$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa File: 3a5025bf-ee37-315a-a197-68996a369c6a.roa (raw, json) Hash identifier: 3HdXmafutp3AUgDKVkDpC3Vox1eXavHEYbaAZP/7q6w= Subject key identifier: 8F:54:79:2F:DA:CD:58:38:2E:81:A4:F2:A9:F6:3A:E3:0C:D7:62:23 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F4328584A778091072CA7899725F91A90 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 54714 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:91:07:2c:a7:89:97:25:f9:1a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=4c97e292-2339-47a8-9c13-628a01a3e268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:86:a2:9a:4d:dc:e0:4e:53:62:69:7e:88: d7:67:ef:af:23:40:ab:23:9a:9f:51:5e:c4:80:20: 99:63:b8:a4:c6:bc:98:6c:18:34:eb:01:4d:5d:c6: b5:49:c5:57:51:9f:2a:c0:b6:e0:cb:c7:be:58:5d: ff:8a:f3:c7:18:12:3b:a8:1b:b9:dd:f5:bc:fa:e4: 88:ac:83:9f:a9:4e:01:7c:ed:96:59:88:98:ce:ee: cf:74:b5:97:57:78:04:23:33:d5:80:b2:47:88:ac: dc:a9:00:67:a7:8a:c0:4d:20:1a:bf:17:c8:7d:39: d2:99:05:0e:a7:e8:16:fd:90:cb:12:ed:0a:c1:d7: 95:ea:9c:f6:e4:b0:b4:55:58:4f:50:df:1a:90:b5: af:06:d4:16:1b:23:4e:80:4b:f8:7d:3a:d7:b7:09: cc:8a:15:75:9e:86:2b:9d:ae:a2:b8:37:78:19:10: 82:e8:a4:17:66:10:34:83:e2:d6:30:b0:68:09:4b: 5b:89:b3:4d:20:4a:10:38:4f:dd:f4:ee:de:0b:0b: 59:cb:ad:4d:95:d9:ae:ba:df:a8:da:f0:ef:68:26: 04:1f:79:fe:48:17:74:13:e1:b8:8b:b6:31:d2:42: a2:ff:b3:0d:fb:7f:1c:99:8e:00:a4:b9:4c:a4:39: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:54:79:2F:DA:CD:58:38:2E:81:A4:F2:A9:F6:3A:E3:0C:D7:62:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:5d:2f:36:56:0b:dc:9e:85:69:17:f2:c4:f0:e5:a9:d4:0c: 3b:d1:32:f5:58:ef:10:32:76:f3:38:79:28:50:80:e7:87:04: af:c1:dd:db:9e:0b:ab:b3:ca:8a:23:59:52:b3:c8:c2:5c:c9: 8d:97:17:2d:a3:48:15:66:76:ac:ab:0e:b4:0f:78:ba:f9:0b: 7e:9f:c6:13:3e:ed:50:6b:53:3c:18:3d:dc:f9:0e:a1:6f:1d: bf:04:aa:70:39:ea:f0:f9:ba:63:23:ee:d1:f7:7a:24:10:65: ea:4b:30:30:4b:b8:08:4c:89:86:09:71:a6:1e:3d:3b:16:27: 53:c3:2e:37:07:2e:26:16:ce:b3:cb:03:ac:3e:49:6a:f8:85: c1:2c:5d:2d:7f:1f:8c:99:e5:03:0b:e7:37:7c:55:0b:37:9f: 84:a4:a4:f1:40:51:fb:cf:b5:be:64:04:c3:75:12:20:a3:a5: 4c:da:f2:14:0c:eb:ed:94:a4:ab:d4:1f:04:0f:26:09:88:9a: 47:4f:52:95:78:96:97:9c:50:cb:ed:f5:e9:75:fa:c0:c6:c1: 79:2d:a7:39:52:95:5d:94:f2:7b:43:58:a4:bc:8a:0f:e3:f7: 0f:d9:bb:dd:58:11:71:81:46:61:bd:2c:41:11:9d:2d:66:4e: 65:73:6e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJEHLKeJlyX5GpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk NGM5N2UyOTItMjMzOS00N2E4LTljMTMtNjI4YTAxYTNlMjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkneGoppN3OBOU2JpfojXZ++vI0CrI5qfUV7E gCCZY7ikxryYbBg06wFNXca1ScVXUZ8qwLbgy8e+WF3/ivPHGBI7qBu53fW8+uSI rIOfqU4BfO2WWYiYzu7PdLWXV3gEIzPVgLJHiKzcqQBnp4rATSAavxfIfTnSmQUO p+gW/ZDLEu0KwdeV6pz25LC0VVhPUN8akLWvBtQWGyNOgEv4fTrXtwnMihV1noYr na6iuDd4GRCC6KQXZhA0g+LWMLBoCUtbibNNIEoQOE/d9O7eCwtZy61Nldmuut+o 2vDvaCYEH3n+SBd0E+G4i7Yx0kKi/7MN+38cmY4ApLlMpDmjDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9UeS/azVg4LoGk8qn2OuMM12IjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvM2E1MDI1YmYtZWUzNy0z MTVhLWExOTctNjg5OTZhMzY5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpdLzZWC9yehWkX8sTw5anUDDvRMvVY7xAydvM4eShQgOeHBK/B3due C6uzyoojWVKzyMJcyY2XFy2jSBVmdqyrDrQPeLr5C36fxhM+7VBrUzwYPdz5DqFv Hb8EqnA56vD5umMj7tH3eiQQZepLMDBLuAhMiYYJcaYePTsWJ1PDLjcHLiYWzrPL A6w+SWr4hcEsXS1/H4yZ5QML5zd8VQs3n4SkpPFAUfvPtb5kBMN1EiCjpUza8hQM 6+2UpKvUHwQPJgmImkdPUpV4lpecUMvt9el1+sDGwXktpzlSlV2U8ntDWKS8ig/j 9w/Zu91YEXGBRmG9LEERnS1mTmVzbjM= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:25 2025 by rpki-client