$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ce68f14b-f6b1-3348-aee4-1ebc43a45a15.roa File: ce68f14b-f6b1-3348-aee4-1ebc43a45a15.roa (raw, json) Hash identifier: wcEagwG4tP885aGuQ8GpgbRC9FLvxFU2AczZwnVfM+E= Subject key identifier: C4:1C:05:A0:95:97:B2:E0:3A:DE:3A:39:4E:16:1A:D6:61:44:2B:8C Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584B970CCE81CE8FD161F51ACE10 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ce68f14b-f6b1-3348-aee4-1ebc43a45a15.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 6233 IP address blocks: 172.96.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ce:81:ce:8f:d1:61:f5:1a:ce:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=7e534dc1-bd03-461b-ad40-5abdc01e13d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:eb:7b:55:ad:60:77:83:e0:23:ea:a2:3c: b9:fe:45:85:9a:a8:87:43:da:b5:24:71:0e:12:f7: d0:5c:8c:4d:b5:cd:d7:61:05:8b:f5:59:5e:49:7b: e9:cf:39:a5:a1:63:35:92:31:a7:97:b4:7f:f2:1c: cf:30:f1:ee:3e:5e:33:ab:20:0d:73:aa:ea:5b:fc: 63:70:48:c0:15:7c:35:47:a0:0a:35:dd:cb:c1:0e: 48:89:81:1f:6e:ff:66:ce:68:38:f6:96:fa:21:28: 09:d1:6e:34:57:a0:70:99:af:31:4e:89:e8:04:99: 3f:1e:f4:fe:7c:24:66:5e:e1:5f:cb:d2:93:8f:27: 85:8b:f0:33:02:32:31:a9:af:d1:7e:95:9c:c2:60: 8a:91:99:4d:9b:bc:8b:9a:ed:76:6b:cd:de:83:42: 89:c0:5b:22:e0:3b:80:71:cb:cd:1c:d0:ee:67:49: bf:75:b7:43:92:58:f0:42:79:f0:55:25:46:1f:fe: 63:f3:13:a4:14:eb:32:c8:8f:fb:39:a4:18:db:39: 25:2f:c2:28:75:0f:b7:fd:a4:bf:04:2d:9c:70:58: 10:28:d6:ed:a1:54:d1:fc:e2:ae:2f:db:87:2e:3a: 3b:ee:65:ab:65:55:8f:e9:ad:97:cc:55:83:b9:7e: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1C:05:A0:95:97:B2:E0:3A:DE:3A:39:4E:16:1A:D6:61:44:2B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ce68f14b-f6b1-3348-aee4-1ebc43a45a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 172.96.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:19:07:eb:31:19:7e:e0:a6:e0:36:eb:46:9e:05:73:8b:99: c9:ec:56:8d:04:eb:d6:9b:e7:c8:d3:29:ca:51:05:35:aa:4b: 5b:25:37:30:66:1e:65:3a:40:3b:24:25:bc:99:fa:f1:4d:91: 6a:17:70:26:c6:03:3e:8f:7a:1b:94:32:1c:59:ee:97:d1:fe: fa:be:f8:5e:31:b9:72:fc:f9:77:12:f7:cf:85:4d:88:fb:d8: fb:41:f2:fc:31:a6:d9:ab:99:cd:54:48:65:19:59:28:15:87: db:a5:26:d1:0c:8d:41:68:f4:5f:42:09:12:a3:44:eb:29:a0: a2:d3:d5:63:13:9b:f9:af:7f:1d:b9:90:06:52:57:00:ad:6a: e7:fc:ef:74:cf:95:41:a5:50:df:f8:7e:ba:d8:98:fa:63:79: b0:64:cd:f0:a8:92:34:96:a4:30:7c:0a:49:6f:71:ec:e2:b8: 9f:2c:d4:54:5d:f5:36:d7:65:36:9d:fc:2d:08:1d:41:c1:0e: a4:a3:f9:b8:7d:17:91:22:8e:8e:a5:dc:3e:68:48:ed:20:bd: 3e:11:73:8a:c9:b2:e4:f0:35:92:7d:99:80:45:4f:39:87:94: 3f:cb:a5:6a:c5:7c:82:64:f4:d3:6f:f6:eb:8d:bc:a0:4a:b4: da:45:96:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDM6Bzo/RYfUazhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk N2U1MzRkYzEtYmQwMy00NjFiLWFkNDAtNWFiZGMwMWUxM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIrre1WtYHeD4CPqojy5/kWFmqiHQ9q1JHEO EvfQXIxNtc3XYQWL9VleSXvpzzmloWM1kjGnl7R/8hzPMPHuPl4zqyANc6rqW/xj cEjAFXw1R6AKNd3LwQ5IiYEfbv9mzmg49pb6ISgJ0W40V6Bwma8xTonoBJk/HvT+ fCRmXuFfy9KTjyeFi/AzAjIxqa/RfpWcwmCKkZlNm7yLmu12a83eg0KJwFsi4DuA ccvNHNDuZ0m/dbdDkljwQnnwVSVGH/5j8xOkFOsyyI/7OaQY2zklL8IodQ+3/aS/ BC2ccFgQKNbtoVTR/OKuL9uHLjo77mWrZVWP6a2XzFWDuX7kfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQcBaCVl7LgOt46OU4WGtZhRCuMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvY2U2OGYxNGItZjZiMS0z MzQ4LWFlZTQtMWViYzQzYTQ1YTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGB+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIZB+sxGX7gpuA260aeBXOLmcnsVo0E69ab58jTKcpRBTWqS1slNzBm HmU6QDskJbyZ+vFNkWoXcCbGAz6PehuUMhxZ7pfR/vq++F4xuXL8+XcS98+FTYj7 2PtB8vwxptmrmc1USGUZWSgVh9ulJtEMjUFo9F9CCRKjROspoKLT1WMTm/mvfx25 kAZSVwCtauf873TPlUGlUN/4frrYmPpjebBkzfCokjSWpDB8CklvceziuJ8s1FRd 9TbXZTad/C0IHUHBDqSj+bh9F5Eijo6l3D5oSO0gvT4Rc4rJsuTwNZJ9mYBFTzmH lD/LpWrFfIJk9NNv9uuNvKBKtNpFlsQ= -----END CERTIFICATE-----Generated at Wed Oct 22 10:25:14 2025 by rpki-client