$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa File: 1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa (raw, json) Hash identifier: eDkYiMKkUT2aFrfzK2KObTDMEvHLQzIODm25OGYDaoc= Subject key identifier: D4:78:79:9A:3D:A6:7F:B3:B0:19:76:52:16:98:A1:AD:11:EE:E2:83 Certificate issuer: /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Certificate serial: 010D0C9F4328584AECC121BDC38D5746D8389E00 Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 395214 IP address blocks: 172.82.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:21:bd:c3:8d:57:46:d8:38:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=70f62cd7-c77b-42d9-b1cd-c9a5e7b8ff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:b3:10:66:be:97:dd:ac:dc:81:e4:23:69: cb:5d:44:b2:f6:a1:22:d3:58:95:af:5d:41:fc:49: 8a:44:00:53:36:bc:26:fb:8c:9f:02:48:eb:cc:18: 12:f3:61:71:82:3c:c0:61:fd:8a:cc:b9:b6:1d:af: b6:6b:fe:68:3f:4d:9a:bd:a3:11:c0:c0:02:74:29: b7:aa:25:0f:6e:b3:aa:1d:54:63:5c:e0:51:de:2e: e3:fa:d8:1f:47:89:6e:de:8c:57:8f:54:51:3c:da: c3:12:a9:79:9d:37:46:f0:2d:d4:a4:97:58:2c:b9: 86:15:7f:97:45:61:35:4d:bc:64:72:0c:53:00:9e: e9:78:3d:dc:0e:83:e0:ca:b9:43:ec:e5:1b:44:06: bf:07:ac:f5:0b:d7:f9:c6:4f:30:39:52:f2:5b:f6: 4f:ad:49:a2:3d:a4:76:f2:cb:6b:90:ba:20:62:a9: 6c:00:5e:d0:db:b5:71:f4:3c:d6:a7:43:43:d6:2e: 15:92:bc:7b:0a:ba:1d:4f:a1:fa:97:4d:81:59:d1: fa:05:42:5d:e0:45:eb:49:a9:b3:8d:0e:b6:ac:9c: 2d:81:90:ed:b4:54:cf:e4:85:2c:c9:a1:67:23:fe: ca:2d:db:38:29:70:d5:b1:53:db:85:43:6b:5c:59: 1e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:78:79:9A:3D:A6:7F:B3:B0:19:76:52:16:98:A1:AD:11:EE:E2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl X509v3 Authority Key Identifier: keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer sbgp-ipAddrBlock: critical IPv4: 172.82.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6c:da:9a:fc:50:46:6f:15:1c:7b:f3:b6:e9:e2:a4:ba:b6: 97:7e:10:e0:94:b5:2e:5c:7e:35:a9:74:71:17:da:35:f0:c8: 46:db:1c:16:aa:be:15:c6:57:5a:8e:83:fa:44:d1:c6:3b:52: c3:11:9d:47:d1:fd:f7:1e:a1:ff:42:59:0d:19:b1:5f:5a:ea: ec:73:bc:ba:21:9b:a2:21:b5:81:56:9b:ba:60:4c:77:1e:20: c4:dc:e8:76:d8:c0:9c:6c:78:59:1c:c4:dd:cb:ea:c0:07:61: 0d:4c:cb:93:03:bc:1e:8c:29:ed:80:ba:ff:91:85:ec:38:24: 59:37:2a:39:dd:3b:ca:74:76:5e:55:b3:28:c8:12:0e:aa:32: 28:70:1d:ba:8d:92:7a:6f:fc:08:9c:1d:70:15:64:48:c5:11: 50:c1:7e:e4:8f:4e:36:cf:4e:14:1c:92:11:dc:ee:d7:a6:70: eb:52:28:ff:99:c4:57:df:00:32:e2:e6:73:50:58:c6:dd:38: 5e:ca:0a:15:77:6d:88:df:6b:9a:41:97:1f:f4:fa:63:62:34: 04:01:e3:e7:9e:28:7e:dc:99:68:27:8d:50:67:4d:9a:42:d5: ef:fb:55:9e:c4:ae:1b:19:7c:47:e4:bd:4e:d7:d0:f2:2e:10: 3b:48:bf:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSG9w41XRtg4ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIzNjMtYjQyMTEwZjg4 NTU3MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NzBmNjJjZDctYzc3Yi00MmQ5LWIxY2QtYzlhNWU3YjhmZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0OzEGa+l92s3IHkI2nLXUSy9qEi01iVr11B /EmKRABTNrwm+4yfAkjrzBgS82FxgjzAYf2KzLm2Ha+2a/5oP02avaMRwMACdCm3 qiUPbrOqHVRjXOBR3i7j+tgfR4lu3oxXj1RRPNrDEql5nTdG8C3UpJdYLLmGFX+X RWE1TbxkcgxTAJ7peD3cDoPgyrlD7OUbRAa/B6z1C9f5xk8wOVLyW/ZPrUmiPaR2 8strkLogYqlsAF7Q27Vx9DzWp0ND1i4Vkrx7CrodT6H6l02BWdH6BUJd4EXrSamz jQ62rJwtgZDttFTP5IUsyaFnI/7KLds4KXDVsVPbhUNrXFke2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR4eZo9pn+zsBl2UhaYoa0R7uKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlk MzNlNC1lZDRkLTRiNDctYjM2My1iNDIxMTBmODg1NTcvMWQyYjQzNDItMDk0NS0z MmRhLTk0YWUtZDY5YTVhZTA4ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIz NjMtYjQyMTEwZjg4NTU3LzBhOWQzM2U0LWVkNGQtNGI0Ny1iMzYzLWI0MjExMGY4 ODU1Ny5jcmwwHwYDVR0jBBgwFoAUi2UPpY7DqQ2CdI3aLpUh4tf92n4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlkMzNlNC1lZDRkLTRiNDctYjM2My1iNDIx MTBmODg1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABs2pr8UEZvFRx787bp4qS6tpd+EOCUtS5cfjWpdHEX2jXwyEbbHBaq vhXGV1qOg/pE0cY7UsMRnUfR/fceof9CWQ0ZsV9a6uxzvLohm6IhtYFWm7pgTHce IMTc6HbYwJxseFkcxN3L6sAHYQ1My5MDvB6MKe2Auv+Rhew4JFk3KjndO8p0dl5V syjIEg6qMihwHbqNknpv/AicHXAVZEjFEVDBfuSPTjbPThQckhHc7temcOtSKP+Z xFffADLi5nNQWMbdOF7KChV3bYjfa5pBlx/0+mNiNAQB4+eeKH7cmWgnjVBnTZpC 1e/7VZ7ErhsZfEfkvU7X0PIuEDtIv+w= -----END CERTIFICATE-----Generated at Sat Aug 23 22:10:57 2025 by rpki-client