$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa File: 13ab8837-7399-34cf-9991-a8cf72dc3218.roa (raw, json) Hash identifier: D1v09u2e3u8H9ySVAilwiaFcUt8cQ5f8fZbdzwzrqRM= Subject key identifier: 06:B6:17:5C:CA:F5:45:BC:38:14:14:20:DD:5C:5D:D1:14:C1:89:96 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584BB88D5392FEAFEAC0A2E69B00 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 159.172.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:53:92:fe:af:ea:c0:a2:e6:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=9d8450f7-bab4-4adb-b80b-76254daf5798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c0:5b:04:b8:8c:a5:cb:a2:b9:c6:a2:de:da: 04:0b:d6:2f:b2:0a:7d:7b:e8:53:72:9d:4b:e3:45: 74:22:d7:61:00:e2:49:79:b6:d5:98:1d:b7:db:2c: 6e:c4:ee:9d:ca:09:52:4f:eb:ce:54:54:26:c2:db: 66:c9:d3:a8:2f:13:21:28:04:5a:0c:f9:c5:e9:c6: 64:42:a2:7d:61:e9:6c:1d:88:d3:af:95:78:b8:81: a1:ff:22:fb:d4:ab:1b:31:89:a7:b1:2b:61:4f:12: 9a:1c:e3:12:8d:8a:5a:db:59:3d:b7:79:ac:3e:1f: 41:7a:15:e6:58:92:5e:62:1f:cc:f0:bf:41:28:ef: 74:1e:ce:4f:fb:d7:ea:d4:8e:41:58:dd:28:b9:74: d5:d0:b7:fa:2a:0f:9e:c8:3a:19:e7:51:79:7c:13: 54:7d:39:64:22:53:f5:0f:7f:92:db:0f:89:d3:ba: 02:10:fa:60:4c:89:ef:50:46:8d:8c:f3:fd:33:36: 1c:60:42:3c:2f:77:2b:9e:f8:b0:fa:4a:c5:59:1c: 1c:36:9b:6d:bf:6d:b7:49:10:e1:dc:be:1a:52:22: 3c:8c:08:62:29:88:80:ab:3b:06:98:c0:e6:04:24: ab:13:5b:51:96:82:71:1a:1d:c8:df:28:1c:30:78: 8d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B6:17:5C:CA:F5:45:BC:38:14:14:20:DD:5C:5D:D1:14:C1:89:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:29:eb:7a:a0:a9:d3:d6:e6:d2:c0:34:92:5d:8a:6d:47:4e: 38:0e:c4:dd:f3:82:9e:4d:73:3a:b0:8c:d2:e8:5f:ee:99:ac: 5f:ad:4e:45:dd:07:8d:23:61:ea:e9:4b:13:0f:d3:00:0f:60: 42:d8:f2:ea:3a:f3:8a:f1:d0:af:a5:9d:df:a7:c9:c5:fb:30: a0:5e:55:d6:99:09:90:1c:3c:92:b1:af:9f:9d:8c:bc:b2:7a: cf:f6:ca:8a:33:35:26:8d:45:ac:ca:1d:74:68:a3:58:8c:ad: 27:ea:64:2a:4c:9e:a8:83:1e:ba:ac:e8:66:49:53:de:d2:6b: 53:33:38:15:1b:bc:09:94:b0:19:39:63:54:8d:27:d9:a0:92: b2:c7:87:35:ab:20:0c:8b:f8:13:72:08:dc:20:b3:6d:b0:19: cc:77:48:f7:c1:0c:c1:9e:50:64:f7:e6:79:63:05:04:43:b4: 0d:d6:6b:cb:6b:5c:c1:59:e5:d6:4d:5a:3d:a0:6d:20:0a:36: 13:7e:ba:2c:fc:8f:01:49:57:cd:fe:57:6a:5c:d0:58:c2:aa: 61:e9:1d:98:82:41:70:25:34:39:f5:ef:63:4d:d8:ae:26:db: ef:c5:09:c9:d0:ca:20:76:d1:39:a7:fc:1d:07:f7:dc:89:7b: 84:87:dc:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVOS/q/qwKLmmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWQ4NDUwZjctYmFiNC00YWRiLWI4MGItNzYyNTRkYWY1Nzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsBbBLiMpcuiucai3toEC9Yvsgp9e+hTcp1L 40V0ItdhAOJJebbVmB232yxuxO6dyglST+vOVFQmwttmydOoLxMhKARaDPnF6cZk QqJ9YelsHYjTr5V4uIGh/yL71KsbMYmnsSthTxKaHOMSjYpa21k9t3msPh9BehXm WJJeYh/M8L9BKO90Hs5P+9fq1I5BWN0ouXTV0Lf6Kg+eyDoZ51F5fBNUfTlkIlP1 D3+S2w+J07oCEPpgTInvUEaNjPP9MzYcYEI8L3crnviw+krFWRwcNpttv223SRDh 3L4aUiI8jAhiKYiAqzsGmMDmBCSrE1tRloJxGh3I3ygcMHiN1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa2F1zK9UW8OBQUIN1cXdEUwYmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMTNhYjg4MzctNzM5OS0z NGNmLTk5OTEtYThjZjcyZGMzMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGn6yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEp63qgqdPW5tLANJJdim1HTjgOxN3zgp5NczqwjNLoX+6ZrF+tTkXd B40jYerpSxMP0wAPYELY8uo684rx0K+lnd+nycX7MKBeVdaZCZAcPJKxr5+djLyy es/2yoozNSaNRazKHXRoo1iMrSfqZCpMnqiDHrqs6GZJU97Sa1MzOBUbvAmUsBk5 Y1SNJ9mgkrLHhzWrIAyL+BNyCNwgs22wGcx3SPfBDMGeUGT35nljBQRDtA3Wa8tr XMFZ5dZNWj2gbSAKNhN+uiz8jwFJV83+V2pc0FjCqmHpHZiCQXAlNDn172NN2K4m 2+/FCcnQyiB20Tmn/B0H99yJe4SH3BE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:51 2025 by rpki-client