$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/138408b2-8c70-317b-85b5-3ea3bf4ccafe.roa File: 138408b2-8c70-317b-85b5-3ea3bf4ccafe.roa (raw, json) Hash identifier: 1xBfQM7GuWnhTjl/xzcWnXWv/alvpQBiLk1v2ZP3X7c= Subject key identifier: 52:23:6A:2F:99:DC:87:13:CF:78:8E:9F:15:22:28:82:DE:21:3A:AF Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Certificate serial: 010D0C9F4328584BA0D25109BCCBA5FE2B3855C0 Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/138408b2-8c70-317b-85b5-3ea3bf4ccafe.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 32787 IP address blocks: 207.135.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:51:09:bc:cb:a5:fe:2b:38:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=5627fcb9-b7d2-4123-8749-e6da1ef5b9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6a:60:e7:1a:23:72:b1:01:22:17:8d:65:0f: 5a:83:71:82:77:e5:32:53:cd:6b:83:29:ff:1d:61: 9f:2e:fd:58:4d:6e:ca:7c:3f:1d:36:ef:71:87:0f: c7:b6:70:1e:b2:5b:04:83:e0:83:bb:1c:2a:a3:89: ba:cb:d9:c0:bf:a4:0f:8e:b5:66:3e:9d:f4:1f:5d: a0:87:96:91:52:a7:89:b8:0a:60:f4:1b:47:08:d9: 4e:fe:91:60:ea:1f:13:9c:07:bf:dc:38:c4:af:f7: 5a:b0:df:54:89:b8:51:f6:33:bf:a0:aa:f0:fe:04: 5d:23:db:b6:88:09:42:26:ba:ee:3e:23:b6:5f:cb: a2:78:ba:80:df:74:62:d2:b2:4c:21:ac:85:76:50: f0:18:71:99:60:a3:9c:e0:f3:f9:4f:2d:fc:1e:d0: 00:cc:03:55:5d:bb:64:13:44:3b:56:80:3d:ea:ff: 0d:3a:63:49:aa:d3:21:aa:06:e9:60:eb:7d:5a:ce: 7b:a1:eb:60:1a:d9:fa:a6:dd:7e:58:c0:67:25:bc: ca:7d:d8:9c:d4:1f:e4:4b:e6:ed:72:43:7a:70:4e: 45:f9:93:84:91:5e:93:ca:ec:6c:7d:4a:06:80:f1: 3d:23:40:fe:cb:d3:18:44:2f:62:11:56:4c:a6:14: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:23:6A:2F:99:DC:87:13:CF:78:8E:9F:15:22:28:82:DE:21:3A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/138408b2-8c70-317b-85b5-3ea3bf4ccafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl X509v3 Authority Key Identifier: keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer sbgp-ipAddrBlock: critical IPv4: 207.135.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:58:93:32:59:0e:65:cb:b1:25:33:5d:a3:1b:af:e7:10:95: 20:12:a6:9a:69:22:39:23:d3:f7:3c:89:85:35:90:a4:47:49: 80:e9:e0:cc:13:6e:0c:a7:cd:8f:8d:ed:9f:b7:76:4f:c1:2c: 41:eb:5a:26:2f:85:2e:29:28:3b:c4:74:b5:73:90:ef:a3:d4: a6:ea:e4:ad:26:56:dd:49:d9:17:35:fd:15:95:cc:ea:47:ff: 1e:76:e1:46:e6:57:e9:ea:7a:32:e9:ed:99:62:b0:24:ec:69: 53:bd:a6:44:2c:a5:49:cb:db:a2:6e:3d:ba:26:bf:63:e5:46: df:02:09:9c:43:41:c7:1e:bf:37:f6:c5:fe:ae:c8:e8:f1:81: 1a:1f:a9:99:b1:9f:8f:22:fa:24:46:b3:ed:cd:03:0e:6a:10: 24:34:15:8a:90:07:39:4e:bf:40:f6:82:4b:8e:35:af:0a:69: 7b:18:87:e9:33:3a:35:08:97:93:42:a6:0a:64:05:0f:c2:ed: af:08:f3:bc:6c:b6:e0:29:3c:e1:f1:6e:1a:a1:a9:e0:ce:e9: 9f:70:fc:21:48:b8:56:e3:be:20:3d:00:41:d2:98:fc:73:4a: e4:1f:fd:92:3d:ed:c3:79:0b:b8:8c:59:93:06:09:f4:5f:11: 9b:6d:7f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lEJvMul/is4VcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll NWU3MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NTYyN2ZjYjktYjdkMi00MTIzLTg3NDktZTZkYTFlZjViOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGpg5xojcrEBIheNZQ9ag3GCd+UyU81rgyn/ HWGfLv1YTW7KfD8dNu9xhw/HtnAeslsEg+CDuxwqo4m6y9nAv6QPjrVmPp30H12g h5aRUqeJuApg9BtHCNlO/pFg6h8TnAe/3DjEr/dasN9UibhR9jO/oKrw/gRdI9u2 iAlCJrruPiO2X8uieLqA33Ri0rJMIayFdlDwGHGZYKOc4PP5Ty38HtAAzANVXbtk E0Q7VoA96v8NOmNJqtMhqgbpYOt9Ws57oetgGtn6pt1+WMBnJbzKfdic1B/kS+bt ckN6cE5F+ZOEkV6TyuxsfUoGgPE9I0D+y9MYRC9iEVZMphR4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIjai+Z3IcTz3iOnxUiKILeITqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3 ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvMTM4NDA4YjItOGM3MC0z MTdiLTg1YjUtM2VhM2JmNGNjYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5 NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5 ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk NTA5OWU1ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz4ecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANYkzJZDmXLsSUzXaMbr+cQlSASppppIjkj0/c8iYU1kKRHSYDp4MwT bgynzY+N7Z+3dk/BLEHrWiYvhS4pKDvEdLVzkO+j1Kbq5K0mVt1J2Rc1/RWVzOpH /x524UbmV+nqejLp7ZlisCTsaVO9pkQspUnL26JuPbomv2PlRt8CCZxDQccevzf2 xf6uyOjxgRofqZmxn48i+iRGs+3NAw5qECQ0FYqQBzlOv0D2gkuONa8KaXsYh+kz OjUIl5NCpgpkBQ/C7a8I87xstuApPOHxbhqhqeDO6Z9w/CFIuFbjviA9AEHSmPxz SuQf/ZI97cN5C7iMWZMGCfRfEZttfzg= -----END CERTIFICATE-----Generated at Tue Nov 4 17:14:21 2025 by rpki-client