$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa File: 325875a8-7f1a-358a-a215-06cc79b97d9a.roa (raw, json) Hash identifier: Rb0HyMwg+nHdXbYyxzpDCO2hu1td2XBtz3OGog/N328= Subject key identifier: 8B:64:8E:E0:E4:83:79:D4:7F:D0:BE:02:FE:1B:C1:5B:62:BF:F9:25 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584A682605BE90F1E6055CCF6C80 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 395567 IP address blocks: 172.83.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:05:be:90:f1:e6:05:5c:cf:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=faffb2d9-c55e-4cee-a3bb-6d2e5243e226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:bc:0b:14:98:98:d0:d2:69:cd:23:a2:88: 97:28:af:a5:62:83:2a:7e:45:be:79:bd:18:68:34: b8:da:ea:5a:c3:e5:f4:0d:73:aa:5c:98:bf:3b:cc: 6c:fe:b4:31:17:8e:f9:03:f8:93:e7:67:5d:bf:76: b0:56:48:71:96:b1:aa:55:11:6e:8b:ed:1a:6b:9d: ee:0e:96:8d:8b:42:ab:7d:c6:55:c1:ab:7f:f0:fe: 5e:2f:50:b9:ec:97:44:c1:99:95:65:05:2e:59:ad: 35:7c:0b:36:e3:12:9d:1e:d8:fc:91:c2:51:b8:0a: 98:32:ac:e7:2c:fb:0f:56:61:62:54:50:2f:d0:67: 6f:2c:2f:80:c8:ab:60:59:37:a1:bc:2a:aa:c2:05: a3:a1:28:0d:02:93:bc:47:3f:5b:18:d3:19:23:4b: 0b:c9:8e:b5:c4:d5:8d:7e:fb:e0:b6:4a:21:be:e2: f4:00:0e:31:e4:e2:8e:02:7d:93:17:7b:2a:9a:b4: c2:1b:c7:e4:46:4f:30:38:53:0f:7b:f0:54:4a:77: 25:bf:bd:6e:e4:50:aa:6a:71:22:bf:9c:a7:b9:a6: 9c:1f:d1:e2:8f:73:2d:5e:62:58:ff:f1:ca:c2:6e: 7b:4e:24:3e:f8:45:68:b3:75:6b:73:23:9a:b0:f5: f3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:64:8E:E0:E4:83:79:D4:7F:D0:BE:02:FE:1B:C1:5B:62:BF:F9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 172.83.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:96:65:e1:65:17:be:31:20:e3:a0:92:40:22:4c:09:7f:8e: aa:13:f4:5b:5a:8c:b2:a5:f0:e0:76:12:43:1e:19:65:18:a5: 20:41:19:2b:be:1b:86:8b:0a:37:7e:dc:5e:7e:b4:2e:53:a6: c9:d2:84:0a:e7:d1:ab:95:92:b2:58:a8:0b:13:22:d4:61:89: c2:c3:38:b3:2f:38:c3:55:c9:5c:af:28:b1:bb:e5:74:17:f7: f6:bf:6a:61:08:2b:45:fd:6b:4d:2a:76:aa:25:a2:e4:e6:e3: 92:e4:23:97:b3:d8:8a:6d:92:89:ab:87:a8:29:0b:db:ae:e6: 84:e5:8d:54:15:40:c7:98:50:82:e5:b9:d2:d0:ef:33:21:be: 3f:51:53:66:2a:dd:20:41:64:04:de:7b:28:4d:fe:42:1c:d8: 7e:1a:64:a1:eb:25:73:70:74:ca:9a:d9:9e:00:8b:e9:bc:82: 5b:4c:b0:ee:15:6b:e9:d5:e0:be:b5:46:75:f7:92:ec:d2:86: 71:0c:93:fb:cd:f0:53:55:15:cd:3e:af:ad:c6:37:f4:13:ab: 88:d0:d9:51:ae:09:b4:03:f5:26:08:70:77:97:df:87:a4:98: 12:29:81:11:db:95:37:ba:32:aa:f7:b1:67:f0:46:d6:f0:ef: a0:bc:08:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgW+kPHmBVzPbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZmFmZmIyZDktYzU1ZS00Y2VlLWEzYmItNmQyZTUyNDNlMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAota8CxSYmNDSac0jooiXKK+lYoMqfkW+eb0Y aDS42upaw+X0DXOqXJi/O8xs/rQxF475A/iT52ddv3awVkhxlrGqVRFui+0aa53u DpaNi0KrfcZVwat/8P5eL1C57JdEwZmVZQUuWa01fAs24xKdHtj8kcJRuAqYMqzn LPsPVmFiVFAv0GdvLC+AyKtgWTehvCqqwgWjoSgNApO8Rz9bGNMZI0sLyY61xNWN fvvgtkohvuL0AA4x5OKOAn2TF3sqmrTCG8fkRk8wOFMPe/BUSnclv71u5FCqanEi v5ynuaacH9Hij3MtXmJY//HKwm57TiQ++EVos3VrcyOasPXzsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItkjuDkg3nUf9C+Av4bwVtiv/klMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMzI1ODc1YTgtN2YxYS0z NThhLWEyMTUtMDZjYzc5Yjk3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeWZeFlF74xIOOgkkAiTAl/jqoT9FtajLKl8OB2EkMeGWUYpSBBGSu+ G4aLCjd+3F5+tC5TpsnShArn0auVkrJYqAsTItRhicLDOLMvOMNVyVyvKLG75XQX 9/a/amEIK0X9a00qdqolouTm45LkI5ez2Iptkomrh6gpC9uu5oTljVQVQMeYUILl udLQ7zMhvj9RU2Yq3SBBZATeeyhN/kIc2H4aZKHrJXNwdMqa2Z4Ai+m8gltMsO4V a+nV4L61RnX3kuzShnEMk/vN8FNVFc0+r63GN/QTq4jQ2VGuCbQD9SYIcHeX34ek mBIpgRHblTe6Mqr3sWfwRtbw76C8CDc= -----END CERTIFICATE-----Generated at Thu Aug 7 13:01:56 2025 by rpki-client