$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c940265b-a805-32c0-b023-649d0d6c3b3d.roa File: c940265b-a805-32c0-b023-649d0d6c3b3d.roa (raw, json) Hash identifier: uXI7SXa2iwQTRoIuGioXEA/dBrxgFhstmwyqd8E3j/I= Subject key identifier: 98:F3:0E:C5:22:69:30:BC:95:98:4C:A5:E1:D8:18:EF:9B:7D:DD:BF Certificate issuer: /CN=a75ece7f-5380-409e-b027-b6733c088c34 Certificate serial: 010D0C9F4328584BBFA5A0E184D42C06E24D8770 Authority key identifier: 41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c940265b-a805-32c0-b023-649d0d6c3b3d.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 3128 IP address blocks: 146.151.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a0:e1:84:d4:2c:06:e2:4d:87:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a75ece7f-5380-409e-b027-b6733c088c34 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=1c3fb023-7213-4f55-8efb-3ea249b0cb9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:7b:7f:ca:ee:bb:83:40:bd:88:45:cf:a1: 1c:ad:1f:ce:d7:2e:d7:ad:c7:64:26:aa:1f:a4:77: 46:4c:0d:b2:d1:6e:a4:94:19:11:8e:ec:47:85:d9: 0c:2f:dc:a1:6f:af:6e:35:e6:2a:6f:25:dc:3d:22: 99:b7:50:e0:97:2e:08:e5:dc:4a:e5:c2:98:ca:1b: fa:87:dc:9f:ae:9a:f4:2d:3b:ea:38:ba:f3:aa:89: f1:88:e8:ae:a5:f9:1b:58:6a:13:b7:bf:12:ad:c4: a8:55:a9:02:19:8a:ef:00:fb:3a:17:82:e1:78:41: bf:df:bc:17:66:8f:4e:31:52:be:04:36:fa:fe:31: ac:8f:42:5b:b3:8e:d1:00:e6:f3:7e:f2:9e:8d:8c: c4:d1:2f:34:df:81:ff:51:c1:28:d8:76:28:70:f2: 28:3a:35:6e:97:57:dc:b0:f3:56:dd:64:c3:fd:f7: 2c:19:fe:c4:08:f5:c3:2e:d8:80:f1:91:43:a8:72: b0:be:01:c7:64:7f:28:d3:96:ef:db:23:9f:2b:b7: fe:99:25:6c:00:cf:57:b3:e5:5b:da:c0:25:c5:2d: a6:21:85:b8:38:09:32:a7:e0:62:13:87:33:04:45: 6d:b3:62:da:f0:bf:54:90:49:fd:a3:54:2e:34:77: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F3:0E:C5:22:69:30:BC:95:98:4C:A5:E1:D8:18:EF:9B:7D:DD:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/c940265b-a805-32c0-b023-649d0d6c3b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34/a75ece7f-5380-409e-b027-b6733c088c34.crl X509v3 Authority Key Identifier: keyid:41:9C:A5:A0:88:3E:87:77:F8:C3:93:27:25:12:7A:9F:8E:25:CE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a75ece7f-5380-409e-b027-b6733c088c34.cer sbgp-ipAddrBlock: critical IPv4: 146.151.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d5:76:ac:b4:5f:74:6a:1c:a8:eb:41:37:dc:c6:97:f9:13: e4:7f:82:62:d1:c5:a8:08:0b:d2:d1:47:2d:6c:83:88:13:02: 12:9a:46:2c:6b:f7:07:99:d7:30:e7:46:dc:ec:34:8f:aa:62: de:8e:71:2a:33:25:19:1d:06:44:a2:9f:e0:fe:f9:26:1c:c9: 6d:68:57:2f:01:e1:d6:6b:89:2f:14:11:8f:f0:8c:5e:b6:3b: 9a:d1:56:b9:40:3f:1f:df:a7:55:01:8d:b3:02:88:8c:d9:54: 40:8c:f4:c6:2e:8f:fd:54:96:82:8c:a9:81:9f:ca:1a:03:66: 20:3d:d2:80:5e:c8:f8:fd:ff:18:ae:f5:4f:8b:f8:fc:41:b8: ae:3e:b0:ae:d0:53:9a:93:f8:fd:3f:d8:00:76:4f:23:3f:d3: 3b:a0:b0:98:90:c0:cc:99:23:93:01:2e:00:ea:5a:d4:d5:35: 11:cb:82:62:24:26:02:93:2f:d6:09:a9:44:44:bf:9a:98:99: 46:a3:e5:1e:a2:bc:f7:bd:1c:ea:95:fd:a6:0e:39:69:74:26: 8c:84:b4:d8:6b:c6:a3:cc:60:33:06:e7:e5:6a:e9:b3:6a:6f: fa:7c:d0:39:1b:c7:5c:66:74:a3:8e:b8:36:b6:53:4e:06:10: 37:5b:3a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paDhhNQsBuJNh3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc1ZWNlN2YtNTM4MC00MDllLWIwMjctYjY3MzNjMDg4 YzM0MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MWMzZmIwMjMtNzIxMy00ZjU1LThlZmItM2VhMjQ5YjBjYjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXd7f8ruu4NAvYhFz6EcrR/O1y7XrcdkJqof pHdGTA2y0W6klBkRjuxHhdkML9yhb69uNeYqbyXcPSKZt1Dgly4I5dxK5cKYyhv6 h9yfrpr0LTvqOLrzqonxiOiupfkbWGoTt78SrcSoVakCGYrvAPs6F4LheEG/37wX Zo9OMVK+BDb6/jGsj0Jbs47RAObzfvKejYzE0S8034H/UcEo2HYocPIoOjVul1fc sPNW3WTD/fcsGf7ECPXDLtiA8ZFDqHKwvgHHZH8o05bv2yOfK7f+mSVsAM9Xs+Vb 2sAlxS2mIYW4OAkyp+BiE4czBEVts2La8L9UkEn9o1QuNHeAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjzDsUiaTC8lZhMpeHYGO+bfd2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNzVl Y2U3Zi01MzgwLTQwOWUtYjAyNy1iNjczM2MwODhjMzQvYzk0MDI2NWItYTgwNS0z MmMwLWIwMjMtNjQ5ZDBkNmMzYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTc1ZWNlN2YtNTM4MC00MDllLWIw MjctYjY3MzNjMDg4YzM0L2E3NWVjZTdmLTUzODAtNDA5ZS1iMDI3LWI2NzMzYzA4 OGMzNC5jcmwwHwYDVR0jBBgwFoAUQZyloIg+h3f4w5MnJRJ6n44lziEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNzVlY2U3Zi01MzgwLTQwOWUtYjAyNy1iNjcz M2MwODhjMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkpcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPVdqy0X3RqHKjrQTfcxpf5E+R/gmLRxagIC9LRRy1sg4gTAhKaRixr 9weZ1zDnRtzsNI+qYt6OcSozJRkdBkSin+D++SYcyW1oVy8B4dZriS8UEY/wjF62 O5rRVrlAPx/fp1UBjbMCiIzZVECM9MYuj/1UloKMqYGfyhoDZiA90oBeyPj9/xiu 9U+L+PxBuK4+sK7QU5qT+P0/2AB2TyM/0zugsJiQwMyZI5MBLgDqWtTVNRHLgmIk JgKTL9YJqUREv5qYmUaj5R6ivPe9HOqV/aYOOWl0JoyEtNhrxqPMYDMG5+Vq6bNq b/p80Dkbx1xmdKOOuDa2U04GEDdbOhM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:24:30 2025 by rpki-client