$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa File: 51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa (raw, json) Hash identifier: dN0zRG6MN5icb4wgj411uEuAUM2mlymcDBaV0sNnDH0= Subject key identifier: 7F:1B:F0:26:F1:CA:74:DC:DC:AC:9C:EC:6D:23:AE:4A:58:CF:87:7D Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F4328584B0CDC1AEDC0CA457C7ED58780 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 13332 IP address blocks: 172.84.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1a:ed:c0:ca:45:7c:7e:d5:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=02d0efe8-6938-45fa-9cf5-7691d904760b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:4b:4d:c9:2a:77:52:76:2d:03:72:3a:59: bf:fa:ba:e4:94:60:93:83:22:24:d0:35:9d:c8:97: 74:7e:a6:04:ef:83:6c:58:c5:11:48:ee:ec:5e:f0: cc:81:e5:75:d9:76:20:38:8b:1e:10:63:52:3d:87: 1d:69:22:64:83:04:fb:8c:e8:df:db:57:56:16:ec: 30:1a:6e:a2:54:af:6b:a7:1b:67:65:0f:4c:17:48: f9:67:ae:cb:2e:fa:4f:65:42:93:0c:a3:06:a1:83: 02:f1:6f:34:6e:a1:85:a5:ad:1e:1c:f6:e1:8b:e2: 24:c8:2b:15:04:bb:d9:c1:68:04:2e:c9:8a:b7:e0: 17:2c:67:03:b8:32:1f:20:b4:cf:88:a2:81:55:f8: 40:db:ed:57:4b:33:cd:51:9a:ae:24:b2:9f:7d:63: eb:56:88:f2:bf:5c:eb:fa:ff:66:40:9f:12:87:02: e5:95:77:9a:9d:4b:5e:f7:ab:39:6b:33:b2:e8:3a: 84:00:82:98:67:da:db:e6:d0:6b:3e:0d:da:24:11: ac:73:3c:ab:9c:2d:34:6e:ff:71:32:ec:d9:62:ad: e7:71:30:13:fd:5e:5a:29:ef:a0:0e:fa:21:7a:0f: d7:b7:4b:82:fb:4c:0f:d7:fe:5e:14:4c:97:c6:df: a2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1B:F0:26:F1:CA:74:DC:DC:AC:9C:EC:6D:23:AE:4A:58:CF:87:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:61:0e:f2:8c:6e:a0:63:fe:4e:3b:f9:82:bc:bd:cd:db:3c: a5:85:c8:24:66:4e:01:31:d1:ad:c5:0e:36:08:04:11:48:ce: 84:8b:83:00:ef:45:2c:ad:10:4f:32:28:ab:44:4b:18:e2:ef: 2a:e7:de:94:4d:fb:63:b7:b5:fe:80:be:f0:81:09:4a:cd:8f: a8:e7:c9:65:cf:89:f9:0f:bf:92:6e:7a:de:06:23:78:e1:b1: d0:01:73:71:05:0c:13:5d:96:b4:9a:12:49:e1:ad:f5:3e:31: 47:3c:09:a9:8d:4b:69:6a:ca:2e:82:85:32:70:38:24:85:eb: 4a:4d:f3:20:89:7a:3b:4a:71:a0:ea:7e:94:65:6c:ba:29:9b: 28:a4:9e:26:fc:36:7f:ec:f4:36:b0:11:8b:d7:19:b6:78:ba: 4a:a7:1d:17:c7:a2:22:13:82:76:ab:b3:47:ef:8f:51:55:7f: 0a:17:e1:10:63:28:6d:e1:90:ff:71:07:1a:b0:c1:37:71:55: 1b:9d:4e:4e:d6:b1:92:04:df:0a:17:47:c6:b7:df:2f:ab:01: de:67:3d:f4:32:a4:fc:9a:6b:27:35:50:8f:83:7b:01:b7:fa: 94:94:f7:2c:9a:a9:85:a6:dc:98:48:64:cf:4c:cc:36:82:dd: 01:6f:f2:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BrtwMpFfH7Vh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MDJkMGVmZTgtNjkzOC00NWZhLTljZjUtNzY5MWQ5MDQ3NjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwBLTckqd1J2LQNyOlm/+rrklGCTgyIk0DWd yJd0fqYE74NsWMURSO7sXvDMgeV12XYgOIseEGNSPYcdaSJkgwT7jOjf21dWFuww Gm6iVK9rpxtnZQ9MF0j5Z67LLvpPZUKTDKMGoYMC8W80bqGFpa0eHPbhi+IkyCsV BLvZwWgELsmKt+AXLGcDuDIfILTPiKKBVfhA2+1XSzPNUZquJLKffWPrVojyv1zr +v9mQJ8ShwLllXeanUte96s5azOy6DqEAIKYZ9rb5tBrPg3aJBGsczyrnC00bv9x MuzZYq3ncTAT/V5aKe+gDvoheg/Xt0uC+0wP1/5eFEyXxt+i+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8b8CbxynTc3Kyc7G0jrkpYz4d9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvNTFjNGVmMGUtOTZkYi0z NzFjLTk2OTgtYTg3ZTcyZGZkZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADthDvKMbqBj/k47+YK8vc3bPKWFyCRmTgEx0a3FDjYIBBFIzoSLgwDv RSytEE8yKKtESxji7yrn3pRN+2O3tf6AvvCBCUrNj6jnyWXPifkPv5Juet4GI3jh sdABc3EFDBNdlrSaEknhrfU+MUc8CamNS2lqyi6ChTJwOCSF60pN8yCJejtKcaDq fpRlbLopmyiknib8Nn/s9DawEYvXGbZ4ukqnHRfHoiITgnars0fvj1FVfwoX4RBj KG3hkP9xBxqwwTdxVRudTk7WsZIE3woXR8a33y+rAd5nPfQypPyaayc1UI+DewG3 +pSU9yyaqYWm3JhIZM9MzDaC3QFv8ns= -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:48 2025 by rpki-client