$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/c3587856-41a2-3eb4-b7b2-8c5ce4faf754.roa File: c3587856-41a2-3eb4-b7b2-8c5ce4faf754.roa (raw, json) Hash identifier: vF8xhZMqtJa0MC0X1DZ2lptCOM/ubOLbuAz0pl/b8PE= Subject key identifier: A4:49:A3:EC:F1:DE:DA:6E:71:C2:B7:3A:69:95:2D:47:F7:AB:DB:BF Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584B901232BE2A201D81847E98C0 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/c3587856-41a2-3eb4-b7b2-8c5ce4faf754.roa Signing time: Sat 18 Oct 2025 13:00:39 +0000 ROA not before: Sat 18 Oct 2025 13:00:39 +0000 ROA not after: Fri 16 Jan 2026 14:00:39 +0000 asID: 134450 IP address blocks: 172.84.176.0/24 maxlen: 24 172.84.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:12:32:be:2a:20:1d:81:84:7e:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Oct 18 13:00:39 2025 GMT Not After : Jan 16 14:00:39 2026 GMT Subject: CN=7a4db24f-db89-4660-b78f-ab3f3149c1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:07:cb:75:64:9f:8b:5a:a4:07:81:91:f1: 83:2b:78:74:1e:8a:3c:21:3f:85:1d:56:ce:f8:90: e7:84:2e:bd:93:94:b6:d9:cb:3a:76:8f:f3:12:a8: 24:ba:ee:76:ec:9d:80:93:9d:23:46:93:6b:d9:c0: 63:ea:98:9a:8c:55:1c:d6:c7:c7:89:49:88:37:ca: 01:b3:91:d3:69:a3:c8:72:cd:4c:f3:67:b2:4e:d7: b5:82:a4:bf:c5:e6:34:e8:3c:f7:37:65:9f:d8:18: c7:06:5e:48:79:35:d9:a2:50:67:e5:16:a1:9d:7d: af:f4:64:49:39:30:4b:f9:c7:d5:45:e2:c5:44:94: 89:09:6f:0f:b8:c3:53:92:c0:f5:4c:ea:e0:be:9f: d9:fe:1d:e7:b3:65:56:20:76:bc:cd:2e:cd:5f:86: 79:ce:e8:ad:4f:d9:89:4f:b3:65:e0:e4:93:61:22: ef:1a:eb:fd:bd:c2:d6:ca:82:8d:b4:7a:14:3e:dc: 81:ff:37:a7:c0:a5:9a:6d:59:36:60:eb:88:01:31: 39:af:c4:0c:cc:4e:4e:d9:fa:8c:96:01:67:6a:07: 56:4f:f1:4c:00:35:27:f6:80:c5:0d:db:d8:1c:74: 74:d4:31:77:15:08:06:97:f6:5a:02:36:7a:a6:9f: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:49:A3:EC:F1:DE:DA:6E:71:C2:B7:3A:69:95:2D:47:F7:AB:DB:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/c3587856-41a2-3eb4-b7b2-8c5ce4faf754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0a:9c:89:bb:3a:fe:44:48:08:5b:bf:c2:82:73:0e:d4:88: 6d:a7:e9:0b:ea:ce:ce:e3:9e:30:de:82:dc:f2:ce:42:bd:b8: ce:4a:c8:34:bd:be:89:2c:58:fe:ad:4a:2b:39:86:05:14:f8: 69:a9:36:0b:8c:f1:c3:df:80:d7:eb:76:75:ed:e4:1c:f5:da: 44:2e:ab:8c:06:df:ab:58:1e:42:db:d0:85:dc:e7:db:f2:aa: 1e:17:0f:4d:10:d5:bb:8f:89:e7:d5:c5:e5:69:70:44:bb:42: d3:54:04:9a:36:43:92:71:22:6d:bd:66:32:c0:e3:e5:c3:3f: 3f:09:48:8c:b9:f1:06:be:b7:94:7c:80:5f:fa:f8:ce:0e:d0: 7c:8a:7a:a9:27:53:ab:c4:ce:95:1c:bf:8b:aa:9f:ab:31:d0: 2a:f8:2a:04:dd:51:ed:a8:30:99:06:e8:f6:d5:5a:ae:24:b1: ab:e9:2e:e4:01:5a:c3:e8:0b:fb:9c:61:cd:4f:25:9d:d8:b2: bd:07:4b:3c:8b:b2:1e:a1:d0:45:ec:f0:8d:96:f7:28:ee:2f: 0d:86:94:ab:25:d7:38:d4:07:98:d5:fc:2a:fc:ed:be:bf:c2: 3a:af:2f:33:90:68:d4:2a:d4:c0:c6:f7:dd:7b:e7:c8:6c:d8: 03:5b:5e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuQEjK+KiAdgYR+mMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MTAxODEzMDAzOVoXDTI2MDExNjE0MDAzOVowLzEtMCsGA1UEAxMk N2E0ZGIyNGYtZGI4OS00NjYwLWI3OGYtYWIzZjMxNDljMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocgHy3Vkn4tapAeBkfGDK3h0Hoo8IT+FHVbO +JDnhC69k5S22cs6do/zEqgkuu527J2Ak50jRpNr2cBj6piajFUc1sfHiUmIN8oB s5HTaaPIcs1M82eyTte1gqS/xeY06Dz3N2Wf2BjHBl5IeTXZolBn5RahnX2v9GRJ OTBL+cfVReLFRJSJCW8PuMNTksD1TOrgvp/Z/h3ns2VWIHa8zS7NX4Z5zuitT9mJ T7Nl4OSTYSLvGuv9vcLWyoKNtHoUPtyB/zenwKWabVk2YOuIATE5r8QMzE5O2fqM lgFnagdWT/FMADUn9oDFDdvYHHR01DF3FQgGl/ZaAjZ6pp97DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRJo+zx3tpuccK3OmmVLUf3q9u/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYzM1ODc4NTYtNDFhMi0z ZWI0LWI3YjItOGM1Y2U0ZmFmNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrFSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgKnIm7Ov5ESAhbv8KCcw7UiG2n6Qvqzs7jnjDegtzyzkK9uM5KyDS9 voksWP6tSis5hgUU+GmpNguM8cPfgNfrdnXt5Bz12kQuq4wG36tYHkLb0IXc59vy qh4XD00Q1buPiefVxeVpcES7QtNUBJo2Q5JxIm29ZjLA4+XDPz8JSIy58Qa+t5R8 gF/6+M4O0HyKeqknU6vEzpUcv4uqn6sx0Cr4KgTdUe2oMJkG6PbVWq4ksavpLuQB WsPoC/ucYc1PJZ3Ysr0HSzyLsh6h0EXs8I2W9yjuLw2GlKsl1zjUB5jV/Cr87b6/ wjqvLzOQaNQq1MDG991758hs2ANbXjU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:36 2025 by rpki-client