$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa File: 2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa (raw, json) Hash identifier: mAeHp5rR1hKp4st1YZpM9pt+OiYhzYJwF9Ir14uATxI= Subject key identifier: 77:8F:BC:62:52:D0:D3:4D:5D:B4:9E:99:8F:82:09:3B:2E:E5:86:B6 Certificate issuer: /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb Certificate serial: 010D0C9F4328584AF0F14153CAE743BE02061C50 Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 399519 IP address blocks: 172.82.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:41:53:ca:e7:43:be:02:06:1c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=549ab1bd-a7d2-4746-a709-89d608d6ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:d1:0f:83:b6:79:d5:1f:6d:6c:32:d5:fc: 72:89:f6:96:fb:f2:17:e1:f1:02:f3:6d:e5:04:c6: 50:a9:bd:f0:ea:f7:49:16:7b:75:4f:1e:f2:ad:6a: 85:43:f1:47:13:be:5d:b6:44:85:81:96:cd:a7:0e: c7:74:fc:a4:8e:96:13:14:b3:75:bc:4d:18:f1:bd: e3:44:cb:ae:40:90:e2:55:02:cd:d4:5f:d4:15:74: e7:8c:53:62:89:2e:31:38:53:b9:1c:ec:71:73:9d: 11:c1:9b:93:48:d5:da:e6:8d:9d:3b:e3:7f:41:a6: ad:cf:11:ef:85:72:06:ef:3f:26:58:3e:a6:02:1d: ec:68:76:06:05:43:a0:50:ab:42:a0:38:3f:8c:a8: 96:af:97:25:eb:3b:1d:32:1e:72:ba:ea:3f:1c:8e: 8d:24:bb:9e:6b:bc:38:99:08:6e:88:7f:f7:aa:4b: 0a:c9:72:e1:23:cd:f0:7a:62:30:9a:c3:81:49:d6: de:aa:7a:42:8f:0f:c4:e9:4d:81:38:93:ac:f1:c9: 2c:65:26:3c:f5:b0:47:05:96:84:b4:47:74:75:9a: 09:a7:fa:bc:e1:b3:23:cd:7b:f3:68:bc:32:1b:e3: c1:25:63:34:e7:b0:02:a5:d3:6f:7c:59:83:3f:cc: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8F:BC:62:52:D0:D3:4D:5D:B4:9E:99:8F:82:09:3B:2E:E5:86:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl X509v3 Authority Key Identifier: keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer sbgp-ipAddrBlock: critical IPv4: 172.82.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0b:7b:cc:dd:6e:75:50:2a:e4:65:69:4c:f0:e0:13:d4:e6: 34:65:90:5d:35:35:53:c6:34:8d:ef:01:88:07:cb:f2:9b:2e: 86:81:f4:2d:37:dc:39:1d:2c:32:2e:b6:bc:59:fc:00:ac:59: 09:c2:80:af:c0:c1:83:68:43:8b:fa:5d:67:5c:0a:3c:6a:de: d9:a3:56:fa:9c:14:09:17:bd:df:04:79:98:08:11:6a:08:dc: a2:aa:67:dc:b9:2e:08:94:bd:c6:b6:22:38:60:79:ff:9f:49: aa:70:06:51:58:53:a6:50:d3:02:ad:bb:56:2f:da:89:8d:a9: 7a:77:cd:45:fb:51:9e:a2:42:eb:68:63:de:fd:b7:a4:21:1f: 84:44:0a:40:13:d6:c5:64:5c:a1:47:fe:b6:95:15:66:ef:39: d2:71:e8:21:65:bc:78:25:5f:e3:6c:7e:4f:cd:4b:89:b0:e6: 7b:7b:75:cc:d3:93:60:1a:ca:66:b3:ba:51:13:8e:a6:5f:d4: 10:d2:75:4e:df:de:1c:1f:53:eb:dd:5f:d2:8b:ce:03:78:da: 7c:53:91:ae:b4:7b:96:28:c1:12:7b:7e:67:49:b9:9a:e8:1e: 65:fa:7a:f1:99:b5:65:d3:e9:87:61:d6:0c:5c:cd:d5:58:9b: 8d:df:c7:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UFTyudDvgIGHFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNlNmM1ZjMtMDIyYS00ODYxLTg0MWEtMThiMGVkNmZh YWZiMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTQ5YWIxYmQtYTdkMi00NzQ2LWE3MDktODlkNjA4ZDZlZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0vRD4O2edUfbWwy1fxyifaW+/IX4fEC823l BMZQqb3w6vdJFnt1Tx7yrWqFQ/FHE75dtkSFgZbNpw7HdPykjpYTFLN1vE0Y8b3j RMuuQJDiVQLN1F/UFXTnjFNiiS4xOFO5HOxxc50RwZuTSNXa5o2dO+N/QaatzxHv hXIG7z8mWD6mAh3saHYGBUOgUKtCoDg/jKiWr5cl6zsdMh5yuuo/HI6NJLuea7w4 mQhuiH/3qksKyXLhI83wemIwmsOBSdbeqnpCjw/E6U2BOJOs8cksZSY89bBHBZaE tEd0dZoJp/q84bMjzXvzaLwyG+PBJWM057ACpdNvfFmDP8yYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHePvGJS0NNNXbSemY+CCTsu5Ya2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2U2 YzVmMy0wMjJhLTQ4NjEtODQxYS0xOGIwZWQ2ZmFhZmIvMmJmYjVjODAtMmNmNi0z NGY4LTkxZmItOGIwMGZiOGM1YzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDNlNmM1ZjMtMDIyYS00ODYxLTg0 MWEtMThiMGVkNmZhYWZiLzAzZTZjNWYzLTAyMmEtNDg2MS04NDFhLTE4YjBlZDZm YWFmYi5jcmwwHwYDVR0jBBgwFoAUJIu7eOaLtm+VvLmMShi63y+2aU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2U2YzVmMy0wMjJhLTQ4NjEtODQxYS0xOGIw ZWQ2ZmFhZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABULe8zdbnVQKuRlaUzw4BPU5jRlkF01NVPGNI3vAYgHy/KbLoaB9C03 3DkdLDIutrxZ/ACsWQnCgK/AwYNoQ4v6XWdcCjxq3tmjVvqcFAkXvd8EeZgIEWoI 3KKqZ9y5LgiUvca2Ijhgef+fSapwBlFYU6ZQ0wKtu1Yv2omNqXp3zUX7UZ6iQuto Y979t6QhH4RECkAT1sVkXKFH/raVFWbvOdJx6CFlvHglX+Nsfk/NS4mw5nt7dczT k2AaymazulETjqZf1BDSdU7f3hwfU+vdX9KLzgN42nxTka60e5YowRJ7fmdJuZro HmX6evGZtWXT6Ydh1gxczdVYm43fx0Y= -----END CERTIFICATE-----Generated at Sun Aug 24 00:41:07 2025 by rpki-client