$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa File: bfb03a9d-6724-3257-b89f-a663facf63ac.roa (raw, json) Hash identifier: IwoMd5wS3b8Luq3eWECch5BfwAtPZRpZUuWvGmvoJWo= Subject key identifier: 40:30:D0:D2:3E:79:DF:68:83:C5:6B:4D:4F:DE:43:E6:9C:F7:A4:6A Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584B5C6C76A61AF8FD4E8E4C3F80 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 50304 IP address blocks: 172.84.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:76:a6:1a:f8:fd:4e:8e:4c:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=f7ec581a-92fb-4de1-96ba-4c8aa0f74a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:53:ed:69:8a:db:0c:6d:13:fa:2f:25:ea: a0:72:9f:cd:ff:1f:ca:57:34:58:87:ca:36:c3:c3: dd:1f:c0:30:34:4c:2b:1f:ed:a7:d7:d1:42:38:bb: 19:fa:de:62:94:a7:5e:a2:4c:1e:ae:e4:3c:c9:8f: 06:67:ce:03:3b:89:c6:c9:26:e8:8d:ab:9a:47:80: 39:07:20:9c:ca:de:42:99:7c:58:a8:f5:64:d6:a1: 2b:15:1d:c7:eb:48:40:33:a7:ae:2e:0a:91:2a:9e: d3:c2:31:4d:1d:34:7c:c2:33:e0:9f:50:75:5a:33: 57:10:a0:8c:48:6c:48:6d:f3:84:11:16:f7:81:4e: 2b:ba:9a:8c:e3:0b:06:23:09:88:4c:c7:28:81:7e: c7:fd:9e:ef:6b:2c:49:42:4f:77:20:77:02:b1:4e: 74:1e:a4:82:a4:af:1a:46:e9:30:00:b4:e0:fd:aa: 09:fd:aa:7f:09:f9:07:c2:23:28:7e:07:e0:b5:b6: 82:92:70:9a:0a:8c:10:62:75:16:a2:56:3d:ac:78: ca:1e:7b:14:49:59:f5:28:29:78:9e:80:90:75:7a: 14:4d:98:d0:63:cc:33:27:7a:d6:b3:e7:99:80:ea: ec:9c:50:4b:a8:fc:0c:03:d8:bd:4e:5f:6d:2d:41: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:30:D0:D2:3E:79:DF:68:83:C5:6B:4D:4F:DE:43:E6:9C:F7:A4:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/bfb03a9d-6724-3257-b89f-a663facf63ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:af:f7:26:33:ba:e4:f2:fd:d2:bf:9b:d0:1f:05:b3:b2:d1: e9:d5:e6:30:59:55:bc:33:5d:8d:ce:02:11:a4:57:2d:1d:9f: 19:d3:8e:b9:41:9e:c4:3d:cf:b0:6d:6d:ac:d4:ff:0b:fc:81: a5:45:dd:2b:b2:70:b6:fe:b5:1b:39:1f:ed:13:82:fe:1d:d2: ec:bf:17:71:e9:1d:57:fd:5e:5d:5a:e5:30:1f:79:78:62:ca: 1f:4b:7c:31:25:54:bc:5e:d1:67:66:0d:ff:de:13:ec:65:48: c2:70:b6:a7:f3:18:87:b8:35:26:b9:7b:e4:1b:92:80:dc:8f: 84:46:9e:38:77:51:f3:d9:0d:cb:f1:17:ee:ed:1e:6d:e7:cf: 0e:5f:4d:00:a9:d9:8a:bf:43:2c:16:26:fc:99:30:1a:e8:6e: 6f:b1:91:3a:7a:94:59:95:98:aa:8f:72:3a:1d:71:69:ed:75: 96:84:db:8f:77:17:3e:27:9f:8d:87:41:fb:67:47:35:ba:18: 24:66:ad:ea:d3:e3:ec:d4:13:ef:d2:25:c1:d1:00:f6:6d:db: 4a:30:c2:83:5e:d8:68:84:ac:1e:c6:5e:ec:e3:18:ff:5e:07: 88:6f:c2:c9:60:35:00:ed:e8:75:ad:e6:49:27:10:7b:9b:7c: 42:9a:a0:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHamGvj9To5MP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZjdlYzU4MWEtOTJmYi00ZGUxLTk2YmEtNGM4YWEwZjc0YTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMxT7WmK2wxtE/ovJeqgcp/N/x/KVzRYh8o2 w8PdH8AwNEwrH+2n19FCOLsZ+t5ilKdeokweruQ8yY8GZ84DO4nGySbojauaR4A5 ByCcyt5CmXxYqPVk1qErFR3H60hAM6euLgqRKp7TwjFNHTR8wjPgn1B1WjNXEKCM SGxIbfOEERb3gU4rupqM4wsGIwmITMcogX7H/Z7vayxJQk93IHcCsU50HqSCpK8a RukwALTg/aoJ/ap/CfkHwiMofgfgtbaCknCaCowQYnUWolY9rHjKHnsUSVn1KCl4 noCQdXoUTZjQY8wzJ3rWs+eZgOrsnFBLqPwMA9i9Tl9tLUGLKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAw0NI+ed9og8VrTU/eQ+ac96RqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYmZiMDNhOWQtNjcyNC0z MjU3LWI4OWYtYTY2M2ZhY2Y2M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFS2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyv9yYzuuTy/dK/m9AfBbOy0enV5jBZVbwzXY3OAhGkVy0dnxnTjrlB nsQ9z7BtbazU/wv8gaVF3SuycLb+tRs5H+0Tgv4d0uy/F3HpHVf9Xl1a5TAfeXhi yh9LfDElVLxe0WdmDf/eE+xlSMJwtqfzGIe4NSa5e+QbkoDcj4RGnjh3UfPZDcvx F+7tHm3nzw5fTQCp2Yq/QywWJvyZMBrobm+xkTp6lFmVmKqPcjodcWntdZaE2493 Fz4nn42HQftnRzW6GCRmrerT4+zUE+/SJcHRAPZt20owwoNe2GiErB7GXuzjGP9e B4hvwslgNQDt6HWt5kknEHubfEKaoNU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:54:24 2025 by rpki-client