$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/40d96a9f-3878-3800-8108-bcf11caca39d.roa File: 40d96a9f-3878-3800-8108-bcf11caca39d.roa (raw, json) Hash identifier: K3MSDIjX79G+S4Md+cgFZXEGWG5p0G2u8CgVMUJR6aw= Subject key identifier: FC:A0:DE:73:5E:74:26:FD:EA:9F:F3:37:20:D4:35:98:DA:F7:78:31 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF47D96015F38B3873A80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/40d96a9f-3878-3800-8108-bcf11caca39d.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 137.83.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f4:7d:96:01:5f:38:b3:87:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=32675dd4-007b-4eac-9d6f-7cc033d49789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ae:e3:c7:3c:9c:12:db:69:bf:3f:d5:1a:42: f2:88:93:bf:fa:7a:85:03:4d:29:77:5e:6b:8c:f4: d2:18:26:c8:b8:06:ab:47:0c:77:ab:d7:ea:d5:63: e7:e0:8c:e3:0e:80:b2:66:5c:23:5f:9b:8b:05:7a: c4:12:25:b3:d5:7a:7f:9c:4b:18:65:11:ae:99:46: 20:72:f0:fa:82:bc:8a:30:45:a7:90:b8:44:5e:32: be:58:35:4d:84:32:fb:85:05:9d:6d:5d:af:6b:48: 0d:2f:78:a4:4f:28:35:82:21:c6:24:39:12:2d:00: ac:3e:71:04:21:81:c9:31:97:c0:ce:80:b2:4f:2b: 27:57:e5:46:a8:29:61:ed:d3:66:8c:87:0e:41:f5: ea:67:f0:7e:ca:61:fe:fd:58:ac:d5:8b:9e:f5:af: 65:bc:12:2c:04:e6:d2:5a:3b:cb:df:3c:6d:55:2f: 63:b3:e6:c7:e1:a6:98:b3:c8:f9:d2:17:9a:f5:67: 52:3d:da:d2:e7:be:7d:4b:4c:87:c4:46:81:cc:27: b0:9e:b6:e9:79:72:f3:17:61:9b:75:f8:29:9f:64: 2c:a7:e5:68:a4:93:d9:10:3e:1a:8b:16:3b:26:3a: e6:a0:ad:a9:c3:26:f6:82:46:a1:38:bc:6c:02:a8: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A0:DE:73:5E:74:26:FD:EA:9F:F3:37:20:D4:35:98:DA:F7:78:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/40d96a9f-3878-3800-8108-bcf11caca39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ff:f6:73:40:e2:e0:62:ee:92:3f:b9:0a:5f:3d:64:9c:7d: 87:d0:fd:71:61:b0:47:f4:73:4b:c6:bc:36:c6:11:fe:56:9d: b9:0f:c2:43:0f:c0:ed:0b:19:f8:3d:46:9c:ad:4c:bb:99:10: a9:b6:80:fd:df:0d:18:be:59:a0:c6:a7:4f:65:ea:56:b0:e9: 7f:12:95:ac:48:2e:48:9f:cb:da:0a:b3:a9:57:94:fc:c5:47: 77:af:55:7c:d2:59:9a:aa:ea:36:a6:29:57:6d:93:95:f6:d7: fc:f3:f4:54:b9:00:53:bd:8d:99:46:bb:d1:2f:77:0a:b9:ee: 22:21:9e:48:67:01:1f:7a:5c:ff:eb:5f:ab:5f:ae:6f:ab:65: 7c:f5:e0:45:5d:f8:ba:03:e6:cc:7c:fb:8b:aa:4d:2a:fa:0f: 21:16:1b:1c:47:4a:2e:b4:46:a5:8b:81:96:c6:7c:6f:3d:53: 57:58:8a:09:23:55:24:c5:7c:9a:83:e2:d1:48:75:75:1a:77: 18:f0:9d:e4:17:ea:fd:1c:63:d2:d0:4a:6d:81:30:da:10:88: 42:9e:b3:af:27:02:e1:30:20:0f:1f:e0:f4:6d:fb:5f:52:ca: 46:9f:76:ac:01:28:46:4f:94:ce:cd:23:43:24:0b:a3:84:06: e9:52:1b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPR9lgFfOLOHOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MzI2NzVkZDQtMDA3Yi00ZWFjLTlkNmYtN2NjMDMzZDQ5Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK7jxzycEttpvz/VGkLyiJO/+nqFA00pd15r jPTSGCbIuAarRwx3q9fq1WPn4IzjDoCyZlwjX5uLBXrEEiWz1Xp/nEsYZRGumUYg cvD6gryKMEWnkLhEXjK+WDVNhDL7hQWdbV2va0gNL3ikTyg1giHGJDkSLQCsPnEE IYHJMZfAzoCyTysnV+VGqClh7dNmjIcOQfXqZ/B+ymH+/Vis1Yue9a9lvBIsBObS WjvL3zxtVS9js+bH4aaYs8j50hea9WdSPdrS5759S0yHxEaBzCewnrbpeXLzF2Gb dfgpn2Qsp+VopJPZED4aixY7JjrmoK2pwyb2gkahOLxsAqi2wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyg3nNedCb96p/zNyDUNZja93gxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDBkOTZhOWYtMzg3OC0z ODAwLTgxMDgtYmNmMTFjYWNhMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7/9nNA4uBi7pI/uQpfPWScfYfQ/XFhsEf0c0vGvDbGEf5WnbkPwkMP wO0LGfg9RpytTLuZEKm2gP3fDRi+WaDGp09l6law6X8SlaxILkify9oKs6lXlPzF R3evVXzSWZqq6jamKVdtk5X21/zz9FS5AFO9jZlGu9Evdwq57iIhnkhnAR96XP/r X6tfrm+rZXz14EVd+LoD5sx8+4uqTSr6DyEWGxxHSi60RqWLgZbGfG89U1dYigkj VSTFfJqD4tFIdXUadxjwneQX6v0cY9LQSm2BMNoQiEKes68nAuEwIA8f4PRt+19S ykafdqwBKEZPlM7NI0MkC6OEBulSG1U= -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:29 2025 by rpki-client