$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/c40b8517-cb95-3d62-a746-1fc2642ef195.roa File: c40b8517-cb95-3d62-a746-1fc2642ef195.roa (raw, json) Hash identifier: QynE0Y6W1a13SXa8tXVpmbPmNFPOgqavFuW2U3n7DOs= Subject key identifier: DA:F0:C5:D5:54:84:27:FF:27:DA:EE:C7:CC:F5:91:08:50:6B:5E:29 Certificate issuer: /CN=a678b84f-a615-4754-9dcb-e51b04125026 Certificate serial: 010D0C9F4328584B3F1C53A6CDBD9DD9CBA50640 Authority key identifier: D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/c40b8517-cb95-3d62-a746-1fc2642ef195.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 16661 IP address blocks: 172.83.94.0/24 maxlen: 24 2602:f685::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:53:a6:cd:bd:9d:d9:cb:a5:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a678b84f-a615-4754-9dcb-e51b04125026 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=cad1e070-9dbb-4f23-82f0-f1c8c13ae8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:e7:7f:65:51:90:bd:ef:78:30:45:7f:22: f0:64:60:8e:82:62:01:ba:b9:e8:cc:d5:a9:92:22: 27:d3:19:ab:0a:39:ef:f3:77:36:c4:d7:f2:26:f6: af:cf:a5:4b:ed:7b:c6:d3:38:e9:0f:30:10:f6:55: e1:1e:b3:c6:3c:6a:a0:0a:05:2d:c3:ff:cd:78:f1: 8f:22:a7:ac:da:f7:70:b9:1c:99:fc:2a:3c:83:d6: 4a:f8:d3:38:e9:7c:89:3d:44:20:cf:0f:b5:c8:6c: fe:75:7b:95:42:da:04:d7:2a:a0:7d:fa:f3:4f:e1: 3f:f5:02:d5:08:88:5f:30:8f:94:25:0c:33:00:75: b6:7b:98:1a:7d:58:96:61:9c:d4:40:7f:44:ce:24: 3b:4e:9b:63:b9:eb:fb:e6:d3:d0:10:da:7d:69:ec: 7c:df:ba:14:2c:89:3d:77:00:bf:6c:76:72:13:61: 78:eb:d2:92:52:61:93:2f:c8:a0:06:14:1b:02:df: dc:03:25:14:b4:33:e9:bd:22:3b:df:f3:99:fa:cc: 1c:bb:c5:72:cf:65:cc:2d:97:75:7a:f0:41:bd:c2: 5f:1a:2f:24:22:66:cc:d9:00:78:80:81:c1:52:9c: 0a:ef:54:f4:b5:a1:92:9f:ba:c0:97:e4:db:fa:fe: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F0:C5:D5:54:84:27:FF:27:DA:EE:C7:CC:F5:91:08:50:6B:5E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/c40b8517-cb95-3d62-a746-1fc2642ef195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.crl X509v3 Authority Key Identifier: keyid:D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer sbgp-ipAddrBlock: critical IPv4: 172.83.94.0/24 IPv6: 2602:f685::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:5f:6e:d6:8d:1e:1f:b0:92:51:2e:5e:3e:cb:15:50:35:68: d1:d7:8e:94:66:48:13:aa:39:89:3d:a4:25:c1:ab:b9:4f:6b: 88:47:78:c1:3d:af:8e:ec:50:2a:8d:1a:0e:3f:c2:29:f3:d4: 95:7b:26:4c:fc:96:fb:b1:6e:11:9c:bc:2c:76:53:a0:0b:bf: e7:0c:4b:a4:e3:1c:6e:20:ad:5a:85:76:17:e3:40:15:56:6a: d0:2d:cc:11:b4:63:bb:8b:b8:47:43:f9:d8:71:23:3b:86:16: 32:42:0f:fd:cb:29:3a:bb:bd:ff:ae:56:72:7f:89:21:2a:20: 74:42:da:ed:b9:ba:54:5f:57:6e:87:67:88:24:ad:e3:4b:7f: 25:80:47:2f:f3:bc:0c:6c:4f:8d:03:76:2d:b7:3b:63:7e:f2: e6:63:d2:81:e9:91:1d:0d:e6:00:48:2c:b0:5c:15:9b:8e:13: 6b:1e:b9:ee:47:80:71:90:6e:fe:ec:37:0d:f9:c3:6e:5f:4d: 06:d2:8f:40:6c:9f:7a:54:aa:70:13:de:06:3f:6f:30:2c:fa: b2:1a:2f:0d:12:6a:09:8e:25:17:b4:c0:f4:8c:03:9f:f1:ca: 78:aa:41:1b:4b:78:0a:e6:71:24:74:66:67:f7:0e:ea:a6:f7: 6e:da:83:7b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEs/HFOmzb2d2culBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTY3OGI4NGYtYTYxNS00NzU0LTlkY2ItZTUxYjA0MTI1 MDI2MB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk Y2FkMWUwNzAtOWRiYi00ZjIzLTgyZjAtZjFjOGMxM2FlOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx43nf2VRkL3veDBFfyLwZGCOgmIBurnozNWp kiIn0xmrCjnv83c2xNfyJvavz6VL7XvG0zjpDzAQ9lXhHrPGPGqgCgUtw//NePGP Iqes2vdwuRyZ/Co8g9ZK+NM46XyJPUQgzw+1yGz+dXuVQtoE1yqgffrzT+E/9QLV CIhfMI+UJQwzAHW2e5gafViWYZzUQH9EziQ7Tptjuev75tPQENp9aex837oULIk9 dwC/bHZyE2F469KSUmGTL8igBhQbAt/cAyUUtDPpvSI73/OZ+swcu8Vyz2XMLZd1 evBBvcJfGi8kImbM2QB4gIHBUpwK71T0taGSn7rAl+Tb+v5jYwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNrwxdVUhCf/J9rux8z1kQhQa14pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNjc4 Yjg0Zi1hNjE1LTQ3NTQtOWRjYi1lNTFiMDQxMjUwMjYvYzQwYjg1MTctY2I5NS0z ZDYyLWE3NDYtMWZjMjY0MmVmMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTY3OGI4NGYtYTYxNS00NzU0LTlk Y2ItZTUxYjA0MTI1MDI2L2E2NzhiODRmLWE2MTUtNDc1NC05ZGNiLWU1MWIwNDEy NTAyNi5jcmwwHwYDVR0jBBgwFoAU056UQF5VD2saQrT93Ug9XJD54eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNjc4Yjg0Zi1hNjE1LTQ3NTQtOWRjYi1lNTFi MDQxMjUwMjYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQArFNeMA4E AgACMAgDBgAmAvaFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3X27WjR4fsJJRLl4+yxVQNWjR146UZkgT qjmJPaQlwau5T2uIR3jBPa+O7FAqjRoOP8Ip89SVeyZM/Jb7sW4RnLwsdlOgC7/n DEuk4xxuIK1ahXYX40AVVmrQLcwRtGO7i7hHQ/nYcSM7hhYyQg/9yyk6u73/rlZy f4khKiB0QtrtubpUX1duh2eIJK3jS38lgEcv87wMbE+NA3YttztjfvLmY9KB6ZEd DeYASCywXBWbjhNrHrnuR4BxkG7+7DcN+cNuX00G0o9AbJ96VKpwE94GP28wLPqy Gi8NEmoJjiUXtMD0jAOf8cp4qkEbS3gK5nEkdGZn9w7qpvdu2oN7 -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:05 2025 by rpki-client