$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3511831e-2159-3645-ac13-21cd5f048ce7.roa File: 3511831e-2159-3645-ac13-21cd5f048ce7.roa (raw, json) Hash identifier: mS3haoTGpX+ktsa9yMOpeWskvJYBCGnDJTinAXlx4ao= Subject key identifier: 80:CD:CE:92:18:A4:74:AC:B3:B8:DE:58:0D:D5:F2:C5:AD:FF:CA:92 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF45C8517067CFA879E80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3511831e-2159-3645-ac13-21cd5f048ce7.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 137.83.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f4:5c:85:17:06:7c:fa:87:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=ddfc207a-fb94-40e1-bd50-64f9548e962e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:21:fc:e9:0f:b3:51:b5:49:1d:cd:30:78:2f: ff:8f:0c:7b:9c:53:44:82:19:08:c5:55:5f:e3:4c: c9:63:09:51:f6:5f:06:6d:37:5c:19:71:a6:e4:e7: 54:e2:19:19:ac:b1:ed:cd:19:33:3b:17:93:7b:0d: d8:ed:94:44:57:06:57:0e:18:23:52:54:86:f4:32: 78:75:f2:52:8c:3f:12:a5:ef:ce:f5:e8:45:52:f4: 3d:8f:44:dd:63:9c:e5:18:60:b8:2d:65:af:58:c6: 23:b6:60:08:11:1c:eb:54:e2:5a:ef:7d:66:ad:4a: 79:dc:f7:54:4a:3f:ed:a6:d6:9b:f5:f2:aa:2d:20: 2d:3b:73:d9:43:6e:ea:26:33:fc:e8:ac:e7:73:db: 49:0f:87:c5:53:37:6f:61:41:0c:4b:1f:6d:02:a5: 27:c3:f9:27:19:7b:cf:65:50:3b:0f:fd:10:4f:b2: 95:7b:0f:b7:ae:db:69:69:76:f3:82:55:fd:0b:4e: 5b:3e:e5:32:67:37:95:5f:db:ac:ef:31:f8:3d:85: 00:78:6d:4d:b0:91:91:fb:08:ed:ae:f4:c0:03:f8: 0e:de:ea:05:7b:49:f4:b5:b9:22:f8:93:32:7a:3c: c2:9b:bb:eb:79:0a:18:e6:70:8c:90:6b:c6:45:fa: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CD:CE:92:18:A4:74:AC:B3:B8:DE:58:0D:D5:F2:C5:AD:FF:CA:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3511831e-2159-3645-ac13-21cd5f048ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b5:36:ff:0f:a7:b3:7f:b7:f3:81:c0:12:c1:ef:1b:29:58: 1c:48:c3:1d:e5:0a:79:8d:99:c5:b8:99:e9:25:44:ea:08:37: 25:c2:e9:c9:09:89:30:78:d8:68:05:45:ee:61:ab:dc:26:23: 53:40:04:9e:bd:5e:1a:00:9c:09:77:64:06:b9:af:ee:8c:20: 90:83:b0:2c:68:ee:de:02:68:1f:0b:3c:51:bf:3a:32:25:16: f1:1d:23:d1:51:2a:e3:75:db:73:3d:3c:cb:02:30:d1:50:e9: 9b:33:82:02:cf:b5:fa:62:da:dd:2e:35:40:31:86:bb:0f:d3: 1e:48:e7:00:90:62:b2:37:52:10:a0:e7:69:1a:4c:e0:26:1c: fa:16:dd:bf:5c:00:f3:c3:dd:1f:4b:f1:41:af:4c:3b:21:5f: d6:90:52:78:62:17:c0:03:2a:95:67:19:a9:95:9f:6c:a4:8e: 6a:f5:72:d6:71:1d:45:54:79:34:50:0c:12:55:2a:25:f9:ab: e9:78:ac:4c:39:0e:46:0b:da:65:64:fc:f6:67:98:53:26:2e: 16:17:f3:56:93:4f:a1:45:69:7c:19:0b:d0:d7:e6:45:67:68: 79:f1:a5:2a:fc:d3:12:56:7a:2d:22:70:7e:3f:58:52:cb:f4: fc:d1:80:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPRchRcGfPqHnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZGRmYzIwN2EtZmI5NC00MGUxLWJkNTAtNjRmOTU0OGU5NjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiH86Q+zUbVJHc0weC//jwx7nFNEghkIxVVf 40zJYwlR9l8GbTdcGXGm5OdU4hkZrLHtzRkzOxeTew3Y7ZREVwZXDhgjUlSG9DJ4 dfJSjD8Spe/O9ehFUvQ9j0TdY5zlGGC4LWWvWMYjtmAIERzrVOJa731mrUp53PdU Sj/tptab9fKqLSAtO3PZQ27qJjP86Kznc9tJD4fFUzdvYUEMSx9tAqUnw/knGXvP ZVA7D/0QT7KVew+3rttpaXbzglX9C05bPuUyZzeVX9us7zH4PYUAeG1NsJGR+wjt rvTAA/gO3uoFe0n0tbki+JMyejzCm7vreQoY5nCMkGvGRfqwIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDNzpIYpHSss7jeWA3V8sWt/8qSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzUxMTgzMWUtMjE1OS0z NjQ1LWFjMTMtMjFjZDVmMDQ4Y2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS1Nv8Pp7N/t/OBwBLB7xspWBxIwx3lCnmNmcW4meklROoINyXC6ckJ iTB42GgFRe5hq9wmI1NABJ69XhoAnAl3ZAa5r+6MIJCDsCxo7t4CaB8LPFG/OjIl FvEdI9FRKuN123M9PMsCMNFQ6ZszggLPtfpi2t0uNUAxhrsP0x5I5wCQYrI3UhCg 52kaTOAmHPoW3b9cAPPD3R9L8UGvTDshX9aQUnhiF8ADKpVnGamVn2ykjmr1ctZx HUVUeTRQDBJVKiX5q+l4rEw5DkYL2mVk/PZnmFMmLhYX81aTT6FFaXwZC9DX5kVn aHnxpSr80xJWei0icH4/WFLL9PzRgOQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:35 2025 by rpki-client