$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa File: 325875a8-7f1a-358a-a215-06cc79b97d9a.roa (raw, json) Hash identifier: 6TbGFspGYCR8jPGWzr8fJYUCi1OQygJgkvnorivEAVA= Subject key identifier: BE:8E:BF:63:AB:E1:A0:3C:49:FD:7F:59:12:4D:2A:AE:04:61:22:A3 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584B48E1C2E77AF5C7394A6A7980 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 395567 IP address blocks: 172.83.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c2:e7:7a:f5:c7:39:4a:6a:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=94cb3520-c37a-4c32-9cbb-c52e4c240d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:ed:b9:9f:ce:ff:49:fc:46:e2:5c:03:9d: e0:41:1c:35:6d:af:b1:7a:d1:15:60:86:5a:34:ab: a6:87:10:ba:94:c2:d3:18:10:ee:3e:eb:2a:19:9a: e9:5a:42:df:91:3b:08:8d:c7:f9:6a:36:5a:8b:fa: ef:b4:07:d7:fb:2a:44:5a:ea:44:29:d7:78:b3:da: 13:ad:4b:2d:40:e4:45:14:75:f0:4d:74:97:cf:a4: 71:34:f8:c7:29:0e:e1:d6:64:72:63:f9:c5:8d:9c: f5:26:bc:3b:ee:4e:0e:5c:14:2a:b3:26:51:a7:38: 7f:b3:54:51:63:7d:51:28:c9:b3:3f:29:71:ad:d9: 69:8c:5b:7b:bd:8d:79:81:d5:b1:6c:78:c6:38:cc: 2f:ee:8c:63:5a:8f:cf:76:dd:ea:71:73:d3:42:af: 89:9d:15:88:5a:01:88:5d:34:3a:b9:c6:e1:a6:db: 8b:53:52:53:cd:f2:3e:2e:f7:6a:1c:3d:3e:dd:fa: 92:84:1a:1f:c7:e1:2e:d4:96:4d:04:fd:3b:62:9f: e3:96:cf:74:bc:ff:98:9f:13:5c:b5:91:66:15:6a: 7b:6a:b2:65:11:86:1f:0b:ab:90:43:79:bb:e6:b9: 63:2f:16:1a:fb:c4:a5:18:09:8b:d4:af:4a:fd:3a: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8E:BF:63:AB:E1:A0:3C:49:FD:7F:59:12:4D:2A:AE:04:61:22:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 172.83.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f5:98:b6:69:76:99:54:df:c9:6e:8a:bd:67:bb:88:03:7b: 3e:79:e8:3d:8f:24:a3:82:3a:78:ee:61:0e:d2:48:de:7f:aa: c4:47:81:40:7e:34:e4:83:7c:9a:17:18:76:b9:72:2a:82:1e: 1c:bf:19:05:34:a0:9f:23:ef:2a:cb:6b:10:7a:7e:fc:8d:ce: 76:29:b3:73:16:bb:60:05:1f:e7:65:2b:b9:c3:99:e3:29:15: 49:01:96:5a:21:86:07:c7:c4:78:b4:24:c1:1c:b4:2d:8d:73: 69:8b:ce:b3:4b:90:6c:52:f3:e9:2a:63:83:82:2d:5a:14:66: d2:01:aa:dd:08:2e:68:cf:8b:e6:f6:ee:2b:a8:68:93:42:70: 78:96:4c:2f:9a:56:62:c8:96:7d:77:33:3d:06:74:6c:d3:0f: c3:cf:ff:26:58:1b:43:03:f8:21:b9:e2:44:fd:b8:9f:84:f1: 30:87:8b:85:3e:78:4b:15:8b:49:ee:2b:7d:45:e0:a6:f4:a5: 19:1a:79:0b:c1:08:4d:03:2a:e1:63:c1:bc:b4:41:06:7f:bc: d4:71:29:e0:ec:c2:72:bf:aa:9a:e2:69:ba:fd:49:f5:13:46: 45:4d:97:13:2f:93:4b:e9:18:83:4b:eb:0c:e8:f7:83:84:86: e1:52:fd:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cLnevXHOUpqeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTRjYjM1MjAtYzM3YS00YzMyLTljYmItYzUyZTRjMjQwZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6/tuZ/O/0n8RuJcA53gQRw1ba+xetEVYIZa NKumhxC6lMLTGBDuPusqGZrpWkLfkTsIjcf5ajZai/rvtAfX+ypEWupEKdd4s9oT rUstQORFFHXwTXSXz6RxNPjHKQ7h1mRyY/nFjZz1Jrw77k4OXBQqsyZRpzh/s1RR Y31RKMmzPylxrdlpjFt7vY15gdWxbHjGOMwv7oxjWo/Pdt3qcXPTQq+JnRWIWgGI XTQ6ucbhptuLU1JTzfI+LvdqHD0+3fqShBofx+Eu1JZNBP07Yp/jls90vP+YnxNc tZFmFWp7arJlEYYfC6uQQ3m75rljLxYa+8SlGAmL1K9K/TrXtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6Ov2Or4aA8Sf1/WRJNKq4EYSKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMzI1ODc1YTgtN2YxYS0z NThhLWEyMTUtMDZjYzc5Yjk3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj1mLZpdplU38luir1nu4gDez556D2PJKOCOnjuYQ7SSN5/qsRHgUB+ NOSDfJoXGHa5ciqCHhy/GQU0oJ8j7yrLaxB6fvyNznYps3MWu2AFH+dlK7nDmeMp FUkBllohhgfHxHi0JMEctC2Nc2mLzrNLkGxS8+kqY4OCLVoUZtIBqt0ILmjPi+b2 7iuoaJNCcHiWTC+aVmLIln13Mz0GdGzTD8PP/yZYG0MD+CG54kT9uJ+E8TCHi4U+ eEsVi0nuK31F4Kb0pRkaeQvBCE0DKuFjwby0QQZ/vNRxKeDswnK/qpriabr9SfUT RkVNlxMvk0vpGINL6wzo94OEhuFS/dM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:15 2025 by rpki-client