$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ffcaa1ee-fb4b-332c-8522-52ce8e6d8af9.roa File: ffcaa1ee-fb4b-332c-8522-52ce8e6d8af9.roa (raw, json) Hash identifier: w0iXFSMXgjpTsg5EzOU7Vg6uT5eZegaTVXQyGykmlfo= Subject key identifier: 1C:6B:14:6E:47:B9:59:7F:84:69:20:55:C4:2C:F8:85:C0:E3:F9:BF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF203D618AC84F9EE4E40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ffcaa1ee-fb4b-332c-8522-52ce8e6d8af9.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 137.83.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f2:03:d6:18:ac:84:f9:ee:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=256b8675-19e4-4b79-b6a2-9604635a381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5c:a6:0e:8c:7f:69:6f:09:71:6b:05:4b:f6: 2a:a2:1c:f5:a1:14:1a:f0:00:1a:83:59:dd:ed:78: 78:63:19:4b:80:4e:c5:50:70:b3:65:75:7d:b0:b9: 37:c6:f5:f6:dd:8a:d9:21:d5:08:6d:56:ed:ab:11: 7e:ac:88:79:07:11:69:df:0c:d7:36:7e:f9:a1:28: de:00:5f:21:90:db:6b:1c:bd:5c:83:65:67:78:6f: 86:28:1c:52:a9:f0:e9:49:d3:e8:bb:1f:a7:0c:3d: 95:f7:0e:cc:1f:cf:72:6a:5c:04:12:50:f0:7b:5b: 03:1a:99:29:77:b2:5a:ab:56:f3:c2:a3:5f:72:b7: f2:6d:8c:6b:0f:48:7f:5a:c5:46:94:70:e7:66:f5: 21:29:14:1a:e6:15:e4:ec:e6:40:a5:94:9d:69:d2: 6d:47:a9:42:89:22:e3:c7:53:21:d7:bc:d5:83:1f: bd:bb:71:12:ad:65:25:c8:ef:9a:a9:a6:bb:48:34: 34:df:7b:ea:33:14:2d:b4:44:d6:e6:6b:51:1f:6f: 25:30:da:2b:04:9e:69:29:61:3d:f6:6c:5f:4b:d7: 01:92:8e:bd:3b:7d:47:6c:a1:39:7b:c2:7d:e8:56: e0:21:ca:63:2d:79:76:b7:2d:82:b3:1a:c4:e2:99: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6B:14:6E:47:B9:59:7F:84:69:20:55:C4:2C:F8:85:C0:E3:F9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ffcaa1ee-fb4b-332c-8522-52ce8e6d8af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:88:86:10:79:ba:79:1f:77:6c:71:31:7d:5f:7f:c1:15:38: d2:62:5e:a4:43:de:74:fb:94:7b:41:b6:5e:bc:03:ba:f7:6e: 08:27:61:ca:c2:e4:7e:a2:2e:52:ed:a3:20:cb:f1:8a:c7:c0: aa:ec:f1:31:50:d9:0a:80:0a:9b:06:05:43:9d:1e:e4:a6:02: 50:66:65:1d:c7:8a:4f:d3:b9:7e:ef:34:2a:38:4e:40:a1:a8: 11:04:b0:cb:1e:35:b1:c7:f8:f6:35:88:8b:7f:13:31:3b:9e: 0e:96:01:d6:0c:28:39:31:f6:c1:9d:4a:f7:25:f3:b1:2b:fc: af:e1:ef:db:9d:40:a7:55:46:15:21:9d:1b:6e:8a:10:00:63: b3:2b:ca:5f:c0:a6:f9:8c:b4:88:e5:ca:63:de:76:14:22:16: fa:eb:ff:83:86:d9:5e:61:d3:f5:e5:d6:c6:c7:16:9b:fb:cb: cb:3c:46:3d:6b:86:e2:1e:b5:db:c8:86:46:3e:60:d0:70:58: 6f:dc:b4:e3:7c:c8:a1:ec:23:71:b7:35:a2:0b:6e:9c:5d:79: 75:d7:61:e7:c7:78:71:8b:85:82:28:a4:ac:ed:82:70:95:6e: d6:e4:d7:6b:a7:33:ef:8e:f3:c5:79:77:47:87:c4:a4:89:57: b1:cc:95:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPID1hishPnuTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MjU2Yjg2NzUtMTllNC00Yjc5LWI2YTItOTYwNDYzNWEzODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VymDox/aW8JcWsFS/Yqohz1oRQa8AAag1nd 7Xh4YxlLgE7FUHCzZXV9sLk3xvX23YrZIdUIbVbtqxF+rIh5BxFp3wzXNn75oSje AF8hkNtrHL1cg2VneG+GKBxSqfDpSdPoux+nDD2V9w7MH89yalwEElDwe1sDGpkp d7Jaq1bzwqNfcrfybYxrD0h/WsVGlHDnZvUhKRQa5hXk7OZApZSdadJtR6lCiSLj x1Mh17zVgx+9u3ESrWUlyO+aqaa7SDQ033vqMxQttETW5mtRH28lMNorBJ5pKWE9 9mxfS9cBko69O31HbKE5e8J96FbgIcpjLXl2ty2CsxrE4pnXiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxrFG5HuVl/hGkgVcQs+IXA4/m/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmZjYWExZWUtZmI0Yi0z MzJjLTg1MjItNTJjZThlNmQ4YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2IhhB5unkfd2xxMX1ff8EVONJiXqRD3nT7lHtBtl68A7r3bggnYcrC 5H6iLlLtoyDL8YrHwKrs8TFQ2QqACpsGBUOdHuSmAlBmZR3Hik/TuX7vNCo4TkCh qBEEsMseNbHH+PY1iIt/EzE7ng6WAdYMKDkx9sGdSvcl87Er/K/h79udQKdVRhUh nRtuihAAY7Mryl/ApvmMtIjlymPedhQiFvrr/4OG2V5h0/Xl1sbHFpv7y8s8Rj1r huIetdvIhkY+YNBwWG/ctON8yKHsI3G3NaILbpxdeXXXYefHeHGLhYIopKztgnCV btbk12unM++O88V5d0eHxKSJV7HMlcQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:14:06 2025 by rpki-client