oct 11 16:00:12 2025 by rpki-client