$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2aad3b13-771d-307e-89a0-1c80d6c17aa3.roa File: 2aad3b13-771d-307e-89a0-1c80d6c17aa3.roa (raw, json) Hash identifier: FQZM4aB8jpcn5IsX83hmaCAwMIhYxJN7HV/4EiZQ1DA= Subject key identifier: BB:91:91:4B:ED:E7:57:37:34:FB:6B:C7:44:9C:33:DE:6C:AD:D6:38 Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F4328584B255634E7F095A82045C32000 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2aad3b13-771d-307e-89a0-1c80d6c17aa3.roa Signing time: Wed 10 Sep 2025 07:26:18 +0000 ROA not before: Wed 10 Sep 2025 07:26:18 +0000 ROA not after: Tue 09 Dec 2025 08:26:18 +0000 asID: 834 IP address blocks: 172.96.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:56:34:e7:f0:95:a8:20:45:c3:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Sep 10 07:26:18 2025 GMT Not After : Dec 9 08:26:18 2025 GMT Subject: CN=791555aa-e91b-4005-b546-c28bec483b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:0f:d9:46:db:5d:ec:60:91:9a:b3:c0:30: 27:ad:40:44:c5:bf:fb:28:f8:76:ef:5d:67:05:12: 30:76:ff:0a:59:91:73:79:3a:48:50:b0:8a:a3:a3: 05:27:fc:93:04:56:ad:ac:a6:59:bc:d2:d4:8e:98: dc:7b:55:ae:b5:2d:0c:ca:c7:39:1d:3f:3b:75:aa: 16:97:86:45:7d:8b:80:0e:f7:5b:15:95:eb:9c:9d: a3:3b:f1:fb:ce:ad:b8:9e:cf:49:2e:dc:9f:ef:53: 8d:9b:89:7d:25:5e:d3:5f:f3:16:61:d1:8c:48:a5: 26:ec:be:ca:7e:6e:93:ab:7d:ce:46:3a:0d:a3:0c: 45:d9:e5:bd:ce:c6:e5:f3:36:d3:16:fd:d4:4e:8a: d2:89:88:d2:2d:71:2b:75:b2:23:4c:b3:63:a1:8f: 49:64:db:44:03:6c:0c:6f:5a:fb:6d:76:dc:95:b5: ac:0a:fd:b0:4f:d3:3f:8e:5e:49:3f:cc:d3:ef:3f: c3:be:a6:74:1b:17:7d:9e:9e:2a:6e:d5:ca:17:bf: 79:6e:3b:10:f7:ab:61:b9:fe:bc:63:28:32:b9:33: f4:94:e2:c3:ad:70:b5:b2:3c:77:ee:22:35:4b:73: 8d:b8:f4:ad:e3:e8:18:58:c0:88:fa:4a:78:5f:0c: d6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:91:91:4B:ED:E7:57:37:34:FB:6B:C7:44:9C:33:DE:6C:AD:D6:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2aad3b13-771d-307e-89a0-1c80d6c17aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 172.96.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ac:40:1d:ed:de:ba:35:32:b2:54:4a:f8:d8:65:7c:2b:49: 07:19:71:2a:1c:0d:7b:87:b6:4c:17:22:02:a5:7f:89:e1:8e: ce:99:a8:1e:b9:a5:d7:d4:32:8d:8a:99:6c:11:c0:8b:3f:6b: 2a:94:f4:74:8e:7d:87:11:b2:f7:9b:b1:c0:c0:1f:47:2d:3e: 8c:cb:92:96:a3:cd:02:35:1a:e0:ef:b3:3a:c1:0c:89:f9:d0: e5:7f:f7:f1:2f:a4:68:9b:8d:e9:b4:d8:d6:82:e0:f0:bc:cd: c6:1d:c3:56:c6:41:04:f4:e0:36:30:90:5e:f3:b0:16:ec:2a: 41:a1:a2:15:97:cf:1a:54:83:fd:94:0a:5d:c7:df:c1:42:47: e2:d0:53:18:3f:e9:21:5a:13:77:91:d0:25:a5:e6:d9:ae:e4: f3:cb:c0:c2:89:75:0e:88:71:6a:7c:c7:e0:83:7f:ad:7b:68: bb:82:57:4f:c3:77:d8:a3:28:a9:18:2e:11:2e:51:2f:e8:15: 5e:b7:25:7d:fa:33:cb:12:0d:c2:26:25:58:cc:f7:47:bc:78: 92:ca:79:20:db:55:d9:2e:7b:8a:31:53:a4:af:93:4f:bf:6b: 2f:49:bd:14:13:07:c6:7d:db:6c:1a:f1:92:b9:16:37:12:2a: 71:55:4d:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEslVjTn8JWoIEXDIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MDkxMDA3MjYxOFoXDTI1MTIwOTA4MjYxOFowLzEtMCsGA1UEAxMk NzkxNTU1YWEtZTkxYi00MDA1LWI1NDYtYzI4YmVjNDgzYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo08P2UbbXexgkZqzwDAnrUBExb/7KPh2711n BRIwdv8KWZFzeTpIULCKo6MFJ/yTBFatrKZZvNLUjpjce1WutS0Mysc5HT87daoW l4ZFfYuADvdbFZXrnJ2jO/H7zq24ns9JLtyf71ONm4l9JV7TX/MWYdGMSKUm7L7K fm6Tq33ORjoNowxF2eW9zsbl8zbTFv3UTorSiYjSLXErdbIjTLNjoY9JZNtEA2wM b1r7bXbclbWsCv2wT9M/jl5JP8zT7z/DvqZ0Gxd9np4qbtXKF795bjsQ96thuf68 YygyuTP0lOLDrXC1sjx37iI1S3ONuPSt4+gYWMCI+kp4XwzWYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuRkUvt51c3NPtrx0ScM95srdY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvMmFhZDNiMTMtNzcxZC0z MDdlLTg5YTAtMWM4MGQ2YzE3YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqsQB3t3ro1MrJUSvjYZXwrSQcZcSocDXuHtkwXIgKlf4nhjs6ZqB65 pdfUMo2KmWwRwIs/ayqU9HSOfYcRsvebscDAH0ctPozLkpajzQI1GuDvszrBDIn5 0OV/9/EvpGibjem02NaC4PC8zcYdw1bGQQT04DYwkF7zsBbsKkGhohWXzxpUg/2U Cl3H38FCR+LQUxg/6SFaE3eR0CWl5tmu5PPLwMKJdQ6IcWp8x+CDf617aLuCV0/D d9ijKKkYLhEuUS/oFV63JX36M8sSDcImJVjM90e8eJLKeSDbVdkue4oxU6Svk0+/ ay9JvRQTB8Z922wa8ZK5FjcSKnFVTdM= -----END CERTIFICATE-----Generated at Tue Sep 16 10:19:13 2025 by rpki-client