$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa File: 4df6fcae-809c-334c-948c-a1db49d80779.roa (raw, json) Hash identifier: 5HgqkoNINmYhDbvJKtfIdYQZLUTB3v24eAzB2azo00o= Subject key identifier: 17:5E:49:EC:D0:74:75:2F:D5:97:B3:69:8D:39:74:AD:83:6F:E9:D8 Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F4328584B1806E27264D569F83A179400 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 62952 IP address blocks: 172.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e2:72:64:d5:69:f8:3a:17:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=a0ad2d69-3b8e-425b-a0c5-71a174264efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:82:29:bc:6b:31:de:d5:83:30:8e:b3:f7: 02:11:8b:ff:cc:1a:a9:bd:76:ee:a3:63:a5:c7:09: 16:8c:cc:79:4c:84:08:c8:1f:31:78:e8:b6:02:d2: e6:5e:05:f4:8b:24:05:38:f0:85:0e:d6:a9:84:4c: e4:17:4d:d6:17:46:92:19:09:5d:c3:21:57:a9:08: f4:37:e5:a9:ab:87:40:36:ae:43:e2:7d:24:c1:2d: 55:80:6c:49:3b:45:c6:ed:d2:6a:35:ce:81:b2:7d: 21:81:66:55:36:62:35:fb:95:70:e1:f6:6a:66:24: ff:88:27:94:e7:76:3a:b0:3e:48:12:65:de:7d:f9: bc:21:ca:56:71:1e:39:18:2d:6f:d4:87:c9:1d:a1: 3f:6a:a5:66:f1:5c:57:96:a4:c6:82:df:62:b7:72: 75:8c:1e:56:1f:a2:a8:fd:4e:0c:0e:b0:a0:4c:58: b1:07:0d:fd:ab:3d:4d:c5:47:96:15:e9:a9:b2:a4: 11:2e:25:20:1e:63:a9:1a:88:11:a3:93:c7:f2:55: 3b:bb:0d:64:ee:8a:99:93:91:7d:3f:a3:d3:93:cb: d4:bf:8b:17:e8:54:ba:ee:22:fe:c0:e2:98:be:63: bf:2d:93:4c:d4:53:c8:f4:d0:fb:f2:b1:5d:bc:ef: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5E:49:EC:D0:74:75:2F:D5:97:B3:69:8D:39:74:AD:83:6F:E9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 172.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:10:41:3a:66:94:b1:cd:9e:49:02:ca:68:3d:4f:5c:0a:31: 25:60:9d:2c:69:d9:ff:8a:d0:78:fd:d5:04:98:11:77:b8:8d: 19:86:ed:72:fa:b3:e5:4a:ce:ad:84:08:f9:4a:dc:0d:bd:94: 10:16:5b:00:63:ac:2c:b5:2a:01:07:9e:7d:9f:e7:c0:c1:ce: 21:37:d6:fc:05:29:64:ff:c0:6e:d4:30:c1:23:a3:06:0f:5f: 9d:8f:8f:3b:44:c2:cf:7f:94:09:17:46:01:f0:1c:80:df:0d: 80:c3:80:43:7e:a2:39:52:df:1d:3b:16:7a:31:81:95:64:26: da:1b:b7:40:3e:3b:40:92:26:9d:57:d8:7b:d5:3c:63:83:7d: c2:22:cc:a6:3a:24:51:e1:88:c8:17:9e:d7:c5:cd:0d:c9:2b: 97:df:46:e0:52:b8:19:42:35:fc:d2:a1:af:be:0d:dd:ff:ac: 37:eb:d3:7a:fa:1d:a2:76:13:52:b7:cf:4c:e0:ea:74:17:2b: 27:d1:05:76:a9:9b:b4:99:31:37:37:f2:30:a9:bd:5e:1a:4b: ed:b1:94:bf:5e:a2:97:8a:96:e9:c2:76:d1:0c:4b:98:b7:be: 19:4e:0d:ac:2b:51:61:58:15:ed:03:11:b6:84:b3:39:20:be: da:8c:26:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuJyZNVp+DoXlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTBhZDJkNjktM2I4ZS00MjViLWEwYzUtNzFhMTc0MjY0ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2CKbxrMd7VgzCOs/cCEYv/zBqpvXbuo2Ol xwkWjMx5TIQIyB8xeOi2AtLmXgX0iyQFOPCFDtaphEzkF03WF0aSGQldwyFXqQj0 N+Wpq4dANq5D4n0kwS1VgGxJO0XG7dJqNc6Bsn0hgWZVNmI1+5Vw4fZqZiT/iCeU 53Y6sD5IEmXeffm8IcpWcR45GC1v1IfJHaE/aqVm8VxXlqTGgt9it3J1jB5WH6Ko /U4MDrCgTFixBw39qz1NxUeWFempsqQRLiUgHmOpGogRo5PH8lU7uw1k7oqZk5F9 P6PTk8vUv4sX6FS67iL+wOKYvmO/LZNM1FPI9ND78rFdvO/FwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdeSezQdHUv1ZezaY05dK2Db+nYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNGRmNmZjYWUtODA5Yy0z MzRjLTk0OGMtYTFkYjQ5ZDgwNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEQQTpmlLHNnkkCymg9T1wKMSVgnSxp2f+K0Hj91QSYEXe4jRmG7XL6 s+VKzq2ECPlK3A29lBAWWwBjrCy1KgEHnn2f58DBziE31vwFKWT/wG7UMMEjowYP X52PjztEws9/lAkXRgHwHIDfDYDDgEN+ojlS3x07FnoxgZVkJtobt0A+O0CSJp1X 2HvVPGODfcIizKY6JFHhiMgXntfFzQ3JK5ffRuBSuBlCNfzSoa++Dd3/rDfr03r6 HaJ2E1K3z0zg6nQXKyfRBXapm7SZMTc38jCpvV4aS+2xlL9eopeKlunCdtEMS5i3 vhlODawrUWFYFe0DEbaEszkgvtqMJkQ= -----END CERTIFICATE-----Generated at Fri Sep 19 04:11:10 2025 by rpki-client