$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa File: a936f59c-530b-3701-8514-dcc669422914.roa (raw, json) Hash identifier: u/yTIdbUyWiGktAnREldzqU/JrjXHTrJV7iF21xSDuk= Subject key identifier: 75:32:93:F3:81:47:84:74:C2:94:A9:8F:35:4F:8C:E4:B0:FF:05:E2 Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F4328584BAF311171570F25CB4F244390 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 1448 IP address blocks: 156.146.128.0/18 maxlen: 18 156.146.192.0/20 maxlen: 20 156.146.208.0/20 maxlen: 20 156.146.224.0/19 maxlen: 19 158.41.128.0/19 maxlen: 19 158.41.160.0/20 maxlen: 20 158.41.176.0/21 maxlen: 21 158.41.184.0/21 maxlen: 21 158.41.192.0/20 maxlen: 20 158.41.208.0/20 maxlen: 20 158.41.224.0/20 maxlen: 20 158.41.240.0/20 maxlen: 20 158.41.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:af:31:11:71:57:0f:25:cb:4f:24:43:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=5b48c9ab-67ea-4d26-b1b4-493634d7f8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:85:6c:eb:e1:4c:d3:30:72:dc:e6:40:39: e6:7c:98:02:15:66:f2:f2:6d:a7:69:dd:32:8e:1b: 10:c8:29:2d:ff:95:8b:b7:ea:87:ca:db:e2:92:38: aa:e5:d3:b5:28:c0:a0:42:f3:a4:a0:ea:ed:06:5b: be:ec:1e:e7:6f:fa:f3:aa:d0:bf:d9:21:2d:07:9c: 46:4e:f1:f2:9a:2b:a7:b4:ac:d4:cc:2d:8e:c0:7b: 50:9c:68:ab:a8:20:f9:6d:ab:6f:54:3a:bf:8f:2e: b0:c8:7d:2e:fc:b4:91:6c:6b:7a:bd:88:14:8e:a7: 7e:7f:60:b1:44:32:42:dd:5f:88:d0:40:bd:82:21: a8:9c:08:bc:27:79:cd:f1:c2:6f:15:f7:2d:1d:67: c5:0f:5d:8b:95:b8:dc:c0:ba:0b:ec:a3:4f:15:4d: c0:3a:ac:6d:8f:9e:92:9c:94:68:a2:a2:fd:f0:7f: 9a:1c:b9:e9:0a:47:68:3e:14:b1:11:d4:1d:ff:ae: 76:e3:2f:95:2d:2a:3a:de:21:92:ce:e1:25:66:a7: 38:de:98:73:4e:7f:26:98:db:cc:ba:28:76:fa:75: 7d:8d:ab:84:f7:98:81:8a:6a:8d:55:99:79:34:6e: eb:48:24:2a:f1:57:39:d8:da:44:e6:f4:a1:3a:c6: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:32:93:F3:81:47:84:74:C2:94:A9:8F:35:4F:8C:E4:B0:FF:05:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a936f59c-530b-3701-8514-dcc669422914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:32:83:57:a7:7d:ca:aa:bc:f1:6f:19:da:f2:02:70:31:75: ba:34:75:cd:a5:6f:40:d6:c6:ed:4b:e1:5d:08:28:12:47:4c: 73:02:22:08:ce:31:43:05:52:11:7a:21:65:c7:49:0c:19:4b: da:3c:7a:f1:74:78:ef:b3:3b:87:1e:fb:7f:df:38:0f:4a:06: ac:b1:3b:13:45:19:74:0e:c7:27:95:ec:c9:99:91:c6:96:7c: 00:87:5e:89:62:52:47:71:d6:64:c4:16:6a:d9:88:b1:dc:de: da:bd:a6:27:fe:3e:ec:56:f6:37:8a:b0:ac:5a:22:28:57:b4: 8d:70:ce:05:16:93:f5:5e:0c:ef:e8:99:7b:ff:3f:ea:41:18: c8:09:d4:c4:c9:eb:62:d5:76:6b:4b:f7:77:f7:a7:28:4c:f7: 90:68:14:36:b2:c5:f0:ca:e3:34:5f:bb:32:c0:4c:87:dd:d2: 2e:5d:aa:f3:22:02:b2:d8:80:63:8a:85:9b:d7:24:ba:48:a9: 2d:48:13:c4:38:65:1a:06:92:73:0e:c6:ab:62:76:81:25:9f: 96:31:a5:4f:85:67:8b:2c:92:73:5a:ee:b9:b6:fd:a5:7b:d6: a4:63:75:52:90:98:a8:10:1f:c6:94:03:3e:59:23:c7:31:3e: 12:14:ff:e1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuvMRFxVw8ly08kQ5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NWI0OGM5YWItNjdlYS00ZDI2LWIxYjQtNDkzNjM0ZDdmOGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXmFbOvhTNMwctzmQDnmfJgCFWby8m2nad0y jhsQyCkt/5WLt+qHytvikjiq5dO1KMCgQvOkoOrtBlu+7B7nb/rzqtC/2SEtB5xG TvHymiuntKzUzC2OwHtQnGirqCD5batvVDq/jy6wyH0u/LSRbGt6vYgUjqd+f2Cx RDJC3V+I0EC9giGonAi8J3nN8cJvFfctHWfFD12LlbjcwLoL7KNPFU3AOqxtj56S nJRooqL98H+aHLnpCkdoPhSxEdQd/6524y+VLSo63iGSzuElZqc43phzTn8mmNvM uih2+nV9jauE95iBimqNVZl5NG7rSCQq8Vc52NpE5vShOsbBrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHUyk/OBR4R0wpSpjzVPjOSw/wXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYTkzNmY1OWMtNTMwYi0z NzAxLTg1MTQtZGNjNjY5NDIyOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIAyg1enfcqqvPFvGdryAnAxdbo0dc2lb0DWxu1L4V0IKBJH THMCIgjOMUMFUhF6IWXHSQwZS9o8evF0eO+zO4ce+3/fOA9KBqyxOxNFGXQOxyeV 7MmZkcaWfACHXoliUkdx1mTEFmrZiLHc3tq9pif+PuxW9jeKsKxaIihXtI1wzgUW k/VeDO/omXv/P+pBGMgJ1MTJ62LVdmtL93f3pyhM95BoFDayxfDK4zRfuzLATIfd 0i5dqvMiArLYgGOKhZvXJLpIqS1IE8Q4ZRoGknMOxqtidoEln5YxpU+FZ4ssknNa 7rm2/aV71qRjdVKQmKgQH8aUAz5ZI8cxPhIU/+E= -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:12 2025 by rpki-client