$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/c8be1484-c497-36e9-b419-a28fbd8e6fbc.roa File: c8be1484-c497-36e9-b419-a28fbd8e6fbc.roa (raw, json) Hash identifier: li5yi7HFjuOkuOaDrsMa9/5tkcHu783t4eSIaPX01Bc= Subject key identifier: C9:21:12:97:45:2C:15:E8:11:4B:AD:38:A0:AC:32:07:97:34:A8:A4 Certificate issuer: /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2 Certificate serial: 010D0C9F4328584BA0D25C0B9728B439A4AA6E80 Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/c8be1484-c497-36e9-b419-a28fbd8e6fbc.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 33436 IP address blocks: 172.82.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5c:0b:97:28:b4:39:a4:aa:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=1c5dead4-0a4d-48c8-9b09-b82917640437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:f2:d7:6b:7d:fe:e8:85:b6:4c:e0:4f:a2: 29:dc:74:92:52:7a:2e:62:45:8c:c5:d9:93:e0:96: b3:24:d0:b8:ca:5b:85:dc:4b:1b:3e:81:93:13:27: 9b:19:ab:2f:fd:28:0a:4b:99:47:90:44:cc:eb:dc: 0e:ce:52:e5:c1:ac:64:40:6c:0e:51:72:b4:5d:9a: 4a:dd:69:21:7e:7a:22:ce:31:66:c3:cb:4a:65:42: 36:9f:d3:2f:08:54:44:ff:c7:5c:34:25:c4:23:59: 99:4c:0e:26:27:40:da:18:60:2b:2d:c0:9f:30:ae: 1e:81:6f:2c:5d:a6:7d:61:0a:32:49:3f:6e:6a:da: a9:b0:87:d2:8b:23:b6:3d:9a:85:da:22:09:df:e6: 8d:b9:bc:75:02:98:b9:38:bd:f2:fe:e5:06:e2:03: b9:77:04:99:4e:96:4d:aa:6a:25:cb:42:95:b5:40: 31:d7:b5:e2:ce:97:be:04:1d:58:80:0c:b9:0e:ae: 9c:da:87:59:3c:d5:64:4a:53:64:27:d5:4e:7d:49: 1a:69:8a:59:d2:a3:60:f0:9a:74:e3:ba:c3:7d:69: 5b:df:c5:db:92:78:f1:24:17:c7:52:09:39:69:2f: 54:d0:7a:27:96:1d:ae:9c:38:29:df:c9:e4:64:ad: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:21:12:97:45:2C:15:E8:11:4B:AD:38:A0:AC:32:07:97:34:A8:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/c8be1484-c497-36e9-b419-a28fbd8e6fbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl X509v3 Authority Key Identifier: keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer sbgp-ipAddrBlock: critical IPv4: 172.82.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:db:15:99:60:3a:e5:dc:c1:20:5d:b4:34:00:52:bf:4a:9a: 9c:0f:46:f3:b3:62:71:a3:82:7c:21:83:09:9f:73:75:fc:82: 8e:1d:5a:56:8c:d2:ee:06:f2:87:7d:ea:53:4f:f7:87:83:73: 50:2e:e1:bd:39:05:27:6d:58:ee:d2:cf:71:fb:b6:f5:c0:5a: a7:cb:91:bf:68:ef:13:b4:34:8a:f4:91:59:7e:f2:e9:cc:db: 59:e0:95:38:3d:0f:31:cd:d4:25:6a:8c:7a:45:c6:01:8a:1f: 17:11:fd:dc:e0:1c:72:b2:2e:fc:2c:88:1e:c7:1d:06:e4:36: 79:25:81:13:03:29:4e:2c:31:dc:47:b7:11:d4:cd:37:ec:05: 03:32:e4:44:7f:7f:12:89:0a:c3:5b:4e:e7:4e:3a:aa:56:f8: d0:c2:a5:60:2b:a5:c2:ef:b1:e8:1c:22:0c:73:82:60:83:0b: e6:52:f0:a1:71:dc:7e:e5:19:bd:c6:23:f4:df:1e:73:f1:6e: 0a:cf:81:ab:a3:75:50:76:8e:1d:62:81:e2:32:c5:a0:b3:c2: f4:ee:2a:ec:47:df:b2:55:61:27:e8:fd:c1:5f:52:03:e8:72: 13:4e:da:ff:09:36:0c:9a:00:97:88:e6:d0:1d:6b:87:f7:53: 33:8e:6b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lwLlyi0OaSqboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJiYmI2MWYtZmMxNy00ZDk2LWI5YzMtODg0MGJjZGQ0 MWMyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MWM1ZGVhZDQtMGE0ZC00OGM4LTliMDktYjgyOTE3NjQwNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCry12t9/uiFtkzgT6Ip3HSSUnouYkWMxdmT 4JazJNC4yluF3EsbPoGTEyebGasv/SgKS5lHkETM69wOzlLlwaxkQGwOUXK0XZpK 3WkhfnoizjFmw8tKZUI2n9MvCFRE/8dcNCXEI1mZTA4mJ0DaGGArLcCfMK4egW8s XaZ9YQoyST9uatqpsIfSiyO2PZqF2iIJ3+aNubx1Api5OL3y/uUG4gO5dwSZTpZN qmoly0KVtUAx17Xizpe+BB1YgAy5Dq6c2odZPNVkSlNkJ9VOfUkaaYpZ0qNg8Jp0 47rDfWlb38XbknjxJBfHUgk5aS9U0Honlh2unDgp38nkZK24DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkhEpdFLBXoEUutOKCsMgeXNKikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80YmJi YjYxZi1mYzE3LTRkOTYtYjljMy04ODQwYmNkZDQxYzIvYzhiZTE0ODQtYzQ5Ny0z NmU5LWI0MTktYTI4ZmJkOGU2ZmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGJiYmI2MWYtZmMxNy00ZDk2LWI5 YzMtODg0MGJjZGQ0MWMyLzRiYmJiNjFmLWZjMTctNGQ5Ni1iOWMzLTg4NDBiY2Rk NDFjMi5jcmwwHwYDVR0jBBgwFoAUYA/TZQdk//P1Rg4iJtc7WhIoGOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80YmJiYjYxZi1mYzE3LTRkOTYtYjljMy04ODQw YmNkZDQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErbFZlgOuXcwSBdtDQAUr9KmpwPRvOzYnGjgnwhgwmfc3X8go4dWlaM 0u4G8od96lNP94eDc1Au4b05BSdtWO7Sz3H7tvXAWqfLkb9o7xO0NIr0kVl+8unM 21nglTg9DzHN1CVqjHpFxgGKHxcR/dzgHHKyLvwsiB7HHQbkNnklgRMDKU4sMdxH txHUzTfsBQMy5ER/fxKJCsNbTudOOqpW+NDCpWArpcLvsegcIgxzgmCDC+ZS8KFx 3H7lGb3GI/TfHnPxbgrPgaujdVB2jh1igeIyxaCzwvTuKuxH37JVYSfo/cFfUgPo chNO2v8JNgyaAJeI5tAda4f3UzOOay8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:43:17 2025 by rpki-client