$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa File: d6d8cee2-6301-3063-826d-b91ab0fc7577.roa (raw, json) Hash identifier: I1FC0bGmjyFNEwHPIfXbK2tb/oyQ4MDc1MFocWfMsU4= Subject key identifier: 65:97:8D:80:BE:A4:32:AB:F7:BD:C7:BD:2E:1B:A0:F3:BC:F3:B6:71 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584B540C69C67F2A39AC73C3BE40 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 13332 IP address blocks: 172.84.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:69:c6:7f:2a:39:ac:73:c3:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=03554ac2-69c2-4b98-bc6c-7aa29c475252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5b:69:10:c0:11:6f:7f:f3:7e:19:06:38:64: 6f:eb:8e:6b:e9:64:c0:4b:63:71:29:30:ca:42:5c: 57:d0:d7:94:c6:56:39:66:be:a6:1a:28:c7:9f:0d: 28:4b:22:63:77:0e:87:ff:40:d7:c8:bb:46:d5:07: 04:06:3c:e1:da:db:2a:d6:98:d8:75:90:9a:f7:d9: 9c:4c:13:c1:aa:7c:a2:fe:d9:bd:d5:98:2e:2e:a5: 6e:f0:44:d1:95:28:3b:14:09:31:54:f6:02:21:b5: 1b:57:00:45:07:32:30:c2:af:3c:c4:5e:e0:5c:f1: 4e:4d:91:08:cf:1a:a7:69:4d:84:2f:b0:85:86:4c: 0b:2d:19:22:65:f3:ae:9e:4f:0f:02:96:19:9c:76: 5a:b2:bb:2e:0c:cd:bd:b8:b5:4f:0f:d3:39:0c:37: c3:49:5d:2b:53:b6:53:5a:58:f0:b0:1a:b2:0f:a2: de:59:be:51:cf:69:69:f7:4b:47:67:40:06:6a:51: 75:1b:38:37:0a:f7:28:84:f5:6e:37:0c:4d:1d:58: 8b:bf:f1:98:f3:31:ad:e3:c4:fb:af:10:65:34:c2: f7:cd:5f:14:f8:b0:89:7c:07:09:fe:00:1b:7e:34: 38:7a:e9:a8:de:5f:e6:2f:29:94:c7:ac:36:f2:cb: 4d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:97:8D:80:BE:A4:32:AB:F7:BD:C7:BD:2E:1B:A0:F3:BC:F3:B6:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6c:f5:ca:5b:f1:a8:6c:67:99:ac:9b:23:63:32:6e:97:2e: 6e:4c:31:20:11:3b:22:28:0b:10:75:52:ad:46:2c:e7:20:10: d3:d5:ab:58:84:af:7c:24:aa:47:96:90:53:e2:5d:fb:b2:bc: be:b9:31:a3:e9:92:b9:1b:dc:12:66:63:75:e2:ad:ee:55:7d: 9c:3f:ef:bf:51:03:e6:84:a6:06:44:d1:51:2a:ea:ac:92:a5: 61:60:23:cd:91:e3:40:69:00:6e:a1:c9:09:11:9b:06:79:e6: 78:74:d5:31:a7:f4:72:a3:d6:2f:ab:8b:cc:bf:80:12:b5:0b: 8a:df:d8:75:55:d1:cf:0e:3c:e1:f4:d7:92:b4:b9:08:3e:ad: a2:d9:b3:7f:a5:cd:7b:05:df:fc:dc:69:a4:b5:da:70:e2:d7: 1b:f2:e8:92:74:11:77:62:c8:a9:04:f2:21:66:21:55:c1:df: 09:e1:bb:0f:f4:d3:9a:6f:63:bd:ae:c9:68:d3:83:65:ee:02: ca:f1:77:c6:96:af:de:39:1c:a1:f1:f0:7a:fd:c8:45:62:28: d3:92:b2:04:23:42:79:07:be:43:d2:de:dd:15:6b:c8:18:4f: 05:db:b3:b9:e9:53:ac:f2:35:9b:f7:66:c0:74:77:99:f5:0d: c6:44:4a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGnGfyo5rHPDvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MDM1NTRhYzItNjljMi00Yjk4LWJjNmMtN2FhMjljNDc1MjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1tpEMARb3/zfhkGOGRv645r6WTAS2NxKTDK QlxX0NeUxlY5Zr6mGijHnw0oSyJjdw6H/0DXyLtG1QcEBjzh2tsq1pjYdZCa99mc TBPBqnyi/tm91ZguLqVu8ETRlSg7FAkxVPYCIbUbVwBFBzIwwq88xF7gXPFOTZEI zxqnaU2EL7CFhkwLLRkiZfOunk8PApYZnHZasrsuDM29uLVPD9M5DDfDSV0rU7ZT WljwsBqyD6LeWb5Rz2lp90tHZ0AGalF1Gzg3CvcohPVuNwxNHViLv/GY8zGt48T7 rxBlNML3zV8U+LCJfAcJ/gAbfjQ4eumo3l/mLymUx6w28stNIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWXjYC+pDKr973HvS4boPO887ZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvZDZkOGNlZTItNjMwMS0z MDYzLTgyNmQtYjkxYWIwZmM3NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1s9cpb8ahsZ5msmyNjMm6XLm5MMSAROyIoCxB1Uq1GLOcgENPVq1iE r3wkqkeWkFPiXfuyvL65MaPpkrkb3BJmY3Xire5VfZw/779RA+aEpgZE0VEq6qyS pWFgI82R40BpAG6hyQkRmwZ55nh01TGn9HKj1i+ri8y/gBK1C4rf2HVV0c8OPOH0 15K0uQg+raLZs3+lzXsF3/zcaaS12nDi1xvy6JJ0EXdiyKkE8iFmIVXB3wnhuw/0 05pvY72uyWjTg2XuAsrxd8aWr945HKHx8Hr9yEViKNOSsgQjQnkHvkPS3t0Va8gY TwXbs7npU6zyNZv3ZsB0d5n1DcZESio= -----END CERTIFICATE-----Generated at Sat Oct 11 21:27:07 2025 by rpki-client