$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa File: 3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa (raw, json) Hash identifier: DAcd14bxedKDa5JUMmM20S7jG2k9M2DEPyGg3snpnPw= Subject key identifier: 95:6B:B0:F4:A5:FD:BD:09:1C:55:D2:5F:13:FD:FB:3F:69:30:11:9E Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AF0F1498BB9801ACEEDD83300 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 7181 IP address blocks: 40.133.32.0/21 maxlen: 24 40.138.220.0/22 maxlen: 24 40.142.8.0/22 maxlen: 24 40.142.16.0/20 maxlen: 24 40.142.32.0/19 maxlen: 24 40.142.64.0/18 maxlen: 24 40.143.0.0/18 maxlen: 24 40.143.72.0/21 maxlen: 24 40.143.80.0/20 maxlen: 24 40.143.96.0/19 maxlen: 24 40.143.128.0/17 maxlen: 24 63.131.224.0/20 maxlen: 24 63.246.0.0/19 maxlen: 24 63.254.152.0/21 maxlen: 24 65.61.96.0/19 maxlen: 24 65.99.192.0/18 maxlen: 24 66.36.16.0/20 maxlen: 24 66.45.160.0/19 maxlen: 24 66.203.64.0/19 maxlen: 24 66.206.192.0/20 maxlen: 24 67.212.128.0/20 maxlen: 24 67.216.64.0/20 maxlen: 24 67.221.224.0/20 maxlen: 24 68.168.80.0/20 maxlen: 24 68.171.128.0/19 maxlen: 24 69.7.224.0/20 maxlen: 24 69.26.96.0/19 maxlen: 24 69.40.208.0/20 maxlen: 24 69.147.160.0/19 maxlen: 24 69.166.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:49:8b:b9:80:1a:ce:ed:d8:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=d4e2b647-536e-4e9d-bdab-9453d234af0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:e8:bd:88:77:90:e0:a4:ef:c6:0f:8f:d1: 50:13:8f:13:7e:f2:a9:e4:57:b6:bc:e8:5c:c1:19: cc:6a:25:6b:86:54:fe:a2:7e:b5:4c:ee:4c:5a:df: 38:83:53:d3:be:40:af:4e:77:67:51:a1:af:a1:67: 32:12:75:d2:2b:1f:19:5c:9d:7f:60:ac:27:fa:12: dd:64:5c:0d:41:14:6e:30:c9:33:b2:21:41:71:a8: b4:1e:9a:90:a0:68:29:1d:5c:ed:a1:46:74:84:96: 17:9f:f4:ec:07:ee:3e:ba:3e:88:7c:aa:60:ff:74: 09:84:3a:ba:a7:d0:bb:62:ad:16:2a:ee:07:27:d8: e1:a9:e4:d4:e8:cc:ed:ab:fe:d3:18:be:4d:c9:62: 9e:16:63:99:26:5f:c0:cd:bb:92:c1:a3:0d:9e:9d: a5:74:25:b4:a8:a1:03:59:48:1a:81:01:21:43:2f: b1:9a:30:ca:96:29:36:c5:bf:ec:54:59:cf:9b:0c: ae:cc:13:df:34:65:8c:b9:eb:eb:03:0e:c6:aa:95: 85:f6:76:f6:9c:db:56:b5:e6:b5:8b:eb:71:48:40: c1:1c:cc:7a:1a:df:57:79:5a:19:17:1e:f7:c1:cb: dd:9d:d0:c5:aa:53:cc:c4:59:c2:bb:1f:d2:6c:44: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6B:B0:F4:A5:FD:BD:09:1C:55:D2:5F:13:FD:FB:3F:69:30:11:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3dc3e9b5-9853-3f5f-b2b6-1eebed2b6f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 40.133.32.0/21 40.138.220.0/22 40.142.8.0/22 40.142.16.0-40.142.127.255 40.143.0.0/18 40.143.72.0-40.143.255.255 63.131.224.0/20 63.246.0.0/19 63.254.152.0/21 65.61.96.0/19 65.99.192.0/18 66.36.16.0/20 66.45.160.0/19 66.203.64.0/19 66.206.192.0/20 67.212.128.0/20 67.216.64.0/20 67.221.224.0/20 68.168.80.0/20 68.171.128.0/19 69.7.224.0/20 69.26.96.0/19 69.40.208.0/20 69.147.160.0/19 69.166.