$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa File: a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa (raw, json) Hash identifier: Dv0BNV7gVMTwgtrc//r2Mo6NbXD0fulRidYivJ7igpI= Subject key identifier: 9F:5D:CE:01:0C:8F:AB:6E:3B:AE:20:70:81:65:A0:BC:F7:B0:5B:11 Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F4328584B110BFDA858844DBDDB4AB400 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 1448 IP address blocks: 156.146.128.0/17 maxlen: 17 158.41.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fd:a8:58:84:4d:bd:db:4a:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=ab57b4a4-08ce-4ef7-866f-4b52f8ba7ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:46:63:ec:ae:af:6d:7a:cf:71:b4:9b:1e: fb:53:e7:ef:2e:20:f9:74:9e:1f:2a:e6:6f:51:89: e4:96:47:d5:6a:83:8e:a8:9b:79:c7:8b:af:84:c5: 1d:c2:c2:c7:d8:5c:b5:93:4e:ac:f4:06:90:cd:84: 47:ca:47:32:73:58:01:05:bd:d9:09:60:23:33:a5: ab:62:24:a8:9f:89:d6:21:59:94:c8:45:e7:54:85: b1:39:1f:93:31:cc:0c:35:3c:39:ab:72:f7:4b:a6: 52:28:e7:1d:24:3e:96:27:75:d6:82:44:44:18:66: cb:8e:45:91:3d:fc:a6:20:ef:f5:d1:c0:f2:71:43: f3:24:d0:3d:1c:90:e9:a9:b4:da:5d:df:58:c3:8d: 92:5e:75:ca:eb:6e:7f:43:4c:ef:58:02:fe:af:3d: df:80:5d:b0:0a:17:38:c1:43:58:df:1c:b5:e8:87: b5:bf:19:35:ca:b5:6f:61:12:a5:3f:b3:07:3c:ea: 01:c9:1d:75:02:12:b7:d8:33:14:53:e1:76:6b:2b: 57:a0:27:b8:c1:2b:4b:c5:06:1a:4d:91:f7:15:8a: c6:d0:3e:64:e4:f5:b9:4b:79:e1:46:6a:c4:31:ff: c0:17:7a:ae:eb:f1:98:e5:63:07:61:0e:ef:45:0f: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:CE:01:0C:8F:AB:6E:3B:AE:20:70:81:65:A0:BC:F7:B0:5B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1e219f1-4e6f-3b25-8e70-00d949fa391d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b9:a3:c8:d5:a4:ce:76:01:bd:f6:c2:db:04:c9:e7:94:ca: 97:0f:3c:7c:80:0b:eb:87:0c:fa:80:c7:70:11:5b:37:c8:0c: df:a2:54:90:13:80:ff:ed:e0:12:d9:53:0a:6b:96:ab:f4:bb: 3a:25:1c:9b:2f:ce:97:63:38:54:71:50:6f:ac:62:84:7a:05: 82:63:0f:dc:8a:5a:c7:3b:ef:91:64:21:11:79:dd:a6:11:ac: 04:ca:56:ea:48:88:ba:f6:c9:62:e1:81:40:b8:e9:44:d7:0e: 50:ff:c5:0b:45:ea:3c:77:3d:d6:b9:29:4e:b1:9a:f4:72:53: 1a:1b:80:60:39:66:f8:ec:3a:81:b0:7a:47:a7:f4:70:a2:3f: 4a:39:b7:32:a7:8e:cb:5c:f1:10:6a:96:78:eb:a0:6f:ab:33: a0:ee:f3:6c:8c:5b:2e:e0:9c:cd:1f:aa:02:db:94:59:34:e7: dc:52:41:7f:0f:d4:69:52:dd:c9:30:ee:02:b0:5a:d9:7e:1b: 3d:85:25:21:a6:b8:d2:59:b4:56:85:37:3a:1b:c7:bf:4e:28: 5e:8f:af:3b:06:c5:42:b4:bc:a0:fb:c5:7a:cf:ba:38:cd:ea: 64:5b:d7:fe:c9:0e:79:7d:5f:6c:cc:03:21:e7:be:b1:6d:8d: dc:a9:a9:5c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsRC/2oWIRNvdtKtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWI1N2I0YTQtMDhjZS00ZWY3LTg2NmYtNGI1MmY4YmE3YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunlGY+yur216z3G0mx77U+fvLiD5dJ4fKuZv UYnklkfVaoOOqJt5x4uvhMUdwsLH2Fy1k06s9AaQzYRHykcyc1gBBb3ZCWAjM6Wr YiSon4nWIVmUyEXnVIWxOR+TMcwMNTw5q3L3S6ZSKOcdJD6WJ3XWgkREGGbLjkWR PfymIO/10cDycUPzJNA9HJDpqbTaXd9Yw42SXnXK625/Q0zvWAL+rz3fgF2wChc4 wUNY3xy16Ie1vxk1yrVvYRKlP7MHPOoByR11AhK32DMUU+F2aytXoCe4wStLxQYa TZH3FYrG0D5k5PW5S3nhRmrEMf/AF3qu6/GY5WMHYQ7vRQ/XgQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ9dzgEMj6tuO64gcIFloLz3sFsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTFlMjE5ZjEtNGU2Zi0z YjI1LThlNzAtMDBkOTQ5ZmEzOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADO5o8jVpM52Ab32wtsEyeeUypcPPHyAC+uHDPqAx3ARWzfI DN+iVJATgP/t4BLZUwprlqv0uzolHJsvzpdjOFRxUG+sYoR6BYJjD9yKWsc775Fk IRF53aYRrATKVupIiLr2yWLhgUC46UTXDlD/xQtF6jx3Pda5KU6xmvRyUxobgGA5 ZvjsOoGweken9HCiP0o5tzKnjstc8RBqlnjroG+rM6Du82yMWy7gnM0fqgLblFk0 59xSQX8P1GlS3ckw7gKwWtl+Gz2FJSGmuNJZtFaFNzobx79OKF6PrzsGxUK0vKD7 xXrPujjN6mRb1/7JDnl9X2zMAyHnvrFtjdypqVw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:06 2025 by rpki-client