$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa File: 4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa (raw, json) Hash identifier: vsA4+qpC+id6uwk+1QBS1DN/M9fWtJs8PqN0NTzI5yc= Subject key identifier: 42:48:08:67:E7:5D:85:3D:1F:9B:84:EF:49:E0:36:09:F0:06:4B:BD Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F4328584A7780915CE01BB7005A2A8280 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 63303 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:91:5c:e0:1b:b7:00:5a:2a:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=f8e1a24f-8c73-4922-b2ee-4d0b73b4da04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:48:d7:35:75:4c:0d:5b:dd:8d:3b:a3:58: 5a:eb:5a:eb:06:51:9a:d6:ab:65:64:1f:f1:b6:27: cc:7d:00:aa:6e:1c:f6:6c:81:45:f2:42:a3:66:e0: 3d:c3:77:62:c3:5f:f9:30:37:52:d7:35:a3:55:68: 7a:e1:42:4f:c6:6b:fc:bb:ee:2a:5e:fb:89:30:3c: 1e:57:2d:a0:39:d0:aa:9a:28:51:38:6e:00:79:77: ff:aa:ff:09:61:51:ce:bb:31:ce:e0:ef:35:85:a4: ce:3e:88:69:cc:5a:46:71:a6:36:b5:11:dc:d2:50: 87:13:0e:bd:72:31:cd:af:a9:b4:38:c6:ca:a0:2d: d2:8c:b6:44:99:55:2a:fe:14:b8:97:64:2d:c5:63: 85:e1:68:91:6d:92:64:77:0f:61:f7:ae:51:41:5d: 10:03:01:2d:0b:d0:20:d5:21:e1:a4:74:76:3e:bb: dd:1d:64:e4:ad:5c:1b:01:05:42:35:16:56:e8:99: f7:dc:71:14:b6:e7:a6:e4:6c:33:2b:3a:99:4d:75: 92:bd:80:72:bd:22:d8:2a:66:0b:f4:ba:87:f8:7b: 91:55:7e:6e:14:67:b5:a9:9a:22:fb:cf:14:c6:64: 63:15:ad:58:22:ab:0e:b8:05:38:83:4b:13:ae:92: 32:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:48:08:67:E7:5D:85:3D:1F:9B:84:EF:49:E0:36:09:F0:06:4B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ac:4a:a9:dd:92:bd:2a:38:fc:41:cf:7c:75:3c:41:1b:e1: 17:50:6f:05:6a:9a:ed:d8:47:a1:60:a1:e3:fc:31:58:2f:2f: 43:ea:92:c8:22:01:0c:dd:d7:d1:d2:69:c0:ab:26:8e:0b:f8: 0b:56:ec:10:f3:3f:e6:61:62:e9:97:e6:72:10:ac:25:0b:cf: 24:be:cc:c3:de:2d:0a:f8:c6:2e:36:3b:ea:ab:47:c7:b8:8a: 5e:4b:7a:f5:a9:63:48:94:40:31:90:02:0e:96:82:fe:48:96: 19:32:29:ba:56:66:aa:b5:de:5f:1a:a8:e2:dd:43:53:78:9a: 77:dd:9e:23:1e:77:c9:24:e9:2b:0b:6d:57:c0:a8:5b:f8:ea: 91:83:a6:24:65:e6:d8:ae:36:f4:42:10:e9:aa:01:05:2b:b6: a8:4f:cc:13:d2:56:97:a5:7d:06:82:97:11:72:74:55:8e:b9: 8a:3c:9b:78:5d:d2:49:4b:a0:d6:88:ea:cb:5e:16:ab:9e:bd: ec:95:bb:55:de:ec:fe:4a:92:e9:c4:24:dc:b7:91:79:90:f7: 6c:07:14:b7:0f:bb:84:57:08:cc:2b:78:d4:20:f5:21:da:6e: 01:1e:ad:24:e0:9a:63:c3:9b:9d:6b:97:8c:ac:9d:cf:41:82: 33:ef:66:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJFc4Bu3AFoqgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZjhlMWEyNGYtOGM3My00OTIyLWIyZWUtNGQwYjczYjRkYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq9I1zV1TA1b3Y07o1ha61rrBlGa1qtlZB/x tifMfQCqbhz2bIFF8kKjZuA9w3diw1/5MDdS1zWjVWh64UJPxmv8u+4qXvuJMDwe Vy2gOdCqmihROG4AeXf/qv8JYVHOuzHO4O81haTOPohpzFpGcaY2tRHc0lCHEw69 cjHNr6m0OMbKoC3SjLZEmVUq/hS4l2QtxWOF4WiRbZJkdw9h965RQV0QAwEtC9Ag 1SHhpHR2PrvdHWTkrVwbAQVCNRZW6Jn33HEUtuem5GwzKzqZTXWSvYByvSLYKmYL 9LqH+HuRVX5uFGe1qZoi+88UxmRjFa1YIqsOuAU4g0sTrpIySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJICGfnXYU9H5uE70ngNgnwBku9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvNGI3NjBjNjctNThiNS0z ZDhjLTk0MDYtMmQzYTBmMmNmZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCsSqndkr0qOPxBz3x1PEEb4RdQbwVqmu3YR6FgoeP8MVgvL0Pqksgi AQzd19HSacCrJo4L+AtW7BDzP+ZhYumX5nIQrCULzyS+zMPeLQr4xi42O+qrR8e4 il5LevWpY0iUQDGQAg6Wgv5IlhkyKbpWZqq13l8aqOLdQ1N4mnfdniMed8kk6SsL bVfAqFv46pGDpiRl5tiuNvRCEOmqAQUrtqhPzBPSVpelfQaClxFydFWOuYo8m3hd 0klLoNaI6steFqueveyVu1Xe7P5KkunEJNy3kXmQ92wHFLcPu4RXCMwreNQg9SHa bgEerSTgmmPDm51rl4ysnc9BgjPvZl4= -----END CERTIFICATE-----Generated at Tue Aug 5 20:02:35 2025 by rpki-client