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:45:80:4f:b4:a1:13:f4:72:69:7c:f0:88:09:c9:60:07:4e: 9b:8c:7f:07:30:87:1f:a2:be:4c:22:88:a9:95:d7:99:83:ec: c4:83:82:1a:23:20:80:bf:34:78:97:cb:b7:9b:26:4f:19:91: 81:55:08:c1:52:7e:57:0e:d6:cc:93:54:09:d3:8d:af:f8:8d: aa:b2:4c:9b:f2:61:22:1c:58:ff:5d:05:7b:e0:60:0b:e1:8c: 2f:91:bf:4f:1b:f8:65:cc:6e:0b:ea:ff:f3:e4:c8:ad:4c:db: 9d:a3:37:6b:16:b3:c9:a5:ed:c5:09:04:e4:11:a4:4c:25:f9: 14:77:33:ca:ee:c1:91:06:ed:0b:87:2d:25:cb:da:c2:82:bd: 11:0f:b6:6c:fd:a3:ab:12:45:84:40:6b:8c:d6:01:6b:e0:60: 4e:5b:89:ce:3f:29:41:19:c2:c9:7b:19:0e:58:96:77:80:23: bb:30:18:8e:d9:e4:04:fa:3c:a4:5f:f2:5f:24:85:9b:44:e1: 5f:6e:59:fc:9d:72:0d:1b:82:c1:42:8c:7a:05:ad:1a:2d:b5: c2:df:ba:ff:2c:e5:b5:8f:fa:51:c0:b3:8a:80:b0:08:fc:46: 0d:50:64:c2:3b:d1:6b:07:77:42:df:ea:b8:58:19:14:d1:6c: 6a:03:8f:0b -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWErw8UmLuYAazu3YMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDRlMmI2NDctNTM2ZS00ZTlkLWJkYWItOTQ1M2QyMzRhZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl7ovYh3kOCk78YPj9FQE48TfvKp5Fe2vOhc wRnMaiVrhlT+on61TO5MWt84g1PTvkCvTndnUaGvoWcyEnXSKx8ZXJ1/YKwn+hLd ZFwNQRRuMMkzsiFBcai0HpqQoGgpHVztoUZ0hJYXn/TsB+4+uj6IfKpg/3QJhDq6 p9C7Yq0WKu4HJ9jhqeTU6Mztq/7TGL5NyWKeFmOZJl/AzbuSwaMNnp2ldCW0qKED WUgagQEhQy+xmjDKlik2xb/sVFnPmwyuzBPfNGWMuevrAw7GqpWF9nb2nNtWtea1 i+txSEDBHMx6Gt9XeVoZFx73wcvdndDFqlPMxFnCux/SbES5pwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJVrsPSl/b0JHFXSXxP9+z9pMBGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvM2RjM2U5YjUtOTg1My0z ZjVmLWIyYjYtMWVlYmVkMmI2ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBrAQCAAEwgaUDBAMo hSADBAIoitwDBAIojggwDAMEBCiOEAMEByiOAAMEBiiPADALAwQDKI9IAwMEKIAD BAQ/g+ADBAU/9gADBAM//pgDBAVBPWADBAZBY8ADBARCJBADBAVCLaADBAVCy0AD BARCzsADBARD1IADBARD2EADBARD3eADBAREqFADBAVEq4ADBARFB+ADBAVFGmAD BARFKNADBAVFk6ADBAVFpoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVUWAT7ShE/RyaXzwiAnJYAdOm4x/ BzCHH6K+TCKIqZXXmYPsxIOCGiMggL80eJfLt5smTxmRgVUIwVJ+Vw7WzJNUCdON r/iNqrJMm/JhIhxY/10Fe+BgC+GML5G/Txv4ZcxuC+r/8+TIrUzbnaM3axazyaXt xQkE5BGkTCX5FHczyu7BkQbtC4ctJcvawoK9EQ+2bP2jqxJFhEBrjNYBa+BgTluJ zj8pQRnCyXsZDliWd4AjuzAYjtnkBPo8pF/yXySFm0ThX25Z/J1yDRuCwUKMegWt Gi21wt+6/yzltY/6UcCzioCwCPxGDVBkwjvRawd3Qt/quFgZFNFsagOPCw== -----END CERTIFICATE-----Generated at Wed Nov 5 12:35:53 2025 by rpki-client