$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa File: d75fdb09-5717-3050-9039-6e239be863f8.roa (raw, json) Hash identifier: d4eyL+PIK+k7PY6QUCKYtlT3HR5OIjBn8X6HmUN2guA= Subject key identifier: 14:7E:C1:02:0C:A3:1F:5F:82:96:AA:3E:B4:18:66:3A:35:C8:0E:04 Certificate issuer: /CN=aa6485a3-0dd1-4bb3-989b-ac000d54ce27 Certificate serial: 010D0C9F4328584AEB6C546032AAC888C0401580 Authority key identifier: CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa Signing time: Wed 20 Aug 2025 13:34:00 +0000 ROA not before: Wed 20 Aug 2025 13:34:00 +0000 ROA not after: Tue 18 Nov 2025 14:34:00 +0000 asID: 36267 IP address blocks: 172.83.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:6c:54:60:32:aa:c8:88:c0:40:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6485a3-0dd1-4bb3-989b-ac000d54ce27 Validity Not Before: Aug 20 13:34:00 2025 GMT Not After : Nov 18 14:34:00 2025 GMT Subject: CN=4203b83c-1527-473f-b7c6-f60237b33a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:0c:37:66:91:ed:45:42:e8:04:4e:51:3a: 7e:cb:12:2d:5b:97:ac:38:0a:98:1e:ff:f7:95:54: 7b:1f:d9:ca:da:7d:ba:ce:49:65:45:9e:4f:cf:48: 4e:89:81:48:17:4a:7a:f9:1b:08:89:6e:5a:70:8e: 24:06:81:0b:e1:05:43:d2:6c:2f:09:31:ed:eb:0b: c2:43:d1:c5:23:b0:bd:5d:59:23:07:f5:fa:5e:9e: 6f:23:7b:83:3e:de:09:69:0c:c4:87:08:7d:f2:16: 97:aa:98:d7:8e:cc:d4:53:f8:db:28:81:1c:cf:d4: 78:0a:cd:28:87:f5:50:f2:eb:ab:a6:95:2d:41:e4: 2f:b3:2b:77:df:96:d3:97:2f:bd:89:a8:41:12:bc: 92:48:a0:b7:12:12:fc:b7:e3:8d:d5:2a:55:73:6f: cc:f7:22:02:ba:33:e7:17:95:08:bd:5f:3f:40:5d: be:b6:fb:d3:11:2b:a6:a9:23:b3:71:20:ee:88:0c: 95:59:09:f1:b4:b4:71:b9:06:22:45:cb:8c:c7:2c: a0:d2:65:0a:21:4e:5d:c7:f0:cd:b9:67:8b:11:cf: 8a:43:83:4d:4a:f9:ed:48:f3:c3:93:c0:73:c3:0f: 8f:89:1a:1c:f9:66:1a:cc:8d:a9:00:5e:14:8d:5b: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7E:C1:02:0C:A3:1F:5F:82:96:AA:3E:B4:18:66:3A:35:C8:0E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/d75fdb09-5717-3050-9039-6e239be863f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.crl X509v3 Authority Key Identifier: keyid:CC:F6:81:0C:AB:D6:74:C0:AC:B7:EB:4E:AB:C5:DE:D5:3A:EA:4C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/aa6485a3-0dd1-4bb3-989b-ac000d54ce27.cer sbgp-ipAddrBlock: critical IPv4: 172.83.