$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1a4f08e-ae48-3bde-bc03-567aa0ff1548.roa File: b1a4f08e-ae48-3bde-bc03-567aa0ff1548.roa (raw, json) Hash identifier: KZgCTISTXiIJdbT/AXtXt9Tt89IIfRce3yMW/CqyGc8= Subject key identifier: 42:6A:24:25:D3:5E:65:4F:DD:DB:E4:38:76:46:45:14:32:EE:6B:82 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF355934804CF463BD880 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1a4f08e-ae48-3bde-bc03-567aa0ff1548.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 137.83.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f3:55:93:48:04:cf:46:3b:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=8a99f0c3-1dcd-47f6-b67b-b33439d025d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:82:ea:8f:73:04:61:a5:07:b6:69:cb:2d:3a: ef:46:67:19:04:ae:d1:52:21:4f:fa:2e:52:65:85: 34:f7:18:a7:9b:76:9c:cc:9c:2d:4b:f7:68:b3:e4: ca:65:25:8a:4c:9a:05:ce:aa:cb:7f:5c:58:2d:62: b0:11:49:03:80:65:f8:c7:b9:3a:87:a0:5e:4b:d6: b7:5f:4a:13:3b:c5:aa:8f:cf:a4:35:a4:a2:6f:c1: 08:2c:85:2c:7b:f2:c6:80:3e:ba:ba:4e:8f:fd:30: 0c:5e:37:86:90:db:63:ea:85:0e:a2:8e:4a:6a:64: 97:3b:d9:ea:2a:98:e8:93:40:09:16:1b:b1:18:91: 0a:ed:63:cf:d7:61:18:a1:9d:bd:f2:8e:7b:9a:cd: 05:58:41:b4:45:c5:4f:a1:e9:4e:fe:7b:d9:97:e0: 3c:68:5e:4a:80:81:ac:4b:7c:18:d2:8f:3b:4d:4f: 13:88:40:c9:a5:dd:90:c1:43:3f:bd:9d:73:6f:05: 87:63:b7:71:fc:eb:48:58:2b:89:ee:d2:fd:a9:fe: ad:38:54:80:2b:44:4c:f6:52:c4:b4:ef:80:b9:63: 16:2e:bc:03:4d:fe:74:60:cd:b1:47:33:71:29:fa: e3:6a:75:35:43:2a:34:e0:fd:ea:a1:d6:d9:dd:be: 94:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6A:24:25:D3:5E:65:4F:DD:DB:E4:38:76:46:45:14:32:EE:6B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b1a4f08e-ae48-3bde-bc03-567aa0ff1548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7c:e0:d5:a0:d5:2f:c1:c0:f8:ee:5a:90:6f:da:d5:6a:89: 1d:fa:73:d7:a3:2d:63:02:97:13:e6:be:3a:bc:ea:e2:fd:10: fb:6c:53:54:db:51:eb:9c:16:bf:07:db:c6:f6:de:11:10:44: d1:2f:0e:47:d8:75:27:76:e9:88:57:2a:9c:9a:77:e9:75:3f: 2a:83:9f:a5:c3:61:41:38:c2:bd:37:70:79:7f:37:a7:ab:b1: 8a:39:df:d1:e4:b2:a4:6e:f7:54:f6:52:80:27:bc:01:93:d6: 73:58:63:1e:03:d9:da:b8:d3:51:dd:90:cc:81:b4:0e:6f:86: c2:ab:cf:46:bc:27:1a:92:5b:d0:9b:b0:b1:3b:af:65:00:e4: 3c:7e:c3:5e:50:1d:cf:09:da:87:57:49:59:b5:44:05:d7:c8: 57:fd:f2:be:77:cb:25:25:d9:24:3d:80:f9:7c:41:31:53:93: c7:df:23:16:71:77:e1:90:36:58:e8:af:4c:c2:70:35:5e:a4: 87:68:87:72:dc:19:36:e0:d6:b1:e2:c0:2a:74:86:14:e4:5e: 4d:f7:11:20:03:f9:d2:22:e0:fe:1d:64:c3:25:2a:5a:fc:6b: 50:a2:09:bd:13:00:8a:03:09:79:11:9e:e8:3c:72:17:89:44: 83:5d:c4:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPNVk0gEz0Y72IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk OGE5OWYwYzMtMWRjZC00N2Y2LWI2N2ItYjMzNDM5ZDAyNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24Lqj3MEYaUHtmnLLTrvRmcZBK7RUiFP+i5S ZYU09xinm3aczJwtS/dos+TKZSWKTJoFzqrLf1xYLWKwEUkDgGX4x7k6h6BeS9a3 X0oTO8Wqj8+kNaSib8EILIUse/LGgD66uk6P/TAMXjeGkNtj6oUOoo5KamSXO9nq Kpjok0AJFhuxGJEK7WPP12EYoZ298o57ms0FWEG0RcVPoelO/nvZl+A8aF5KgIGs S3wY0o87TU8TiEDJpd2QwUM/vZ1zbwWHY7dx/OtIWCuJ7tL9qf6tOFSAK0RM9lLE tO+AuWMWLrwDTf50YM2xRzNxKfrjanU1Qyo04P3qodbZ3b6UXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJqJCXTXmVP3dvkOHZGRRQy7muCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjFhNGYwOGUtYWU0OC0z YmRlLWJjMDMtNTY3YWEwZmYxNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVObMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx84NWg1S/BwPjuWpBv2tVqiR36c9ejLWMClxPmvjq86uL9EPtsU1Tb UeucFr8H28b23hEQRNEvDkfYdSd26YhXKpyad+l1PyqDn6XDYUE4wr03cHl/N6er sYo539HksqRu91T2UoAnvAGT1nNYYx4D2dq401HdkMyBtA5vhsKrz0a8JxqSW9Cb sLE7r2UA5Dx+w15QHc8J2odXSVm1RAXXyFf98r53yyUl2SQ9gPl8QTFTk8ffIxZx d+GQNljor0zCcDVepIdoh3LcGTbg1rHiwCp0hhTkXk33ESAD+dIi4P4dZMMlKlr8 a1CiCb0TAIoDCXkRnug8cheJRINdxOI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:25 2025 by rpki-client