$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa File: ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa (raw, json) Hash identifier: fgByTLK3fwDXf9XtvkDkrRI2eqCWYRBIm9FcOv7EA5Q= Subject key identifier: 4E:04:F2:6F:6A:EF:B5:14:9E:19:CC:88:6A:3E:8F:9C:06:02:A2:39 Certificate issuer: /CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Certificate serial: 010D0C9F4328584AF0F13C583BA8B3688CEE4560 Authority key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 172.82.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3c:58:3b:a8:b3:68:8c:ee:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=4755a4a1-7024-4f81-ab07-285b12537caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:27:6d:91:a9:12:b8:4f:9e:1c:8c:2b:4e: 3c:ca:65:f0:4d:0d:d2:19:c4:cb:66:d3:3a:8a:27: ab:20:0e:60:66:d0:cc:a9:5c:4d:a7:2b:1b:8e:bd: 98:71:61:23:f3:e7:43:48:77:fc:06:65:74:87:fb: 5b:26:e1:cf:2c:b3:13:b2:2c:c6:30:a3:f6:2f:d6: c6:57:d1:28:b5:b3:0c:96:c2:cc:80:9d:d4:e8:58: 0c:b6:ce:66:69:bc:c5:9f:52:fb:19:76:df:a0:fe: d7:f9:32:e9:92:b2:d7:b4:4a:52:3e:cd:c4:9a:07: 01:6b:c3:6d:3f:3b:7b:49:f7:ef:b6:e6:8a:72:fd: ff:47:d5:0f:bb:43:9e:6e:d0:07:52:9d:e3:48:dd: 51:3c:04:b2:ca:da:f8:a1:d7:b8:a2:99:ed:36:1d: eb:cb:a1:0f:13:21:87:bc:c8:78:ce:ce:80:ac:16: 17:7e:a2:54:4a:ed:77:54:f7:06:7b:33:08:4f:32: 6c:af:8c:0e:c3:83:19:27:5c:97:14:1c:70:ee:8a: 65:ae:43:a8:bb:6f:4a:15:58:64:ed:d8:06:17:b3: 0b:b5:01:95:d1:ba:78:a7:00:7a:8b:57:ed:fc:1b: d4:91:71:6c:6f:a3:61:f3:27:3b:c1:f1:1e:7d:49: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:04:F2:6F:6A:EF:B5:14:9E:19:CC:88:6A:3E:8F:9C:06:02:A2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl X509v3 Authority Key Identifier: keyid:80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer sbgp-ipAddrBlock: critical IPv4: 172.82.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f3:ff:88:df:68:12:4d:b6:e0:a0:9c:f9:75:db:10:93:38: 85:41:1d:0a:3c:b7:68:c1:79:46:95:c9:99:31:e3:39:60:35: 06:c8:09:4c:6d:d8:8a:68:8d:45:5a:ee:5e:28:38:cd:84:1b: b0:fc:6c:76:04:2a:8e:5c:52:6b:a6:52:f5:2a:62:1e:b2:f5: a2:c0:3b:0e:00:fb:36:df:99:a2:21:e8:12:c7:c2:8b:29:2e: 62:b7:c3:21:1f:4c:02:51:12:df:84:ee:08:63:30:4b:40:68: 54:f1:bd:92:71:0d:f0:28:ce:60:6e:40:e3:76:b7:61:37:19: b6:d4:33:9f:6b:07:f8:06:4c:61:29:14:e5:f6:8c:19:13:2d: 76:88:cc:dd:dc:37:40:dc:0b:a5:55:f4:57:35:06:7d:12:b8: 05:ed:2c:0b:2c:d5:f8:3d:4c:4e:5c:03:af:1a:7c:fd:1c:29: cf:4b:67:2f:3e:fc:e3:9b:8f:2b:22:af:2d:f4:90:ba:1d:ee: bf:d6:95:b7:67:c9:e9:37:81:6d:f5:02:ed:31:df:dc:36:e6: 37:6f:1d:de:ed:2b:b6:5b:ce:a7:91:83:ea:23:5e:7a:e7:bb: f1:75:1e:c7:1c:76:20:71:e7:86:37:83:00:f9:70:db:cc:9b: 88:12:b2:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TxYO6izaIzuRWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0 MGVmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NDc1NWE0YTEtNzAyNC00ZjgxLWFiMDctMjg1YjEyNTM3Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0knbZGpErhPnhyMK048ymXwTQ3SGcTLZtM6 iierIA5gZtDMqVxNpysbjr2YcWEj8+dDSHf8BmV0h/tbJuHPLLMTsizGMKP2L9bG V9EotbMMlsLMgJ3U6FgMts5mabzFn1L7GXbfoP7X+TLpkrLXtEpSPs3EmgcBa8Nt Pzt7SffvtuaKcv3/R9UPu0OebtAHUp3jSN1RPASyytr4ode4opntNh3ry6EPEyGH vMh4zs6ArBYXfqJUSu13VPcGezMITzJsr4wOw4MZJ1yXFBxw7oplrkOou29KFVhk 7dgGF7MLtQGV0bp4pwB6i1ft/BvUkXFsb6Nh8yc7wfEefUmCMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4E8m9q77UUnhnMiGo+j5wGAqI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4 ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvZmYwZDUxM2ItYTgwZi0z YzY4LTlhMjUtYzM1OTE3YjMzZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY0OGZhZTctOTQ3ZC00YWIwLTlk MjYtYzFkYTM4ZTQ0MGVmL2Q2NDhmYWU3LTk0N2QtNGFiMC05ZDI2LWMxZGEzOGU0 NDBlZi5jcmwwHwYDVR0jBBgwFoAUgPOgyp2g4vup2o8BO87c43/AxuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRh MzhlNDQwZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITz/4jfaBJNtuCgnPl12xCTOIVBHQo8t2jBeUaVyZkx4zlgNQbICUxt 2IpojUVa7l4oOM2EG7D8bHYEKo5cUmumUvUqYh6y9aLAOw4A+zbfmaIh6BLHwosp LmK3wyEfTAJREt+E7ghjMEtAaFTxvZJxDfAozmBuQON2t2E3GbbUM59rB/gGTGEp FOX2jBkTLXaIzN3cN0DcC6VV9Fc1Bn0SuAXtLAss1fg9TE5cA68afP0cKc9LZy8+ /OObjysiry30kLod7r/Wlbdnyek3gW31Au0x39w25jdvHd7tK7ZbzqeRg+ojXnrn u/F1HsccdiBx54Y3gwD5cNvMm4gSssA= -----END CERTIFICATE-----Generated at Sat Aug 23 17:46:40 2025 by rpki-client