$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa File: 4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa (raw, json) Hash identifier: mbFoLLhhdytENoLPc12MK0yv+uX/0+JP3FLqwpGgsN8= Subject key identifier: 28:69:98:5B:D0:AC:1D:D7:91:E5:43:F4:B7:7E:43:F6:66:04:10:37 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584B87B21811BCD2FA78E5591780 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 3356 IP address blocks: 172.84.180.0/24 maxlen: 24 172.84.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:18:11:bc:d2:fa:78:e5:59:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=f80adce3-7d92-4286-88b3-a6674ae9f24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:20:f4:17:aa:4b:fe:94:3b:4c:7a:61:01: 62:14:f6:da:9d:90:e1:da:8c:19:26:cb:f4:8b:a8: f4:59:f4:20:14:c0:f3:33:c6:f7:af:9b:51:19:b2: 79:52:a2:d8:db:60:21:1d:fe:f2:de:77:31:ec:7d: 4b:af:9f:f6:53:92:d3:aa:9e:22:a6:59:99:d8:4f: 9e:9f:62:94:13:fc:f2:d0:5b:da:9c:67:68:9d:d9: bf:6a:2d:29:6c:88:36:f7:46:28:d1:81:1d:87:34: f4:8c:30:50:32:24:29:4e:de:17:55:1f:4a:74:b5: 63:f4:4f:d5:43:73:d5:7b:94:91:49:d6:11:74:72: a2:f1:b1:b1:62:44:62:b0:ff:89:02:17:e4:37:47: 01:f1:a9:c9:49:bf:17:c1:07:41:68:4f:c3:71:e5: 07:4b:fb:70:b6:54:2d:89:35:fa:4f:2f:66:90:de: 29:4e:01:33:7e:e2:70:80:2f:5f:11:b9:4a:72:a6: 00:1e:8d:4f:1c:ac:de:8b:94:98:35:2c:1c:64:ec: 5b:20:78:7b:a6:9a:28:1a:94:dd:29:b2:d6:af:59: ec:13:d7:c2:d2:ac:d5:68:bb:80:75:5e:57:0a:3d: 88:aa:3a:6a:6c:e8:fd:12:15:d4:73:9b:bd:4b:76: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:69:98:5B:D0:AC:1D:D7:91:E5:43:F4:B7:7E:43:F6:66:04:10:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/4ca47a9b-52e4-3efa-8fd1-d15efc20ad46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.180.0/24 172.84.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:aa:39:f1:f3:72:c0:26:2e:23:64:76:82:4d:0e:da:85:8e: a4:1a:7a:88:0f:6f:2c:21:4b:cb:8d:0e:25:77:22:5d:6f:21: 9f:b2:82:8e:84:6d:42:65:7c:29:f1:87:05:9b:f7:7d:48:e2: 30:0d:a4:4f:e0:91:68:85:6d:36:59:b4:5b:87:52:b9:96:83: f9:ac:38:20:b6:96:1b:06:12:1b:fb:66:05:d9:d9:81:a0:6d: 9b:ab:0a:08:eb:b0:23:0e:51:9c:b7:fb:76:6e:31:6e:38:a5: f2:da:d1:03:ee:a5:ba:2b:26:46:6d:cc:16:1b:c4:70:7d:17: 6c:b9:e6:a2:2b:6d:37:31:b3:32:9b:08:80:16:f9:aa:31:6b: bd:41:2a:8e:c7:1f:d9:19:29:e6:89:33:e1:fa:29:df:61:71: 18:8e:20:99:c4:98:6f:a1:be:09:9c:95:9b:dd:55:d2:6d:5f: b9:64:09:75:0f:72:a0:86:10:21:11:50:f3:57:a6:c9:d7:12: 02:04:ea:81:a5:8a:80:ab:aa:11:1f:7b:2a:af:ea:ca:ff:6d: 18:e1:5e:a5:c7:46:46:e7:dc:9a:8d:c3:06:6b:49:a1:03:c4: a5:3d:5c:2e:03:13:c9:e7:6c:69:1c:5f:dc:1b:f9:35:0e:e0: 7a:f9:5c:67 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuHshgRvNL6eOVZF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZjgwYWRjZTMtN2Q5Mi00Mjg2LTg4YjMtYTY2NzRhZTlmMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx8g9BeqS/6UO0x6YQFiFPbanZDh2owZJsv0 i6j0WfQgFMDzM8b3r5tRGbJ5UqLY22AhHf7y3ncx7H1Lr5/2U5LTqp4iplmZ2E+e n2KUE/zy0FvanGdondm/ai0pbIg290Yo0YEdhzT0jDBQMiQpTt4XVR9KdLVj9E/V Q3PVe5SRSdYRdHKi8bGxYkRisP+JAhfkN0cB8anJSb8XwQdBaE/DceUHS/twtlQt iTX6Ty9mkN4pTgEzfuJwgC9fEblKcqYAHo1PHKzei5SYNSwcZOxbIHh7ppooGpTd KbLWr1nsE9fC0qzVaLuAdV5XCj2IqjpqbOj9EhXUc5u9S3ZW2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFChpmFvQrB3XkeVD9Ld+Q/ZmBBA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvNGNhNDdhOWItNTJlNC0z ZWZhLThmZDEtZDE1ZWZjMjBhZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArFS0AwQA rFS+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKGqOfHzcsAmLiNkdoJNDtqFjqQaeogPbywhS8uNDiV3Il1v IZ+ygo6EbUJlfCnxhwWb931I4jANpE/gkWiFbTZZtFuHUrmWg/msOCC2lhsGEhv7 ZgXZ2YGgbZurCgjrsCMOUZy3+3ZuMW44pfLa0QPupborJkZtzBYbxHB9F2y55qIr bTcxszKbCIAW+aoxa71BKo7HH9kZKeaJM+H6Kd9hcRiOIJnEmG+hvgmclZvdVdJt X7lkCXUPcqCGECERUPNXpsnXEgIE6oGlioCrqhEfeyqv6sr/bRjhXqXHRkbn3JqN wwZrSaEDxKU9XC4DE8nnbGkcX9wb+TUO4Hr5XGc= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:12 2025 by rpki-client