$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa File: f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa (raw, json) Hash identifier: jYetjS6HP3f6zai6ZuseFRbt5MBle8DIjFp/7h3N63s= Subject key identifier: 07:87:F7:50:07:A9:DB:49:1B:60:7E:60:BD:15:3B:BF:04:55:1B:45 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584B13D6FE446A99ED1A58BF7740 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 401585 IP address blocks: 172.81.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:fe:44:6a:99:ed:1a:58:bf:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=37a45ae8-e9f7-4b8c-9505-eac94aa94723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:f2:a7:ce:1a:26:06:ba:30:11:d5:29:94: fe:d3:55:bc:80:4d:f6:5d:5f:95:22:2b:8d:21:d7: 27:a2:a5:f7:f3:e7:f2:46:46:ef:d1:1d:3d:d6:03: b9:55:e3:a4:69:35:8d:1b:b5:dd:55:70:88:c6:30: b7:7e:3b:90:91:0b:82:bc:3a:01:78:9c:62:70:4b: 4c:26:bd:37:27:c8:3e:2c:32:f5:b2:2c:2d:1c:f2: df:a0:d1:89:77:a1:0d:e6:04:f3:ae:e6:81:0b:81: 81:8a:63:76:65:69:2d:23:1b:9d:a6:a0:1d:ab:c1: 3d:12:5a:17:df:a1:50:62:45:de:31:3c:de:e1:8d: 01:dc:d6:35:8c:f9:81:52:3f:01:44:ac:4f:0b:96: df:ea:04:18:3e:bd:ed:11:0c:bf:6e:87:8a:ce:09: fa:76:19:4c:4b:19:8c:0b:d1:24:e9:c7:62:74:03: 14:2e:3d:96:5b:65:7b:a4:3d:fe:9a:19:3e:ea:33: 07:5d:bc:42:87:b0:32:02:8d:97:0b:81:48:8d:8c: f0:25:0d:b8:32:be:9d:9e:dc:61:29:26:b4:64:d2: e0:71:26:1e:c6:b3:ed:31:ee:c4:20:f7:1c:9a:85: 42:95:60:78:3f:b0:6a:f8:c6:87:5c:2a:1a:f1:de: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:F7:50:07:A9:DB:49:1B:60:7E:60:BD:15:3B:BF:04:55:1B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 172.81.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c1:f5:e4:e6:c0:3f:bf:e5:32:d5:bd:88:29:5a:c7:b4:33: f9:2c:ca:50:ce:d1:16:09:2c:62:c3:fe:fc:95:17:5d:5a:b2: 96:18:43:dd:44:d1:e3:5c:10:91:7f:da:93:0f:da:61:fd:3e: da:af:62:79:14:92:90:b6:f8:37:5d:62:54:d0:3b:6a:95:4c: 0b:b2:89:02:64:3b:fb:d0:53:ba:47:5f:ba:e7:4d:47:0b:2b: 28:fa:8a:5a:35:15:fe:9a:c9:71:ef:e0:86:09:75:a1:50:43: ea:e1:17:1b:18:28:5e:31:cf:27:c6:ed:2c:03:6b:3d:19:c4: 8b:9c:cc:f7:01:7b:14:6c:18:a3:de:8e:6e:df:3c:28:ce:b1: 9e:cb:eb:fd:0d:aa:67:49:56:25:13:66:10:a9:bf:1a:cc:97: 14:91:ad:df:0f:bc:e2:78:86:ac:16:36:b9:c3:79:64:48:49: b8:07:fc:ab:d8:9e:29:b2:78:f0:7b:a2:41:a7:88:71:00:97: 46:bb:13:b5:7b:61:31:fc:e9:dc:b8:e5:f3:26:95:ce:f4:98: 7a:58:69:18:de:36:86:a2:12:6f:c3:84:6f:9d:5c:d6:2e:14: f6:1d:e7:b1:7a:b1:e2:71:e1:76:1b:a0:e2:30:2e:8c:96:eb: 73:66:33:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1v5EapntGli/d0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MzdhNDVhZTgtZTlmNy00YjhjLTk1MDUtZWFjOTRhYTk0NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlELyp84aJga6MBHVKZT+01W8gE32XV+VIiuN IdcnoqX38+fyRkbv0R091gO5VeOkaTWNG7XdVXCIxjC3fjuQkQuCvDoBeJxicEtM Jr03J8g+LDL1siwtHPLfoNGJd6EN5gTzruaBC4GBimN2ZWktIxudpqAdq8E9EloX 36FQYkXeMTze4Y0B3NY1jPmBUj8BRKxPC5bf6gQYPr3tEQy/boeKzgn6dhlMSxmM C9Ek6cdidAMULj2WW2V7pD3+mhk+6jMHXbxCh7AyAo2XC4FIjYzwJQ24Mr6dntxh KSa0ZNLgcSYexrPtMe7EIPccmoVClWB4P7Bq+MaHXCoa8d6wxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeH91AHqdtJG2B+YL0VO78EVRtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvZjA3YzU4YTgtNWY1YS0z NzJjLTlkMWItM2JkYzRjOTRmNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErFFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3B9eTmwD+/5TLVvYgpWse0M/ksylDO0RYJLGLD/vyVF11aspYYQ91E 0eNcEJF/2pMP2mH9PtqvYnkUkpC2+DddYlTQO2qVTAuyiQJkO/vQU7pHX7rnTUcL Kyj6ilo1Ff6ayXHv4IYJdaFQQ+rhFxsYKF4xzyfG7SwDaz0ZxIuczPcBexRsGKPe jm7fPCjOsZ7L6/0NqmdJViUTZhCpvxrMlxSRrd8PvOJ4hqwWNrnDeWRISbgH/KvY nimyePB7okGniHEAl0a7E7V7YTH86dy45fMmlc70mHpYaRjeNoaiEm/DhG+dXNYu FPYd57F6seJx4XYboOIwLoyW63NmM1w= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:08 2025 by rpki-client