$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa File: bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa (raw, json) Hash identifier: T0zVIAeR6XrEBJx3GxmRQbLLg/Ei9ecOsP8gJRHlIqM= Subject key identifier: 66:8A:64:1B:73:3B:79:D4:A9:D9:2A:30:D8:2F:A2:FA:17:C6:65:B5 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584B13D6C63A46A56865D34DD480 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 23470 IP address blocks: 172.96.172.0/24 maxlen: 24 172.96.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c6:3a:46:a5:68:65:d3:4d:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=5590e492-f0af-4eb7-b31d-ba7bf0460def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:51:91:3b:63:2e:21:70:e3:13:cc:31:08: c3:2f:ec:39:5f:b7:bd:6c:0c:ba:73:48:7b:9f:38: 42:bd:0a:b5:7b:f5:41:77:a3:52:fe:fd:7f:96:6d: a6:c2:fa:d5:dd:22:47:b8:16:97:c6:15:c6:f4:d9: 42:30:0b:a9:55:5a:41:54:d2:3c:b5:d8:71:9b:03: 15:b9:95:c4:e7:6b:ca:8b:70:77:59:93:da:f9:20: 23:d0:af:e1:fe:11:93:8b:df:74:86:02:e6:0e:d2: 09:d4:25:1d:c0:73:7c:9c:f3:07:57:d6:5a:ce:e6: b8:79:15:43:c3:b0:7e:29:85:ac:89:69:f7:da:46: ac:bc:83:13:7f:e4:f9:76:00:28:8f:1e:7a:13:a3: 6d:75:cc:23:2d:98:99:9c:56:c2:09:bf:37:36:00: fb:a8:d0:da:53:f0:c0:85:7d:64:c7:47:aa:2e:7d: 21:23:d9:6d:e9:64:58:d4:40:8b:b8:e9:35:d8:ab: 50:b7:11:d2:14:07:70:2a:2b:84:d9:5b:b0:22:3b: fe:81:3f:11:7c:a0:a4:24:ea:52:42:a7:ce:f3:6c: 55:87:89:ed:04:36:72:a9:65:e3:a9:aa:ca:0f:72: 36:d3:cb:75:d3:c5:47:0d:17:f6:a4:55:1a:ab:92: 8a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8A:64:1B:73:3B:79:D4:A9:D9:2A:30:D8:2F:A2:FA:17:C6:65:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/bf7e6f0d-b689-3dc9-9f36-1fc69cbf3025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 172.96.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:87:84:de:b4:8a:95:5f:8f:2b:ce:86:e4:51:cd:ec:61:e5: 86:99:1a:7a:4f:17:ef:cb:d8:8e:d7:24:70:f8:8e:00:ed:3b: 08:f0:29:42:d3:9d:55:05:f3:80:f3:36:0c:e6:4c:3c:8a:4f: 1a:72:16:f6:5b:7f:83:a1:7b:af:3e:eb:69:39:e8:79:dc:54: 1c:9d:19:7c:97:37:a0:7a:34:39:bd:fc:3f:48:61:76:f4:c0: bf:7a:67:75:65:7b:6a:f8:61:e0:49:73:fe:4e:26:30:19:b5: 1d:49:3b:02:40:30:af:88:27:62:49:99:70:6a:0d:5a:d8:72: f8:71:ae:53:01:a3:e4:49:c2:30:ed:98:45:11:32:f9:9d:7a: d5:18:55:fe:ab:c9:fa:6d:64:05:fa:fb:0d:4e:86:db:ba:69: 99:47:5c:c3:ec:2f:7a:2e:91:73:81:f8:0e:b2:b4:08:c2:19: 37:58:c4:a3:7b:39:83:74:b7:0f:ae:2e:4c:90:ff:ee:98:51: ec:5d:c5:0b:39:ac:cf:d1:bb:60:3e:9a:64:4b:0a:ce:ac:1b: c9:38:84:8d:9a:86:54:02:3b:87:31:72:de:ee:40:58:e5:f9: c4:26:81:85:68:d7:06:a6:9c:7a:6d:02:6e:72:17:36:44:32: 6b:78:5b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sY6RqVoZdNN1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NTU5MGU0OTItZjBhZi00ZWI3LWIzMWQtYmE3YmYwNDYwZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIFRkTtjLiFw4xPMMQjDL+w5X7e9bAy6c0h7 nzhCvQq1e/VBd6NS/v1/lm2mwvrV3SJHuBaXxhXG9NlCMAupVVpBVNI8tdhxmwMV uZXE52vKi3B3WZPa+SAj0K/h/hGTi990hgLmDtIJ1CUdwHN8nPMHV9Zazua4eRVD w7B+KYWsiWn32kasvIMTf+T5dgAojx56E6NtdcwjLZiZnFbCCb83NgD7qNDaU/DA hX1kx0eqLn0hI9lt6WRY1ECLuOk12KtQtxHSFAdwKiuE2VuwIjv+gT8RfKCkJOpS QqfO82xVh4ntBDZyqWXjqarKD3I208t108VHDRf2pFUaq5KKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaKZBtzO3nUqdkqMNgvovoXxmW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvYmY3ZTZmMGQtYjY4OS0z ZGM5LTlmMzYtMWZjNjljYmYzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiHhN60ipVfjyvOhuRRzexh5YaZGnpPF+/L2I7XJHD4jgDtOwjwKULT nVUF84DzNgzmTDyKTxpyFvZbf4Ohe68+62k56HncVBydGXyXN6B6NDm9/D9IYXb0 wL96Z3Vle2r4YeBJc/5OJjAZtR1JOwJAMK+IJ2JJmXBqDVrYcvhxrlMBo+RJwjDt mEURMvmdetUYVf6ryfptZAX6+w1Ohtu6aZlHXMPsL3oukXOB+A6ytAjCGTdYxKN7 OYN0tw+uLkyQ/+6YUexdxQs5rM/Ru2A+mmRLCs6sG8k4hI2ahlQCO4cxct7uQFjl +cQmgYVo1wamnHptAm5yFzZEMmt4W50= -----END CERTIFICATE-----Generated at Tue Nov 4 18:01:40 2025 by rpki-client