$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/580e2833-49c7-3ef3-bd33-e8c6990c5a80.roa File: 580e2833-49c7-3ef3-bd33-e8c6990c5a80.roa (raw, json) Hash identifier: faDmYXwL1TjUrhF8Yzswb1aHVYzRQdf9br3TJWxhtp8= Subject key identifier: D5:77:9A:B1:A5:E8:7D:A1:50:87:B7:7C:5D:25:01:6D:DF:1A:F2:F3 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584B0FEBA5D8D41A3FBBE259B640 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/580e2833-49c7-3ef3-bd33-e8c6990c5a80.roa Signing time: Tue 02 Sep 2025 15:19:38 +0000 ROA not before: Tue 02 Sep 2025 15:19:38 +0000 ROA not after: Mon 01 Dec 2025 16:19:38 +0000 asID: 395839 IP address blocks: 172.84.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:eb:a5:d8:d4:1a:3f:bb:e2:59:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Sep 2 15:19:38 2025 GMT Not After : Dec 1 16:19:38 2025 GMT Subject: CN=d4f4415c-375c-43d5-bdfb-9718e6259f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:db:88:4b:08:e8:06:12:d0:df:ab:50:94: a0:e1:23:fb:fd:73:92:6a:2f:50:7b:31:de:29:98: 1e:7b:0c:cd:0c:cb:41:44:97:5e:e1:73:d4:2e:29: 17:df:39:a6:b8:8f:b5:0d:34:1a:26:f2:89:b9:5f: 36:22:84:dc:34:a4:69:61:6a:03:b2:3a:45:5e:85: e0:47:2e:c5:3e:5c:44:94:7a:02:29:42:5b:0f:ce: b1:11:f5:a6:71:31:98:b7:86:19:21:74:a9:39:34: 85:ae:78:03:31:e5:0e:fb:00:e5:38:3a:79:c5:73: 25:82:d6:ff:c4:5f:ce:45:a2:82:56:23:63:2b:b3: cc:60:37:d4:07:99:d6:4c:31:20:ab:4b:1e:f0:31: a7:70:46:fc:60:a4:02:48:ed:a5:82:f7:b8:1c:ae: 2a:fa:90:42:52:0d:39:0d:df:57:56:0e:96:a4:2a: e9:79:0d:d0:ed:13:10:9a:ff:47:e0:b6:c4:a3:e7: ac:61:71:f5:0b:72:32:c2:ce:d5:1a:77:8f:15:f6: 97:98:57:08:11:fc:1a:9e:d7:63:70:7f:23:6d:78: bb:c3:d3:94:97:23:19:a4:ca:7d:f8:a0:8f:d6:b3: 38:3c:2a:67:fd:77:f8:9c:1c:e1:d8:eb:e1:be:72: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:77:9A:B1:A5:E8:7D:A1:50:87:B7:7C:5D:25:01:6D:DF:1A:F2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/580e2833-49c7-3ef3-bd33-e8c6990c5a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8f:1d:46:dd:f0:f4:24:2f:05:11:97:5c:81:97:77:7c:d9: 8c:75:be:a3:c9:ac:a1:ce:c7:b6:8e:cf:9d:2a:15:bf:57:62: e8:7b:db:90:1b:bb:63:52:61:3d:1e:b5:ea:91:f2:eb:16:ed: 4c:27:09:28:59:92:3b:48:ac:8e:c1:80:c4:52:7e:ba:4c:df: 3a:07:42:84:bc:eb:f3:89:87:a9:2a:7a:7a:b4:16:3c:83:6e: 59:89:82:a8:ce:9d:3b:10:58:54:33:14:e9:53:f3:f3:65:5d: e1:69:2e:4d:bf:b5:e0:2a:41:3d:92:6d:4b:c4:a6:1f:1c:0e: 90:73:28:1f:9a:a5:46:1c:fa:03:74:e8:8a:b3:06:76:61:2c: 01:04:58:66:f7:8c:11:a7:c1:c2:55:a4:82:31:a4:31:ee:79: 6f:24:01:e7:27:89:e5:59:d2:38:0a:7b:e0:b3:2e:0b:61:3e: db:e7:c3:a0:94:c0:7d:54:2f:58:52:14:88:43:33:cc:af:37: 8d:3c:57:99:f9:03:1e:b8:4b:3d:54:6e:5a:ad:1a:22:8e:ff: 92:d1:19:25:6b:f3:92:7e:74:7e:26:90:22:6c:e7:17:31:6d: f5:25:fe:22:e1:93:1c:29:12:4c:29:d5:00:de:b5:5e:44:b6: 9f:ff:84:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsP66XY1Bo/u+JZtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDkwMjE1MTkzOFoXDTI1MTIwMTE2MTkzOFowLzEtMCsGA1UEAxMk ZDRmNDQxNWMtMzc1Yy00M2Q1LWJkZmItOTcxOGU2MjU5ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcDbiEsI6AYS0N+rUJSg4SP7/XOSai9QezHe KZgeewzNDMtBRJde4XPULikX3zmmuI+1DTQaJvKJuV82IoTcNKRpYWoDsjpFXoXg Ry7FPlxElHoCKUJbD86xEfWmcTGYt4YZIXSpOTSFrngDMeUO+wDlODp5xXMlgtb/ xF/ORaKCViNjK7PMYDfUB5nWTDEgq0se8DGncEb8YKQCSO2lgve4HK4q+pBCUg05 Dd9XVg6WpCrpeQ3Q7RMQmv9H4LbEo+esYXH1C3Iyws7VGnePFfaXmFcIEfwantdj cH8jbXi7w9OUlyMZpMp9+KCP1rM4PCpn/Xf4nBzh2OvhvnL04QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV3mrGl6H2hUIe3fF0lAW3fGvLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvNTgwZTI4MzMtNDljNy0z ZWYzLWJkMzMtZThjNjk5MGM1YTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFRdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWPHUbd8PQkLwURl1yBl3d82Yx1vqPJrKHOx7aOz50qFb9XYuh725Ab u2NSYT0eteqR8usW7UwnCShZkjtIrI7BgMRSfrpM3zoHQoS86/OJh6kqenq0FjyD blmJgqjOnTsQWFQzFOlT8/NlXeFpLk2/teAqQT2SbUvEph8cDpBzKB+apUYc+gN0 6IqzBnZhLAEEWGb3jBGnwcJVpIIxpDHueW8kAecnieVZ0jgKe+CzLgthPtvnw6CU wH1UL1hSFIhDM8yvN408V5n5Ax64Sz1UblqtGiKO/5LRGSVr85J+dH4mkCJs5xcx bfUl/iLhkxwpEkwp1QDetV5Etp//hFs= -----END CERTIFICATE-----Generated at Mon Sep 15 19:44:29 2025 by rpki-client