$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa File: cf92c81d-a910-339e-84d5-3f8c6baa3900.roa (raw, json) Hash identifier: uBGGXqRxF+rm5f3yjMGaRSZeDHgLMtnd+MRLiYEy1Iw= Subject key identifier: C9:C0:96:66:64:39:3D:CA:AC:2E:A9:EC:D1:49:A3:7D:0F:FC:52:35 Certificate issuer: /CN=83220b5e-8104-4c4e-bbce-305b174b684a Certificate serial: 010D0C9F4328584F4976997CD079A594F16B1400 Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12233 IP address blocks: 172.82.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:99:7c:d0:79:a5:94:f1:6b:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4802847d-ac1e-4c74-a168-ac222ee56d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:91:24:55:4d:bc:1b:a0:a3:fc:82:61:5d: 92:9a:52:6d:ec:96:ee:f7:e6:76:92:69:61:13:28: 77:6a:4e:ee:97:96:47:2b:b6:4f:66:6b:44:fb:9c: 83:1c:bf:c3:c7:0c:03:41:d8:d9:52:13:e8:03:77: 00:25:b3:64:58:8d:23:2b:c0:c0:4f:84:7b:69:f6: ac:e0:9e:6e:67:87:04:02:b3:d7:5c:ed:df:4b:aa: f5:dd:2c:65:0c:b1:81:ec:99:df:b9:60:1e:7b:fe: 62:41:94:a2:e3:2b:8f:25:8f:cf:87:df:47:95:14: 4c:50:37:99:fb:44:53:1f:62:77:43:7f:bd:9a:4b: 17:de:97:78:e7:31:39:62:1f:84:15:e0:80:9b:59: 04:3a:cc:11:c2:79:b8:ba:b1:f2:b9:c7:1f:a5:43: a7:a7:5b:a3:53:51:3c:95:3b:d4:7c:e0:e7:74:f0: 8f:b7:b2:9a:73:86:10:10:5d:03:70:75:7e:e6:b3: 07:80:ba:42:2c:5e:d0:70:78:12:f5:7d:df:7b:76: e9:25:06:d3:b0:de:56:34:6a:14:13:9a:d0:ca:4a: de:d2:e7:8d:ca:34:e7:49:7f:4e:81:cb:ab:47:ee: d8:b0:8b:08:99:f1:fc:05:9f:89:a2:d6:1c:80:e1: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C0:96:66:64:39:3D:CA:AC:2E:A9:EC:D1:49:A3:7D:0F:FC:52:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl X509v3 Authority Key Identifier: keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer sbgp-ipAddrBlock: critical IPv4: 172.82.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c2:99:9d:e5:de:d2:47:80:02:ec:41:32:2d:36:19:f0:73: bb:16:fa:20:92:37:3e:61:e6:36:2d:42:02:90:fb:39:1a:10: 3c:da:0c:76:43:1f:de:da:4f:60:f1:3f:40:0f:d3:dc:c0:e8: 48:2f:88:e0:e6:af:de:a2:ec:67:a8:28:cd:06:a6:ae:f5:ef: 0b:34:2c:1c:1d:c0:c3:67:df:18:7c:0f:85:70:10:d4:02:49: dc:5e:31:50:8d:14:b4:8e:14:49:6c:fd:39:26:1e:ac:2f:e3: ed:4c:eb:15:01:de:f4:25:44:86:9d:6c:6d:c9:f1:6e:28:4e: d6:12:44:e9:a9:15:66:a7:8f:7c:05:50:c4:78:51:64:da:1d: 53:08:84:6b:d9:39:c5:81:25:5e:40:43:ef:85:59:1e:d9:8b: 7c:3a:86:1b:93:91:1b:55:56:0b:60:21:af:6e:de:e8:0b:c8: a7:3a:a5:36:99:5a:7c:e1:2e:af:5b:84:56:7f:23:4f:31:21: e4:0d:56:9d:f7:ac:9d:c0:2b:62:6b:51:07:ec:7b:2d:a5:41: 17:9b:c1:cf:4a:dc:7f:e9:8a:20:9d:a7:8e:81:ac:f7:17:12: ad:c7:90:d5:cc:ee:d4:4a:23:18:dd:00:83:3c:8e:7f:1b:90: a9:97:47:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdpl80HmllPFrFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMjBiNWUtODEwNC00YzRlLWJiY2UtMzA1YjE3NGI2 ODRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDgwMjg0N2QtYWMxZS00Yzc0LWExNjgtYWMyMjJlZTU2ZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyORJFVNvBugo/yCYV2SmlJt7Jbu9+Z2kmlh Eyh3ak7ul5ZHK7ZPZmtE+5yDHL/DxwwDQdjZUhPoA3cAJbNkWI0jK8DAT4R7afas 4J5uZ4cEArPXXO3fS6r13SxlDLGB7JnfuWAee/5iQZSi4yuPJY/Ph99HlRRMUDeZ +0RTH2J3Q3+9mksX3pd45zE5Yh+EFeCAm1kEOswRwnm4urHyuccfpUOnp1ujU1E8 lTvUfODndPCPt7Kac4YQEF0DcHV+5rMHgLpCLF7QcHgS9X3fe3bpJQbTsN5WNGoU E5rQykre0ueNyjTnSX9OgcurR+7YsIsImfH8BZ+JotYcgOEt7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnAlmZkOT3KrC6p7NFJo30P/FI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MzIy MGI1ZS04MTA0LTRjNGUtYmJjZS0zMDViMTc0YjY4NGEvY2Y5MmM4MWQtYTkxMC0z MzllLTg0ZDUtM2Y4YzZiYWEzOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODMyMjBiNWUtODEwNC00YzRlLWJi Y2UtMzA1YjE3NGI2ODRhLzgzMjIwYjVlLTgxMDQtNGM0ZS1iYmNlLTMwNWIxNzRi Njg0YS5jcmwwHwYDVR0jBBgwFoAUoWhThMRveGpjv2l4lcBjMgj5U6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MzIyMGI1ZS04MTA0LTRjNGUtYmJjZS0zMDVi MTc0YjY4NGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLCmZ3l3tJHgALsQTItNhnwc7sW+iCSNz5h5jYtQgKQ+zkaEDzaDHZD H97aT2DxP0AP09zA6EgviODmr96i7GeoKM0Gpq717ws0LBwdwMNn3xh8D4VwENQC SdxeMVCNFLSOFEls/TkmHqwv4+1M6xUB3vQlRIadbG3J8W4oTtYSROmpFWanj3wF UMR4UWTaHVMIhGvZOcWBJV5AQ++FWR7Zi3w6hhuTkRtVVgtgIa9u3ugLyKc6pTaZ WnzhLq9bhFZ/I08xIeQNVp33rJ3AK2JrUQfsey2lQRebwc9K3H/piiCdp46BrPcX Eq3HkNXM7tRKIxjdAIM8jn8bkKmXR2k= -----END CERTIFICATE-----Generated at Sat Sep 26 00:25:50 2026 by rpki-client