$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa File: ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa (raw, json) Hash identifier: IcF715Gqlti+Su9SFNXgXCTmq45K1ZkNJNhFyvQBW+o= Subject key identifier: 73:1B:16:EB:40:21:40:BA:47:69:EE:89:9C:D5:4F:6B:B0:1F:68:AF Certificate issuer: /CN=6149478e-f569-499b-aa7f-d4e43260a256 Certificate serial: 010D0C9F4328584BA39D2401EA3BAE209A06D180 Authority key identifier: 82:F9:F1:33:85:CE:98:E0:1B:58:D2:92:24:31:78:1B:F7:89:CF:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 398826 IP address blocks: 172.82.16.0/24 maxlen: 24 172.82.17.0/24 maxlen: 24 172.82.18.0/24 maxlen: 24 172.82.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:24:01:ea:3b:ae:20:9a:06:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6149478e-f569-499b-aa7f-d4e43260a256 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3c45be30-a26c-4b17-ae79-cf54e452bb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e7:96:9d:24:79:90:bc:8d:23:05:1d:dd:78: 8b:16:1c:32:d6:e9:a5:4d:c0:1e:44:82:c2:12:81: 44:cd:e5:0f:0c:38:8e:c1:86:7b:d0:eb:8c:80:c0: 5d:73:dd:c7:58:41:0e:50:e0:a8:14:82:8e:45:eb: 06:d8:f3:3d:76:d5:e9:ca:08:c9:70:c7:91:f2:db: 39:51:ea:39:5a:20:0c:78:7e:09:33:93:b7:72:c6: 3e:ed:5b:8e:ca:dd:d2:80:c7:bd:ac:6a:4c:25:6e: 01:67:46:01:2d:b8:3a:31:2b:49:de:c2:82:9c:db: 9a:97:cc:4a:64:c5:6a:ff:86:ff:3a:7f:66:a8:e2: e7:06:3e:ea:60:d8:3d:10:6b:2e:84:82:cd:6e:ce: 37:07:79:1f:15:79:b1:54:84:0f:0a:e5:d1:34:73: b4:36:af:fd:d7:d9:83:f8:38:21:df:9c:86:48:fb: 57:6b:1e:46:24:e5:92:25:16:d9:b9:77:89:1d:01: 7e:1d:70:4c:28:48:d8:da:0c:b1:79:91:12:9e:2f: e1:7a:21:44:fb:d9:63:53:58:a1:6b:b1:74:34:09: 0c:51:ad:13:46:17:a3:b9:64:3e:77:ec:f3:f5:9a: 09:33:59:81:23:d9:79:4d:b2:6a:7b:1d:80:84:1f: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1B:16:EB:40:21:40:BA:47:69:EE:89:9C:D5:4F:6B:B0:1F:68:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.crl X509v3 Authority Key Identifier: keyid:82:F9:F1:33:85:CE:98:E0:1B:58:D2:92:24:31:78:1B:F7:89:CF:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer sbgp-ipAddrBlock: critical IPv4: 172.82.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:69:85:35:c8:26:cf:02:bf:58:6e:6c:6b:35:48:94:99:f9: 76:ff:7d:e5:07:bc:20:db:ab:e2:10:84:eb:6c:ed:01:f2:28: bf:6d:b1:3e:76:dd:6d:18:42:05:ef:8e:62:c2:8b:12:ad:ad: ba:e6:d7:4a:50:d0:e6:ec:52:5d:c2:7e:59:74:6f:ea:9a:39: b2:36:29:12:0e:da:d0:9d:7d:30:fa:d6:f9:10:51:0a:4a:be: 1b:32:c8:c2:15:f1:ab:57:2f:8d:34:cc:03:be:a3:3e:f3:1b: c0:a6:07:9b:7b:5a:3d:b8:c0:05:1f:bb:b9:8f:9b:1e:38:ad: b3:4f:5c:aa:c8:69:d2:e4:3d:c6:dc:52:6c:7c:52:c2:8f:7f: 43:2b:e3:be:26:fa:f4:66:85:5d:6a:d7:a0:37:ca:c0:33:38: b4:41:86:a4:b8:65:18:81:9c:d4:cc:3c:3d:7d:95:f2:47:6f: c0:59:c7:2c:1f:10:f4:72:fa:4a:b5:af:23:7b:72:02:98:aa: c8:0d:18:0c:e7:73:0f:40:f0:b3:b3:d4:81:2f:c9:de:ae:a2: 32:e0:15:6b:16:ef:c9:6e:51:2a:fc:07:8d:38:47:eb:84:37: d1:99:61:b3:89:d8:fb:ad:d7:53:a9:99:42:ee:c3:18:08:ac: 32:0b:65:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSQB6juuIJoG0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0OTQ3OGUtZjU2OS00OTliLWFhN2YtZDRlNDMyNjBh MjU2MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2M0NWJlMzAtYTI2Yy00YjE3LWFlNzktY2Y1NGU0NTJiYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOeWnSR5kLyNIwUd3XiLFhwy1umlTcAeRILC EoFEzeUPDDiOwYZ70OuMgMBdc93HWEEOUOCoFIKOResG2PM9dtXpygjJcMeR8ts5 Ueo5WiAMeH4JM5O3csY+7VuOyt3SgMe9rGpMJW4BZ0YBLbg6MStJ3sKCnNual8xK ZMVq/4b/On9mqOLnBj7qYNg9EGsuhILNbs43B3kfFXmxVIQPCuXRNHO0Nq/919mD +Dgh35yGSPtXax5GJOWSJRbZuXeJHQF+HXBMKEjY2gyxeZESni/heiFE+9ljU1ih a7F0NAkMUa0TRhejuWQ+d+zz9ZoJM1mBI9l5TbJqex2AhB//JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMbFutAIUC6R2nuiZzVT2uwH2ivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MTQ5 NDc4ZS1mNTY5LTQ5OWItYWE3Zi1kNGU0MzI2MGEyNTYvY2E0OWY5YWMtZmNkMS0z NGEyLThiY2MtZjYyYWJmYzJhMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjE0OTQ3OGUtZjU2OS00OTliLWFh N2YtZDRlNDMyNjBhMjU2LzYxNDk0NzhlLWY1NjktNDk5Yi1hYTdmLWQ0ZTQzMjYw YTI1Ni5jcmwwHwYDVR0jBBgwFoAUgvnxM4XOmOAbWNKSJDF4G/eJzzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82MTQ5NDc4ZS1mNTY5LTQ5OWItYWE3Zi1kNGU0 MzI2MGEyNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNphTXIJs8Cv1hubGs1SJSZ+Xb/feUHvCDbq+IQhOts7QHyKL9tsT52 3W0YQgXvjmLCixKtrbrm10pQ0ObsUl3Cfll0b+qaObI2KRIO2tCdfTD61vkQUQpK vhsyyMIV8atXL400zAO+oz7zG8CmB5t7Wj24wAUfu7mPmx44rbNPXKrIadLkPcbc Umx8UsKPf0Mr474m+vRmhV1q16A3ysAzOLRBhqS4ZRiBnNTMPD19lfJHb8BZxywf EPRy+kq1ryN7cgKYqsgNGAzncw9A8LOz1IEvyd6uojLgFWsW78luUSr8B404R+uE N9GZYbOJ2Put11OpmULuwxgIrDILZSQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:38:41 2025 by rpki-client