$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0f8f71c3-619c-31d0-bbc6-2339cd699138.roa File: 0f8f71c3-619c-31d0-bbc6-2339cd699138.roa (raw, json) Hash identifier: Ar9J8URjigVXBQGinK5lfPg8lA/oJiNHw4LaVqVqcU4= Subject key identifier: E8:6D:99:9D:16:27:65:0C:96:11:8D:16:20:68:8C:33:00:D7:08:3E Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Certificate serial: 010D0C9F4328584B7B21F6EA5B4BF0DA6F66D980 Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0f8f71c3-619c-31d0-bbc6-2339cd699138.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 41095 IP address blocks: 172.96.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f6:ea:5b:4b:f0:da:6f:66:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=a14ad95e-8a78-4008-ada5-7b14c9a9101c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:b5:df:72:20:d9:b8:d3:ea:e6:4d:c9:5e: a7:3f:7d:b4:e7:f5:1d:eb:2c:39:25:09:92:58:a2: fb:89:56:2f:7f:1d:53:fb:28:aa:44:8e:f3:ea:1e: db:81:17:d5:3e:9d:e2:8c:71:bd:db:94:88:3a:51: cd:1e:eb:7a:fd:cd:00:d5:3a:47:7c:fe:2f:a3:e5: d5:26:3f:e9:71:63:2d:02:2c:2b:fb:1e:95:c7:fc: c1:5b:06:fa:6d:80:45:9a:e3:32:26:d1:20:63:3d: 9f:97:14:2a:43:62:d6:bf:0c:da:6f:f7:3b:8a:18: 6f:e8:b6:df:51:c6:c0:94:0f:4b:f5:a1:f1:50:be: 5d:0d:9f:5a:b8:c9:d5:3c:aa:33:c7:64:0c:2f:d2: 71:c0:88:80:ce:cf:f7:ae:2d:a4:71:0f:24:aa:b0: 49:f9:43:53:15:e2:71:83:51:b5:95:ca:98:67:53: 23:84:c8:2e:da:05:98:81:aa:09:c2:3c:21:9f:f9: 53:95:3c:35:14:3d:21:68:95:cb:94:90:be:15:61: c0:76:1b:9b:c2:5b:9f:41:76:d4:62:75:6c:85:d9: 1d:9d:cf:d4:ce:e1:00:f4:27:ae:c0:c0:b8:bd:c0: be:2c:3b:fc:93:7e:cf:c9:74:2d:05:e3:07:88:76: 1f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6D:99:9D:16:27:65:0C:96:11:8D:16:20:68:8C:33:00:D7:08:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0f8f71c3-619c-31d0-bbc6-2339cd699138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl X509v3 Authority Key Identifier: keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer sbgp-ipAddrBlock: critical IPv4: 172.96.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:5d:2e:93:5f:95:d6:da:34:f6:1a:0a:89:71:73:2f:74:71: 0d:44:52:ba:5d:3f:ba:ff:99:f2:08:e4:60:d4:9a:fe:a1:01: ea:d3:7f:f9:11:0c:99:8c:fb:29:13:ad:7f:a0:49:90:f0:d2: 7e:70:43:51:01:80:55:96:0c:27:8e:57:53:d6:61:a5:18:90: eb:fe:db:25:7e:29:63:20:02:55:73:a7:c5:fa:d8:c4:d5:bc: 99:bb:a9:29:19:b4:b6:65:f7:3c:d7:0c:c6:86:98:e2:e8:f0: 2b:a9:08:53:fa:f7:12:ed:f6:7f:36:ad:cb:58:eb:fd:7a:91: 9e:89:f8:69:46:83:88:93:92:8c:55:77:19:6c:61:dd:26:8e: ce:5a:47:75:e9:a8:49:8d:40:c3:f0:12:fd:df:df:a4:3c:1b: d4:ed:aa:15:90:68:4c:ec:45:a4:a9:f1:1b:3d:5a:ef:d9:5a: b6:4d:5f:30:cd:85:0a:26:b4:5b:64:4f:2d:12:43:01:b9:b3: 20:0f:c4:8c:69:f0:14:2d:4d:c6:f1:8f:3d:f9:21:a9:1e:bc: 2d:0e:c7:e5:98:29:71:7f:a9:d4:91:5b:dd:cd:28:b4:1e:9e: 4d:ec:67:8d:5e:32:64:ba:61:01:f7:28:e9:26:3d:2a:e3:9f: f9:53:bc:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfbqW0vw2m9m2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx ZDc0MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk YTE0YWQ5NWUtOGE3OC00MDA4LWFkYTUtN2IxNGM5YTkxMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy32133Ig2bjT6uZNyV6nP3205/Ud6yw5JQmS WKL7iVYvfx1T+yiqRI7z6h7bgRfVPp3ijHG925SIOlHNHut6/c0A1TpHfP4vo+XV Jj/pcWMtAiwr+x6Vx/zBWwb6bYBFmuMyJtEgYz2flxQqQ2LWvwzab/c7ihhv6Lbf UcbAlA9L9aHxUL5dDZ9auMnVPKozx2QML9JxwIiAzs/3ri2kcQ8kqrBJ+UNTFeJx g1G1lcqYZ1MjhMgu2gWYgaoJwjwhn/lTlTw1FD0haJXLlJC+FWHAdhubwlufQXbU YnVshdkdnc/UzuEA9CeuwMC4vcC+LDv8k37PyXQtBeMHiHYf+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhtmZ0WJ2UMlhGNFiBojDMA1wg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4 Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvMGY4ZjcxYzMtNjE5Yy0z MWQwLWJiYzYtMjMzOWNkNjk5MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0 NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM1dLpNfldbaNPYaColxcy90cQ1EUrpdP7r/mfII5GDUmv6hAerTf/kR DJmM+ykTrX+gSZDw0n5wQ1EBgFWWDCeOV1PWYaUYkOv+2yV+KWMgAlVzp8X62MTV vJm7qSkZtLZl9zzXDMaGmOLo8CupCFP69xLt9n82rctY6/16kZ6J+GlGg4iTkoxV dxlsYd0mjs5aR3XpqEmNQMPwEv3f36Q8G9TtqhWQaEzsRaSp8Rs9Wu/ZWrZNXzDN hQomtFtkTy0SQwG5syAPxIxp8BQtTcbxjz35IakevC0Ox+WYKXF/qdSRW93NKLQe nk3sZ41eMmS6YQH3KOkmPSrjn/lTvGY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:20:14 2025 by rpki-client