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:92:0b:c1:da:a7:fb:2c:82:73:3e:16:56:78:4d:a5:ae:cb: 65:b8:23:18:9a:e2:4a:e2:b4:6d:8a:76:75:92:60:89:55:b9: 30:6b:1e:65:50:ac:59:95:42:d0:05:52:2a:4b:99:dd:82:51: f5:5b:a3:2b:21:6a:ba:ca:36:98:0c:ef:d0:23:cb:88:0f:0e: 88:82:66:6a:25:69:9b:c0:68:c4:59:c8:ed:b1:64:94:d3:d0: 2c:85:aa:4b:d7:30:35:1a:80:9d:d9:8a:72:38:cc:13:4e:c0: f2:3c:7f:b5:82:e2:27:da:43:95:26:e1:54:7c:69:73:25:9e: 5a:57:2b:62:e2:8c:33:a6:e7:e0:1c:61:3f:90:98:61:1e:f0: 4c:27:ae:6b:b6:3c:06:f6:2d:a0:76:a7:6d:a8:6a:ab:f2:5a: 94:8f:78:43:ae:d0:6e:e6:cb:d3:47:e9:47:d9:bf:ec:1e:53: 05:fa:52:e4:84:05:a6:49:4d:08:f9:9b:d7:f1:d6:7e:93:af: 89:26:fe:7f:a9:c0:2f:45:19:95:28:4a:e1:72:7e:51:40:8e: 4e:5b:90:9b:ef:c7:07:67:36:e3:20:73:ed:45:ae:90:b5:84: 37:57:aa:b2:69:70:85:4a:de:a2:15:f0:02:e4:38:76:44:fa: f6:b2:85:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrbFRgMqrIiMBAFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE2NDg1YTMtMGRkMS00YmIzLTk4OWItYWMwMDBkNTRj ZTI3MB4XDTI1MDgyMDEzMzQwMFoXDTI1MTExODE0MzQwMFowLzEtMCsGA1UEAxMk NDIwM2I4M2MtMTUyNy00NzNmLWI3YzYtZjYwMjM3YjMzYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn0MN2aR7UVC6AROUTp+yxItW5esOAqYHv/3 lVR7H9nK2n26zkllRZ5Pz0hOiYFIF0p6+RsIiW5acI4kBoEL4QVD0mwvCTHt6wvC Q9HFI7C9XVkjB/X6Xp5vI3uDPt4JaQzEhwh98haXqpjXjszUU/jbKIEcz9R4Cs0o h/VQ8uurppUtQeQvsyt335bTly+9iahBErySSKC3EhL8t+ON1SpVc2/M9yICujPn F5UIvV8/QF2+tvvTESumqSOzcSDuiAyVWQnxtLRxuQYiRcuMxyyg0mUKIU5dx/DN uWeLEc+KQ4NNSvntSPPDk8Bzww+PiRoc+WYazI2pAF4UjVtJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR+wQIMox9fgpaqPrQYZjo1yA4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hYTY0 ODVhMy0wZGQxLTRiYjMtOTg5Yi1hYzAwMGQ1NGNlMjcvZDc1ZmRiMDktNTcxNy0z MDUwLTkwMzktNmUyMzliZTg2M2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWE2NDg1YTMtMGRkMS00YmIzLTk4 OWItYWMwMDBkNTRjZTI3L2FhNjQ4NWEzLTBkZDEtNGJiMy05ODliLWFjMDAwZDU0 Y2UyNy5jcmwwHwYDVR0jBBgwFoAUzPaBDKvWdMCst+tOq8Xe1TrqTFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hYTY0ODVhMy0wZGQxLTRiYjMtOTg5Yi1hYzAw MGQ1NGNlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqSC8Hap/ssgnM+FlZ4TaWuy2W4Ixia4kritG2KdnWSYIlVuTBrHmVQ rFmVQtAFUipLmd2CUfVboysharrKNpgM79Ajy4gPDoiCZmolaZvAaMRZyO2xZJTT 0CyFqkvXMDUagJ3ZinI4zBNOwPI8f7WC4ifaQ5Um4VR8aXMlnlpXK2LijDOm5+Ac YT+QmGEe8Ewnrmu2PAb2LaB2p22oaqvyWpSPeEOu0G7my9NH6UfZv+weUwX6UuSE BaZJTQj5m9fx1n6Tr4km/n+pwC9FGZUoSuFyflFAjk5bkJvvxwdnNuMgc+1FrpC1 hDdXqrJpcIVK3qIV8ALkOHZE+vayhXs= -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:06 2025 by rpki-client