$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa File: cc126209-aeb3-363b-92cb-8a40229b5b5c.roa (raw, json) Hash identifier: gNISTgeXr/i/0LqodtWx1ZDzShEL8Opl13bq5mCM5go= Subject key identifier: 1F:C3:EE:8B:19:EC:73:05:7D:24:3C:37:D7:97:31:37:14:49:3C:B5 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584BBE40341219ED7EA0048C5300 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 395927 IP address blocks: 172.83.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:34:12:19:ed:7e:a0:04:8c:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f164a7bb-7aa7-478d-bdbe-b279a8e7c245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:e3:4f:44:fe:d4:7c:5e:91:e0:9a:91:46: 98:37:59:2c:e7:1e:5b:bf:1a:9a:dc:c4:d2:4a:4a: 97:8d:56:22:e2:2a:2a:87:1a:95:55:c8:8d:ad:f0: 73:12:2a:49:32:9b:0c:42:c2:3b:3a:1b:1b:0a:97: 8d:fd:e5:44:e8:a2:08:0a:08:be:3c:b3:3a:ff:4a: 94:22:c4:7e:5d:71:36:3b:c9:35:13:50:44:ff:d9: b2:38:7a:eb:e8:31:b1:92:ab:0c:3b:09:44:24:c2: a6:ea:c9:c6:05:39:82:41:ff:15:a1:94:0a:cf:a7: 44:b3:92:5a:77:58:f1:45:46:15:fb:ee:55:65:04: 7a:7f:a0:b1:e6:2c:00:2a:3d:3a:91:57:5a:18:5f: 58:23:85:3a:0e:ac:28:e5:13:15:ab:a5:69:59:a1: 92:c3:18:62:cb:d1:d8:df:0f:a7:8e:80:db:d7:1e: 78:7e:e5:79:59:db:f0:e7:f7:3c:3b:78:2b:f7:ee: 53:62:b0:a8:4c:ba:4d:03:9f:2b:f0:eb:eb:48:02: c9:2f:ac:12:fc:e3:55:a4:83:e3:98:d9:70:ed:72: 76:29:27:3f:b6:68:28:aa:5e:30:39:c0:c6:1e:c2: 66:40:9b:b8:13:81:7b:13:58:fe:46:c6:27:8c:23: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C3:EE:8B:19:EC:73:05:7D:24:3C:37:D7:97:31:37:14:49:3C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/cc126209-aeb3-363b-92cb-8a40229b5b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 172.83.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:28:49:5b:6f:54:cf:ef:ab:cc:88:ac:26:b8:4a:1e:03:79: de:56:dd:d6:b4:9f:22:40:34:f4:17:0d:44:c7:a8:72:e1:76: 50:3d:22:b6:58:da:17:df:32:90:c9:2c:5c:21:ad:30:97:22: a5:7f:94:2d:1b:db:b2:35:e0:ad:91:20:01:61:fe:ce:f8:c9: 56:d9:e9:f2:e4:2a:82:30:c0:9a:65:ed:88:88:5d:42:c8:76: 55:cf:c3:df:03:6c:d6:f2:33:00:9e:2b:4e:f4:e3:b7:48:af: 67:f9:30:12:74:9e:c9:65:a9:47:50:72:e4:76:59:e4:ec:c3: 5a:6e:38:ba:a4:34:f5:08:9e:d5:25:4e:38:95:8e:8f:77:78: 0a:c0:95:34:7a:c6:0a:44:70:36:3e:80:e8:8d:50:69:0d:b3: ac:8e:53:47:e8:4f:75:dd:19:fd:b5:f0:43:53:27:e1:68:03: b1:6d:6c:f0:83:7e:f4:12:7c:f6:08:4c:7a:a6:8e:c7:90:65: a6:cd:e7:60:df:56:05:82:99:f7:9d:bc:7e:8c:25:90:4e:6f: a9:dd:f2:57:04:4a:ad:9c:f1:c3:21:ad:8a:70:c4:13:f8:3d: ca:4f:20:ce:22:95:03:f4:92:13:22:9b:fe:af:f2:f4:a7:54: 37:4d:a7:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDQSGe1+oASMUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjE2NGE3YmItN2FhNy00NzhkLWJkYmUtYjI3OWE4ZTdjMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNHjT0T+1HxekeCakUaYN1ks5x5bvxqa3MTS SkqXjVYi4ioqhxqVVciNrfBzEipJMpsMQsI7OhsbCpeN/eVE6KIICgi+PLM6/0qU IsR+XXE2O8k1E1BE/9myOHrr6DGxkqsMOwlEJMKm6snGBTmCQf8VoZQKz6dEs5Ja d1jxRUYV++5VZQR6f6Cx5iwAKj06kVdaGF9YI4U6Dqwo5RMVq6VpWaGSwxhiy9HY 3w+njoDb1x54fuV5Wdvw5/c8O3gr9+5TYrCoTLpNA58r8OvrSALJL6wS/ONVpIPj mNlw7XJ2KSc/tmgoql4wOcDGHsJmQJu4E4F7E1j+RsYnjCOTvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/D7osZ7HMFfSQ8N9eXMTcUSTy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvY2MxMjYyMDktYWViMy0z NjNiLTkyY2ItOGE0MDIyOWI1YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEooSVtvVM/vq8yIrCa4Sh4Ded5W3da0nyJANPQXDUTHqHLhdlA9IrZY 2hffMpDJLFwhrTCXIqV/lC0b27I14K2RIAFh/s74yVbZ6fLkKoIwwJpl7YiIXULI dlXPw98DbNbyMwCeK07047dIr2f5MBJ0nsllqUdQcuR2WeTsw1puOLqkNPUIntUl TjiVjo93eArAlTR6xgpEcDY+gOiNUGkNs6yOU0foT3XdGf218ENTJ+FoA7FtbPCD fvQSfPYITHqmjseQZabN52DfVgWCmfedvH6MJZBOb6nd8lcESq2c8cMhrYpwxBP4 PcpPIM4ilQP0khMim/6v8vSnVDdNpxg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:24 2025 by rpki-client