$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa File: ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa (raw, json) Hash identifier: d5/uGoud9GRtSvlMh9vTQqVM8pIFya/E+YFzyqlI1F4= Subject key identifier: 70:97:BB:77:AB:3A:60:02:20:DD:5D:46:29:88:0E:8E:0D:AC:84:BB Certificate issuer: /CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Certificate serial: 010D0C9F4328584B5571DA7FC3497DBE1F424940 Authority key identifier: 29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 394470 IP address blocks: 172.83.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:da:7f:c3:49:7d:be:1f:42:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b2124a8-d6b6-483e-92de-67f8d7975cc4 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=28239f53-fca9-4e65-843e-a44cf00043d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:e0:13:ea:df:48:ef:0e:be:4c:90:e6:0f: 74:9f:9f:2a:b1:39:01:9b:a0:30:c7:37:5d:a1:de: ff:c3:d2:e8:30:c7:ee:98:5e:d3:04:c9:05:e4:21: 25:47:10:c6:c2:42:4c:75:09:26:9e:20:3f:29:cd: 9b:cb:b9:e8:dc:52:b8:8c:0d:6d:f3:71:b8:af:71: 21:bf:cf:9f:2b:b6:5c:31:3f:ee:19:1f:f0:d9:b8: 2d:f2:8e:76:9d:a7:17:65:f6:a2:60:96:56:64:94: 01:ac:f0:1d:1d:83:41:1b:bb:74:17:97:bf:7a:44: 1e:12:37:e5:60:99:18:6a:91:6d:e8:eb:87:e5:e9: 5c:41:d5:47:31:13:ba:91:49:66:5a:1e:de:b5:e5: a1:19:d9:47:ac:3a:68:22:74:e3:62:01:5e:d7:8b: 8f:54:74:3b:fa:fb:27:10:9a:3e:d2:f3:a5:fa:74: 53:32:96:f8:d3:55:7d:d6:33:f1:85:61:a9:02:09: bc:52:95:87:a8:a4:6f:32:2c:2f:6e:f0:32:63:48: e7:d9:d6:c4:a3:e0:ba:de:f1:db:7f:1d:79:42:fc: f9:f5:05:f0:f7:9f:45:e0:a1:fd:fb:eb:c1:81:fc: 62:3d:0a:7c:90:25:06:f6:4f:d8:0a:21:31:67:73: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:97:BB:77:AB:3A:60:02:20:DD:5D:46:29:88:0E:8E:0D:AC:84:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/ab7acae0-b363-34b5-acd1-1cea7c934a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4/8b2124a8-d6b6-483e-92de-67f8d7975cc4.crl X509v3 Authority Key Identifier: keyid:29:5A:24:7E:A2:89:9B:E2:BA:2C:49:81:4F:55:E6:63:4A:9A:FA:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b2124a8-d6b6-483e-92de-67f8d7975cc4.cer sbgp-ipAddrBlock: critical IPv4: 172.83.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9a:b9:20:03:7a:68:0c:4e:aa:2d:c5:54:fb:d6:5c:58:f1: a0:4d:d5:b1:c7:d6:a4:b2:38:d4:7e:26:5a:24:e4:2d:7e:c5: 36:5d:36:60:60:56:c9:03:79:52:9f:86:e7:d4:f1:1f:1a:b5: 0c:7a:aa:ac:fa:39:4e:48:75:83:93:1f:4c:be:d6:77:c3:01: ca:97:01:c8:1e:be:ed:61:54:f3:ab:23:02:ba:bd:8e:b7:81: 58:30:17:6a:b8:4b:cf:63:f9:80:48:40:11:46:c4:e7:19:4c: ad:93:aa:c5:ff:e7:0d:d6:42:e4:83:74:96:2b:b5:f0:93:e0: 84:fa:7c:a7:bf:90:f9:ff:ad:7c:84:61:30:ba:3b:4b:7e:21: 40:87:ec:51:31:f8:29:21:e6:aa:97:8d:da:82:66:4c:4b:08: 03:61:62:fb:9d:45:59:6a:82:29:e0:6d:8d:62:1b:dc:2d:03: ad:82:97:1e:55:10:67:4d:61:f8:dc:c4:1e:bf:3d:fd:7d:5e: ed:65:90:d6:db:fe:74:29:b6:bb:39:2c:0e:37:bc:54:e1:3d: 59:ff:0f:b8:a7:3f:66:58:cf:0e:8f:0e:e8:31:6a:2f:a4:61: 9c:e4:70:79:8c:42:66:68:62:78:2b:8a:7d:d5:b1:10:a5:ab: 1e:6c:f4:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdp/w0l9vh9CSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIyMTI0YTgtZDZiNi00ODNlLTkyZGUtNjdmOGQ3OTc1 Y2M0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MjgyMzlmNTMtZmNhOS00ZTY1LTg0M2UtYTQ0Y2YwMDA0M2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgfgE+rfSO8OvkyQ5g90n58qsTkBm6Awxzdd od7/w9LoMMfumF7TBMkF5CElRxDGwkJMdQkmniA/Kc2by7no3FK4jA1t83G4r3Eh v8+fK7ZcMT/uGR/w2bgt8o52nacXZfaiYJZWZJQBrPAdHYNBG7t0F5e/ekQeEjfl YJkYapFt6OuH5elcQdVHMRO6kUlmWh7eteWhGdlHrDpoInTjYgFe14uPVHQ7+vsn EJo+0vOl+nRTMpb401V91jPxhWGpAgm8UpWHqKRvMiwvbvAyY0jn2dbEo+C63vHb fx15Qvz59QXw959F4KH9++vBgfxiPQp8kCUG9k/YCiExZ3MAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCXu3erOmACIN1dRimIDo4NrIS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YjIx MjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4ZDc5NzVjYzQvYWI3YWNhZTAtYjM2My0z NGI1LWFjZDEtMWNlYTdjOTM0YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGIyMTI0YTgtZDZiNi00ODNlLTky ZGUtNjdmOGQ3OTc1Y2M0LzhiMjEyNGE4LWQ2YjYtNDgzZS05MmRlLTY3ZjhkNzk3 NWNjNC5jcmwwHwYDVR0jBBgwFoAUKVokfqKJm+K6LEmBT1XmY0qa+ugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YjIxMjRhOC1kNmI2LTQ4M2UtOTJkZS02N2Y4 ZDc5NzVjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFOWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaauSADemgMTqotxVT71lxY8aBN1bHH1qSyONR+Jlok5C1+xTZdNmBg VskDeVKfhufU8R8atQx6qqz6OU5IdYOTH0y+1nfDAcqXAcgevu1hVPOrIwK6vY63 gVgwF2q4S89j+YBIQBFGxOcZTK2TqsX/5w3WQuSDdJYrtfCT4IT6fKe/kPn/rXyE YTC6O0t+IUCH7FEx+Ckh5qqXjdqCZkxLCANhYvudRVlqgingbY1iG9wtA62Clx5V EGdNYfjcxB6/Pf19Xu1lkNbb/nQptrs5LA43vFThPVn/D7inP2ZYzw6PDugxai+k YZzkcHmMQmZoYngrin3VsRClqx5s9OY= -----END CERTIFICATE-----Generated at Tue Oct 21 17:59:02 2025 by rpki-client