$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa File: 20212cf5-9652-3db8-891b-2e568988220d.roa (raw, json) Hash identifier: PtbkvET2onM2Nh/3go5LMohAQ42xuBwr66WTk7Mg6QE= Subject key identifier: 37:C8:B1:CD:D9:2E:41:75:49:96:EF:E8:E3:18:59:86:DC:8B:6D:F2 Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F4328584ADECBBCF6D013E4BC2265ECC0 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 172.82.211.0/24 maxlen: 24 172.82.213.0/24 maxlen: 24 172.82.225.0/24 maxlen: 24 172.82.237.0/24 maxlen: 24 192.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bc:f6:d0:13:e4:bc:22:65:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=6d2b2b77-bec6-45b4-8ab6-648cdb8e31e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:bf:93:e6:43:32:13:a1:7d:30:3c:6c:46: 81:5f:90:c8:a6:65:94:4b:84:50:d7:68:98:8f:4e: 48:0d:dc:e6:c7:59:3f:44:68:63:d8:8a:18:bf:4b: 93:24:c2:69:d6:c8:27:87:be:15:6a:47:a6:78:84: 14:cc:9e:25:fd:d8:19:f6:f3:36:49:0d:8e:98:e0: 7c:00:59:e3:71:87:97:06:0b:1b:0b:68:d1:9d:66: f8:f7:a0:fe:b5:9f:de:96:65:44:ca:e7:17:33:a5: f5:3b:19:da:9f:4e:18:b1:0b:6c:5c:63:f2:52:1d: 68:ae:06:bc:61:07:47:5c:3c:06:6b:1e:12:4c:19: b0:9f:90:7b:50:f9:25:4e:06:cf:1f:50:ff:e7:53: ab:2b:4a:99:2d:09:f2:18:1e:f6:2e:59:0d:2d:3c: 43:4a:cb:4d:e8:bb:18:61:f0:a6:27:bc:bc:53:bd: fb:e3:86:2e:87:6d:17:e6:3c:ff:1b:5f:bb:ea:ec: cd:01:34:a3:ce:48:c4:2e:ba:81:d5:18:bb:c5:c8: 86:8a:3c:78:a5:01:86:99:9e:e0:81:36:b8:5e:88: 2a:09:c9:4e:d5:6a:b7:ef:5c:bc:96:13:db:34:37: a3:bf:74:86:11:b3:b7:e2:cd:7b:33:3f:b9:7c:c1: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C8:B1:CD:D9:2E:41:75:49:96:EF:E8:E3:18:59:86:DC:8B:6D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv4: 172.82.211.0/24 172.82.213.0/24 172.82.225.0/24 172.82.237.0/24 192.243.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a5:a6:29:dc:66:87:87:1d:61:88:41:2b:fd:42:21:e7:fa: 47:c2:73:c1:a5:62:b0:40:3a:11:59:38:06:1e:f5:73:2f:af: c8:dc:b8:30:5e:9d:dd:39:17:74:4a:39:86:b0:47:4c:df:8d: b1:cc:a6:21:e7:39:d5:4d:f5:d1:f8:9e:0f:cd:29:45:bf:f7: 26:08:3d:20:b5:50:e4:8a:7c:aa:db:c7:b0:b4:58:62:de:4e: 24:10:cd:f9:08:c9:c0:7e:db:30:fb:dc:65:bb:31:0d:58:ab: 3d:ea:8a:81:db:fb:a0:79:7a:9e:da:4d:65:4a:cd:5f:d3:c8: aa:4c:3a:49:20:85:76:2f:fb:e3:d2:23:93:a1:19:b7:31:2a: 79:f1:8a:ca:55:f3:e2:3e:aa:2f:8a:ab:24:78:52:bd:6d:e2: 1b:76:c8:b1:0d:bd:35:26:4e:ab:38:d5:36:e3:ce:78:2c:7b: e9:2a:bb:8f:7c:0e:95:4a:8f:dc:ea:49:b4:b5:7a:c2:8f:2b: 25:fa:0e:a4:1f:a1:96:eb:bf:78:6b:77:58:72:61:a4:a1:90: 5c:f7:4a:73:91:1b:db:eb:53:82:33:78:3d:4c:a1:0d:99:7c: 5b:75:46:eb:e0:20:33:fe:65:86:59:fe:08:ec:ac:d9:a3:0a: 8f:8c:5f:f3 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWErey7z20BPkvCJl7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NmQyYjJiNzctYmVjNi00NWI0LThhYjYtNjQ4Y2RiOGUzMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtG/k+ZDMhOhfTA8bEaBX5DIpmWUS4RQ12iY j05IDdzmx1k/RGhj2IoYv0uTJMJp1sgnh74VakemeIQUzJ4l/dgZ9vM2SQ2OmOB8 AFnjcYeXBgsbC2jRnWb496D+tZ/elmVEyucXM6X1Oxnan04YsQtsXGPyUh1orga8 YQdHXDwGax4STBmwn5B7UPklTgbPH1D/51OrK0qZLQnyGB72LlkNLTxDSstN6LsY YfCmJ7y8U73744Yuh20X5jz/G1+76uzNATSjzkjELrqB1Ri7xciGijx4pQGGmZ7g gTa4XogqCclO1Wq371y8lhPbNDejv3SGEbO34s17Mz+5fMHTNwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFDfIsc3ZLkF1SZbv6OMYWYbci23yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvMjAyMTJjZjUtOTY1Mi0z ZGI4LTg5MWItMmU1Njg5ODgyMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQArFLTAwQA rFLVAwQArFLhAwQArFLtAwQAwPP1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAulpincZoeHHWGIQSv9QiHn +kfCc8GlYrBAOhFZOAYe9XMvr8jcuDBend05F3RKOYawR0zfjbHMpiHnOdVN9dH4 ng/NKUW/9yYIPSC1UOSKfKrbx7C0WGLeTiQQzfkIycB+2zD73GW7MQ1Yqz3qioHb +6B5ep7aTWVKzV/TyKpMOkkghXYv++PSI5OhGbcxKnnxispV8+I+qi+KqyR4Ur1t 4ht2yLENvTUmTqs41Tbjzngse+kqu498DpVKj9zqSbS1esKPKyX6DqQfoZbrv3hr d1hyYaShkFz3SnORG9vrU4IzeD1MoQ2ZfFt1RuvgIDP+ZYZZ/gjsrNmjCo+MX/M= -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:51 2025 by rpki-client