$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa File: b343567e-a49e-3300-8a5b-72a22b6d70aa.roa (raw, json) Hash identifier: 6to5KdUy/u4MEmAFicgEPdrTFuVjTX5eAjDU8pzqj4A= Subject key identifier: 22:97:D9:BB:B4:16:F9:F9:33:91:EA:78:B0:5E:2E:00:C0:7C:8A:B2 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584B48E1B5B0C4A94C089AFDEF00 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 1239 IP address blocks: 172.84.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b5:b0:c4:a9:4c:08:9a:fd:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f4a30474-a07f-4793-8c8c-2d737e5853ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:50:fc:25:56:56:ae:f7:0f:9f:69:d1:5f:4d: 10:20:e9:83:86:f5:82:a3:02:43:4e:d7:35:b7:bf: b5:8c:e3:11:f4:64:6d:b0:81:e9:2f:21:c3:50:87: 77:82:61:3e:37:da:7d:1d:f3:06:8c:e7:97:8c:e4: 11:ec:6b:1f:e8:81:e1:6c:56:98:2f:88:7a:8e:b4: 29:68:f0:62:d9:80:b2:2c:bb:28:d2:69:0b:b9:14: 84:18:11:eb:0a:6c:8e:57:20:0c:7d:ef:33:ff:36: 02:7f:21:6c:22:55:da:6c:01:1d:b7:d4:af:0b:b2: f3:8f:a7:79:a3:37:05:56:15:67:07:a8:e2:1b:1a: 70:6d:3e:d1:94:d8:b3:f5:a8:00:e7:ec:84:dd:06: 87:38:c5:d2:85:d0:0f:e0:bd:ff:32:f8:b0:9d:bf: 3b:66:4a:5b:37:85:fc:d0:46:83:e5:b3:56:4c:92: 53:16:95:84:2b:67:60:6c:83:a2:be:a2:b6:ec:bd: 0e:cb:12:82:e8:19:8b:af:9f:e7:f0:95:9a:ed:49: d5:24:00:15:94:6f:b5:4a:d7:bb:d0:75:64:db:63: 08:ef:7d:ec:b4:15:57:4e:48:fe:6b:3e:1b:a9:79: c4:63:0b:2a:4e:1a:33:ba:bd:21:5f:eb:be:1e:e1: 75:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:97:D9:BB:B4:16:F9:F9:33:91:EA:78:B0:5E:2E:00:C0:7C:8A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5b:f8:a2:87:77:65:d5:89:71:cb:61:3a:84:bc:4b:91:aa: d2:ee:7e:b4:af:36:48:d6:4d:60:5e:ae:40:fa:bf:6d:ee:7b: 95:ce:ee:45:2c:76:be:00:45:b6:d8:18:d0:08:4b:82:45:d8: ec:b5:2e:23:21:4f:0c:e2:4d:c7:b4:f3:f3:7e:27:88:56:5b: 58:2b:b9:90:78:63:ee:09:f9:08:92:fc:50:ab:b4:85:4b:02: df:d6:5b:dd:64:76:00:3f:70:57:e1:60:44:0a:6d:13:40:75: 69:e9:d9:98:c1:42:e6:2c:31:0f:f7:94:c6:62:9f:54:8a:18: 4e:55:0d:ba:a0:fe:0c:6b:ce:d4:2a:56:d9:aa:42:2b:d7:38: 1c:af:29:9c:35:92:79:95:8c:5d:5d:56:d0:43:fb:c8:67:40: 88:fc:66:c8:8f:49:48:11:2b:4f:f4:1e:18:cb:db:d2:fb:bc: 3e:f1:4d:88:b5:c9:2a:55:55:33:cd:11:47:48:20:ea:c1:e0: 5b:2a:f3:ff:b9:a5:d7:aa:06:53:ab:99:e8:76:15:c3:a5:11: 62:8e:35:bb:24:18:b7:99:bf:78:72:d2:ac:a9:4b:aa:31:ea: 80:89:ba:8a:7f:26:9f:fd:65:73:97:49:b8:ee:d8:73:82:55: e5:47:a1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bWwxKlMCJr97wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjRhMzA0NzQtYTA3Zi00NzkzLThjOGMtMmQ3MzdlNTg1M2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklD8JVZWrvcPn2nRX00QIOmDhvWCowJDTtc1 t7+1jOMR9GRtsIHpLyHDUId3gmE+N9p9HfMGjOeXjOQR7Gsf6IHhbFaYL4h6jrQp aPBi2YCyLLso0mkLuRSEGBHrCmyOVyAMfe8z/zYCfyFsIlXabAEdt9SvC7Lzj6d5 ozcFVhVnB6jiGxpwbT7RlNiz9agA5+yE3QaHOMXShdAP4L3/Mviwnb87ZkpbN4X8 0EaD5bNWTJJTFpWEK2dgbIOivqK27L0OyxKC6BmLr5/n8JWa7UnVJAAVlG+1Ste7 0HVk22MI733stBVXTkj+az4bqXnEYwsqThozur0hX+u+HuF1NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKX2bu0Fvn5M5HqeLBeLgDAfIqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYjM0MzU2N2UtYTQ5ZS0z MzAwLThhNWItNzJhMjJiNmQ3MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFS9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZb+KKHd2XViXHLYTqEvEuRqtLufrSvNkjWTWBerkD6v23ue5XO7kUs dr4ARbbYGNAIS4JF2Oy1LiMhTwziTce08/N+J4hWW1gruZB4Y+4J+QiS/FCrtIVL At/WW91kdgA/cFfhYEQKbRNAdWnp2ZjBQuYsMQ/3lMZin1SKGE5VDbqg/gxrztQq VtmqQivXOByvKZw1knmVjF1dVtBD+8hnQIj8ZsiPSUgRK0/0HhjL29L7vD7xTYi1 ySpVVTPNEUdIIOrB4Fsq8/+5pdeqBlOrmeh2FcOlEWKONbskGLeZv3hy0qypS6ox 6oCJuop/Jp/9ZXOXSbju2HOCVeVHoco= -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:28 2025 by rpki-client