$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa File: a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa (raw, json) Hash identifier: SJzQC1V5M2InWG6eurs+UlYz/Q+Gvb56Yu3Y5S30fhg= Subject key identifier: 3C:84:36:9A:22:21:93:97:F7:6F:8A:22:DE:FF:AC:C5:D5:D2:19:91 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584B004BF3CEB7C1A481C507874A Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 134450 IP address blocks: 172.84.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f3:ce:b7:c1:a4:81:c5:07:87:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=a691e7d5-e46b-4c53-a777-923f81d7105c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:fb:3c:b4:b3:b7:40:81:0a:4b:68:55:39: cc:7b:57:45:90:d5:da:af:62:d8:c6:08:3f:45:c5: 32:08:cd:7b:cb:c4:c4:1a:19:52:bb:99:c5:33:4a: 56:d5:f2:1d:48:0f:03:60:a8:b1:6e:30:da:7c:09: a9:5d:26:0e:34:f7:b1:ed:fd:33:60:94:b6:ec:e8: d4:dd:f6:4f:43:88:7f:56:14:3d:62:a6:81:a0:db: 92:89:df:29:3e:64:6f:cb:f0:f4:5c:50:7f:55:1e: 69:5c:d7:fb:9e:a1:77:6c:e2:8b:82:a0:a2:18:34: 14:3c:44:a5:53:49:72:60:5d:ed:08:91:08:72:0c: aa:08:f1:f1:43:78:bf:93:d6:a8:44:89:8b:e4:c8: 96:28:cf:f1:02:5d:54:4b:19:08:b3:98:98:b4:5e: 35:3f:16:db:22:50:7b:c4:a9:91:3d:d3:25:76:36: 55:a2:1a:f9:c9:75:45:e2:e9:be:4a:87:70:65:10: f2:f3:18:3d:94:cd:df:14:9d:ed:5a:32:f2:20:4d: 8c:72:7d:b7:33:1f:66:00:6e:c7:dc:06:5e:6e:6d: 56:4e:c6:eb:de:71:c9:3e:da:2d:2d:4b:d9:a4:02: 50:b0:06:e5:cb:59:f7:44:22:e0:ac:59:06:52:bb: 9b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:84:36:9A:22:21:93:97:F7:6F:8A:22:DE:FF:AC:C5:D5:D2:19:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/a0bec2b4-ec78-3f6c-a26a-62dff4bbc213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:78:85:bf:df:e5:7c:2a:19:08:84:32:44:ff:8a:fa:28:64: da:e7:05:97:80:b1:76:d3:fa:54:ad:05:1b:20:9c:bd:c6:59: bf:a8:31:d6:9e:9d:55:b1:c5:8a:69:8b:da:10:46:32:53:8a: c7:76:5d:52:63:45:2a:ef:b6:37:fd:ed:0b:c2:23:e9:c1:42: 15:fa:ed:b3:b6:ae:6c:34:d0:8b:a9:c7:8a:b7:0e:02:e2:53: f6:1b:85:91:7e:8f:db:1a:77:34:2a:a2:72:4b:da:56:b9:0a: bf:51:7a:0c:7f:36:e4:d4:dd:86:85:a7:38:47:14:85:44:31: b2:91:bb:1d:51:42:f4:a6:5a:cc:1b:3a:e8:f6:c4:d7:97:13: 26:33:5e:6d:f2:bb:1f:cf:de:17:fa:4b:ab:80:66:46:e7:66: f7:fd:a8:b0:d8:3a:65:8b:e3:87:94:49:48:eb:97:45:49:23: 06:5e:df:2f:09:63:d3:d3:cb:c8:f4:14:9e:33:2a:fa:f6:5e: c1:9d:23:fa:f5:32:79:3c:77:10:19:fb:22:23:bb:f0:ab:5b: 9f:68:fa:59:52:84:96:9f:83:06:06:60:1c:b6:90:1a:31:50: 17:29:46:78:fe:fd:db:fe:25:dd:ec:ab:43:ff:2c:5b:bd:e2: 31:37:87:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/POt8GkgcUHh0owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YTY5MWU3ZDUtZTQ2Yi00YzUzLWE3NzctOTIzZjgxZDcxMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xX7PLSzt0CBCktoVTnMe1dFkNXar2LYxgg/ RcUyCM17y8TEGhlSu5nFM0pW1fIdSA8DYKixbjDafAmpXSYONPex7f0zYJS27OjU 3fZPQ4h/VhQ9YqaBoNuSid8pPmRvy/D0XFB/VR5pXNf7nqF3bOKLgqCiGDQUPESl U0lyYF3tCJEIcgyqCPHxQ3i/k9aoRImL5MiWKM/xAl1USxkIs5iYtF41PxbbIlB7 xKmRPdMldjZVohr5yXVF4um+SodwZRDy8xg9lM3fFJ3tWjLyIE2Mcn23Mx9mAG7H 3AZebm1WTsbr3nHJPtotLUvZpAJQsAbly1n3RCLgrFkGUrubewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyENpoiIZOX92+KIt7/rMXV0hmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYTBiZWMyYjQtZWM3OC0z ZjZjLWEyNmEtNjJkZmY0YmJjMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ4hb/f5XwqGQiEMkT/ivooZNrnBZeAsXbT+lStBRsgnL3GWb+oMdae nVWxxYppi9oQRjJTisd2XVJjRSrvtjf97QvCI+nBQhX67bO2rmw00Iupx4q3DgLi U/YbhZF+j9sadzQqonJL2la5Cr9Regx/NuTU3YaFpzhHFIVEMbKRux1RQvSmWswb Ouj2xNeXEyYzXm3yux/P3hf6S6uAZkbnZvf9qLDYOmWL44eUSUjrl0VJIwZe3y8J Y9PTy8j0FJ4zKvr2XsGdI/r1Mnk8dxAZ+yIju/CrW59o+llShJafgwYGYBy2kBox UBcpRnj+/dv+Jd3sq0P/LFu94jE3h/A= -----END CERTIFICATE-----Generated at Sun Sep 7 12:33:00 2025 by rpki-client