$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/883c876d-ef5b-36a8-89e8-a48d417e3b67.roa File: 883c876d-ef5b-36a8-89e8-a48d417e3b67.roa (raw, json) Hash identifier: 9crVJYVX65qF/PU06X3TzWjVTY3Z2K7e15onLbU2CHA= Subject key identifier: 96:E1:C2:86:58:55:22:BE:E8:E3:98:D7:CD:61:E0:A2:61:52:A4:98 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584B9E07A130E0C65004B189A8C0 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/883c876d-ef5b-36a8-89e8-a48d417e3b67.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 36445 IP address blocks: 52.124.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a1:30:e0:c6:50:04:b1:89:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=ff8c9fe9-7845-469c-86aa-9fd8cab9704c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0f:9c:7e:61:30:4f:57:d9:0d:e6:d9:bb:38: cb:ec:88:be:ab:09:1f:68:d3:f7:de:21:8d:ed:39: 81:d0:60:24:27:a7:49:fd:9f:c4:e8:12:ea:92:57: 30:3f:d5:fb:aa:e0:34:eb:63:a0:93:f8:5a:d2:a9: 6b:64:d1:68:ad:7b:8c:c9:0c:b4:fa:88:25:5e:b3: 31:be:a8:0f:52:9d:80:ec:a2:e2:8e:11:dd:84:d0: 4d:59:fb:8c:6e:ca:1d:ec:26:5a:60:7d:bf:75:e8: 44:4d:36:e3:2f:c6:60:9b:d4:65:af:9e:74:40:53: 1c:38:59:31:0f:26:b7:55:93:e5:77:5c:fb:79:af: ce:53:46:36:1e:16:e1:28:77:38:81:6c:61:26:4f: 3a:18:d3:af:2f:31:a1:8c:76:57:ba:70:2b:69:f3: bb:38:8f:55:c1:00:8c:5e:7a:91:ed:85:52:25:27: a1:2c:de:43:95:84:dc:9f:d2:67:12:b4:b8:b2:43: 21:d6:97:d0:55:0a:b9:2e:55:34:c5:e3:50:e6:c9: c6:69:15:b6:08:17:cb:c2:bd:c4:b4:85:9a:79:e7: 6e:e5:79:69:4f:8c:0f:00:58:41:1a:8d:fb:65:87: 58:d2:e9:86:80:48:9c:6d:05:f5:ff:1a:c0:0d:36: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E1:C2:86:58:55:22:BE:E8:E3:98:D7:CD:61:E0:A2:61:52:A4:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/883c876d-ef5b-36a8-89e8-a48d417e3b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 52.124.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:59:a5:f2:ff:c9:97:4b:74:a6:7f:e8:bf:d0:38:cb:d7:47: 26:4a:20:b5:bc:e7:4a:70:fa:b0:5c:70:15:d4:bd:82:4f:73: ff:96:f7:83:69:bb:c7:02:a1:8c:99:eb:a6:9a:fe:3f:df:2f: 1c:ee:b8:c8:a2:1d:bf:88:97:1f:8a:b6:67:48:12:f6:61:f8: c9:6b:06:86:d4:35:da:1b:62:b5:e0:8b:d4:b5:cc:b5:c1:fe: 15:45:d1:77:b6:05:6f:55:c9:4d:b9:aa:82:d3:21:ea:e7:47: 9d:12:ef:71:97:3f:fb:e6:9b:b4:d1:12:70:b0:0b:91:35:d4: 5f:e5:a7:02:ae:39:2d:2c:8f:0d:33:9a:07:f7:14:ad:09:fb: 7f:a6:bb:d8:6c:08:39:93:1d:d4:01:82:d2:b5:cb:ce:11:61: bd:8b:0f:3d:bd:a6:59:bf:cf:34:7b:a2:ad:d2:2e:3f:36:a3: 14:20:2c:a4:23:6b:24:e2:a1:a0:b8:cf:a0:e3:fe:7f:c1:a3: 06:ed:3f:02:72:e1:c2:4c:62:03:01:1d:4f:5f:8c:5f:a5:43: 64:73:50:58:81:b3:fb:70:3c:77:d1:7d:87:6a:fb:d2:1f:b8: 36:b9:b5:de:c0:42:dc:69:b8:23:40:f9:bb:dd:46:4a:14:b0: 0a:a8:fc:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6Ew4MZQBLGJqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmY4YzlmZTktNzg0NS00NjljLTg2YWEtOWZkOGNhYjk3MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q+cfmEwT1fZDebZuzjL7Ii+qwkfaNP33iGN 7TmB0GAkJ6dJ/Z/E6BLqklcwP9X7quA062Ogk/ha0qlrZNForXuMyQy0+oglXrMx vqgPUp2A7KLijhHdhNBNWfuMbsod7CZaYH2/dehETTbjL8Zgm9Rlr550QFMcOFkx Dya3VZPld1z7ea/OU0Y2HhbhKHc4gWxhJk86GNOvLzGhjHZXunArafO7OI9VwQCM XnqR7YVSJSehLN5DlYTcn9JnErS4skMh1pfQVQq5LlU0xeNQ5snGaRW2CBfLwr3E tIWaeedu5XlpT4wPAFhBGo37ZYdY0umGgEicbQX1/xrADTYk7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbhwoZYVSK+6OOY181h4KJhUqSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvODgzYzg3NmQtZWY1Yi0z NmE4LTg5ZTgtYTQ4ZDQxN2UzYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNHweMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFZpfL/yZdLdKZ/6L/QOMvXRyZKILW850pw+rBccBXUvYJPc/+W94Np u8cCoYyZ66aa/j/fLxzuuMiiHb+Ilx+KtmdIEvZh+MlrBobUNdobYrXgi9S1zLXB /hVF0Xe2BW9VyU25qoLTIernR50S73GXP/vmm7TREnCwC5E11F/lpwKuOS0sjw0z mgf3FK0J+3+mu9hsCDmTHdQBgtK1y84RYb2LDz29plm/zzR7oq3SLj82oxQgLKQj ayTioaC4z6Dj/n/BowbtPwJy4cJMYgMBHU9fjF+lQ2RzUFiBs/twPHfRfYdq+9If uDa5td7AQtxpuCNA+bvdRkoUsAqo/E0= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:21 2025 by rpki-client