$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa File: b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa (raw, json) Hash identifier: UdpCokVIRcwgKYQbIDGbbVSoujI1zWAwbLB3rB4DMbs= Subject key identifier: 7C:DA:93:94:3A:CD:92:CF:07:05:11:D9:A0:5E:1C:48:95:A4:DC:22 Certificate issuer: /CN=4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d Certificate serial: 010D0C9F4328584B0CDC2B0BAC83BDBEF9AF8C00 Authority key identifier: 33:A7:C4:EC:EA:F1:1A:B4:2D:8D:29:06:E5:19:23:E4:E0:10:F8:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 399230 IP address blocks: 172.82.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:2b:0b:ac:83:bd:be:f9:af:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=cb8ab8e3-6b60-44a8-8b9a-e70dff665f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:1b:82:e5:84:74:68:18:51:cb:e2:8c:0f: 0a:95:83:e3:fe:b4:78:d3:4e:6a:d1:df:2c:ee:2c: 20:fb:01:59:6f:25:60:31:f1:d4:6c:9f:16:15:9d: e1:28:93:bb:57:e4:bd:b0:65:5c:4c:70:92:4f:0e: 97:f1:22:5c:71:c5:ca:9c:cd:82:8e:39:c1:3d:60: 0d:b7:b8:74:1b:c7:e3:e9:fc:f2:59:5c:a9:39:3c: 1e:f7:b9:e3:64:e1:de:55:1b:5d:02:d4:7a:05:62: 7e:42:a3:b4:1d:40:ff:79:ae:48:9e:e1:c2:8f:62: 7a:ae:59:d5:f5:40:5f:43:ed:e6:c2:cd:f8:11:dc: 09:87:b8:8b:92:e9:21:21:9b:4a:0d:80:34:1a:bb: a6:4c:e5:48:f9:1b:55:56:9a:1a:ac:ce:71:41:1b: 3a:e9:18:6b:e9:a8:74:45:2c:02:fb:9c:9a:69:3b: e7:91:88:d8:8f:a5:69:b3:2e:8f:c6:ca:db:e0:3e: 72:e8:50:1d:ea:da:f3:1e:90:51:d0:ef:ae:ad:7a: 6b:81:fc:af:73:58:33:e5:20:a2:06:56:44:e6:50: e2:71:93:f0:20:c7:28:06:99:a4:c5:a9:dc:21:e6: 9d:1d:cf:cc:e6:17:b1:d1:de:34:80:0e:a6:4f:6d: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DA:93:94:3A:CD:92:CF:07:05:11:D9:A0:5E:1C:48:95:A4:DC:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/b00b0c1c-0884-3df5-a99d-f2d986a07d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.crl X509v3 Authority Key Identifier: keyid:33:A7:C4:EC:EA:F1:1A:B4:2D:8D:29:06:E5:19:23:E4:E0:10:F8:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4a405ca9-e8a5-41a6-bec9-3bfcc9d01e9d.cer sbgp-ipAddrBlock: critical IPv4: 172.82.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:00:0a:4e:80:3b:01:59:9e:4e:22:2d:e9:64:b4:da:66:48: 8a:9d:83:f9:59:6a:d5:21:ac:e7:92:20:22:30:1c:24:82:cb: fa:32:af:10:5b:2f:13:ea:f7:37:7e:d8:c7:8d:c4:90:97:83: ad:9b:04:72:bb:b7:b1:ac:e5:49:e8:04:b7:33:cb:e9:ff:65: c3:2b:e2:ff:45:7d:88:a9:fa:06:cf:49:7b:34:d3:ca:80:e6: 58:47:70:6f:33:d8:f4:2c:88:b2:3b:26:44:e5:fc:ac:6a:1e: 15:2a:05:85:ba:ba:9f:cb:e0:aa:ac:7e:79:ab:c1:99:39:59: d4:62:ef:ed:a1:20:fa:dd:24:94:10:0b:6f:46:91:b2:55:67: c3:9c:7d:7c:cf:a2:eb:fe:c1:9f:61:77:37:6e:08:31:75:ce: b6:4e:20:24:44:b1:0d:93:34:8f:c4:61:79:86:2b:05:d2:92: 8e:c8:e1:fa:b8:e3:0c:21:ad:54:52:b8:cf:fd:1a:b9:27:6c: 3d:2d:cb:91:98:ad:c9:12:56:ef:53:a9:9d:52:87:e7:ed:64: 65:5e:d3:22:03:d3:fd:15:48:75:83:10:e9:d0:cf:d2:12:17: 58:a4:1d:26:22:6b:bb:0e:ca:a7:aa:78:99:6a:7c:aa:e0:fc: 68:a1:7a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CsLrIO9vvmvjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE0MDVjYTktZThhNS00MWE2LWJlYzktM2JmY2M5ZDAx ZTlkMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk Y2I4YWI4ZTMtNmI2MC00NGE4LThiOWEtZTcwZGZmNjY1ZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttobguWEdGgYUcvijA8KlYPj/rR4005q0d8s 7iwg+wFZbyVgMfHUbJ8WFZ3hKJO7V+S9sGVcTHCSTw6X8SJcccXKnM2CjjnBPWAN t7h0G8fj6fzyWVypOTwe97njZOHeVRtdAtR6BWJ+QqO0HUD/ea5InuHCj2J6rlnV 9UBfQ+3mws34EdwJh7iLkukhIZtKDYA0GrumTOVI+RtVVpoarM5xQRs66Rhr6ah0 RSwC+5yaaTvnkYjYj6Vpsy6Pxsrb4D5y6FAd6trzHpBR0O+urXprgfyvc1gz5SCi BlZE5lDicZPwIMcoBpmkxancIeadHc/M5hex0d40gA6mT22NVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzak5Q6zZLPBwUR2aBeHEiVpNwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YTQw NWNhOS1lOGE1LTQxYTYtYmVjOS0zYmZjYzlkMDFlOWQvYjAwYjBjMWMtMDg4NC0z ZGY1LWE5OWQtZjJkOTg2YTA3ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGE0MDVjYTktZThhNS00MWE2LWJl YzktM2JmY2M5ZDAxZTlkLzRhNDA1Y2E5LWU4YTUtNDFhNi1iZWM5LTNiZmNjOWQw MWU5ZC5jcmwwHwYDVR0jBBgwFoAUM6fE7OrxGrQtjSkG5Rkj5OAQ+DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YTQwNWNhOS1lOGE1LTQxYTYtYmVjOS0zYmZj YzlkMDFlOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4ACk6AOwFZnk4iLelktNpmSIqdg/lZatUhrOeSICIwHCSCy/oyrxBb LxPq9zd+2MeNxJCXg62bBHK7t7Gs5UnoBLczy+n/ZcMr4v9FfYip+gbPSXs008qA 5lhHcG8z2PQsiLI7JkTl/KxqHhUqBYW6up/L4KqsfnmrwZk5WdRi7+2hIPrdJJQQ C29GkbJVZ8OcfXzPouv+wZ9hdzduCDF1zrZOICREsQ2TNI/EYXmGKwXSko7I4fq4 4wwhrVRSuM/9GrknbD0ty5GYrckSVu9TqZ1Sh+ftZGVe0yID0/0VSHWDEOnQz9IS F1ikHSYia7sOyqeqeJlqfKrg/GihejI= -----END CERTIFICATE-----Generated at Tue Oct 21 13:23:05 2025 by rpki-client