$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa File: b84e90f8-8554-3fc7-9087-d60abb1233ea.roa (raw, json) Hash identifier: YPqB5TtcClZN4hh7+Ff+XVWdrnBTknJSjfmoBxZae0s= Subject key identifier: 1B:2C:BC:32:3F:AE:06:06:9A:14:B3:8E:3E:6D:40:2B:0A:3B:A2:78 Certificate issuer: /CN=b2dc77b3-a13a-405a-b7ad-181eab85160b Certificate serial: 010D0C9F4328584B9E07A438A6CA5D46680D6E00 Authority key identifier: FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 393922 IP address blocks: 192.139.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a4:38:a6:ca:5d:46:68:0d:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2dc77b3-a13a-405a-b7ad-181eab85160b Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=192cde26-d62c-4465-94d0-8231ef465ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:a5:65:a4:fe:81:33:e6:c3:ef:55:89:e0: 99:0a:46:a6:91:c9:7a:05:95:7e:57:aa:8b:f8:8d: 64:78:83:76:e7:46:5b:7b:03:8c:8c:e7:27:a4:d8: 8a:3b:f9:da:67:90:76:26:8b:86:0c:a4:5f:d4:af: cf:fa:91:cf:35:a1:ad:6f:98:86:b5:8f:8e:77:ab: b1:25:00:d1:66:c5:9d:1c:1a:ef:85:b9:ec:7c:b9: b4:d1:9f:5b:08:e2:31:17:54:81:be:17:5c:32:16: e6:76:ea:1d:14:33:7b:bd:88:40:94:97:e3:6e:9d: 09:c3:cb:3a:22:be:4c:cd:cb:9c:f4:14:38:c4:47: 9f:eb:4f:1f:10:b4:62:ee:a2:df:3c:78:14:7d:6a: e9:f8:26:aa:81:d6:ba:b5:4a:ab:e8:66:f3:a3:81: 4e:84:6b:f8:ec:38:e2:c4:c7:6c:99:33:23:53:44: 51:d6:37:e7:d8:2c:40:9e:24:47:b0:22:e3:d8:72: 55:92:0a:18:44:0c:f1:20:e7:f4:b7:9b:a2:be:02: 48:30:57:2e:42:e9:fb:db:48:3a:f4:d6:ad:77:17: 8d:f9:0c:e6:ce:11:f4:c6:65:be:6b:c4:c9:bb:0b: 9a:e1:ad:7f:6c:57:91:ba:be:d2:d9:01:75:d5:57: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2C:BC:32:3F:AE:06:06:9A:14:B3:8E:3E:6D:40:2B:0A:3B:A2:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b84e90f8-8554-3fc7-9087-d60abb1233ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b/b2dc77b3-a13a-405a-b7ad-181eab85160b.crl X509v3 Authority Key Identifier: keyid:FF:76:CB:34:8C:31:D8:B4:5C:24:A1:55:09:55:32:75:64:15:2E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b2dc77b3-a13a-405a-b7ad-181eab85160b.cer sbgp-ipAddrBlock: critical IPv4: 192.139.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:32:4e:ed:40:88:79:1f:56:ca:f2:05:37:a0:ab:6e:2b:e8: ea:97:b3:96:bf:3d:0f:89:74:a7:08:a2:99:72:a3:4e:88:1b: dc:aa:ed:99:ef:a1:82:ec:e1:88:07:33:93:d4:72:33:1e:4a: f3:e6:7a:05:2e:e8:95:c0:a2:1d:58:e2:f5:6c:78:13:b6:4f: df:19:b4:2f:d7:e2:25:45:ab:cc:72:c3:ef:f3:d0:ad:23:3f: 5b:ba:2d:a2:01:d6:54:f0:ef:3d:e0:5e:08:c7:8b:ad:9c:a6: 33:50:55:db:b1:a8:4c:cf:37:80:3c:38:32:d6:82:ba:c4:d7: 79:31:4a:50:67:28:58:08:aa:2f:47:93:2b:c7:ee:17:0b:19: 3f:2c:3a:75:4e:26:38:7d:99:f8:7a:08:b2:d1:93:e3:e1:b7: cf:a8:5f:0f:65:85:a1:87:ea:5e:6f:f3:db:10:ba:e5:c7:74: 56:58:7f:19:c7:fe:a0:f6:a2:03:c9:a2:ea:02:e2:89:ef:1e: c6:51:dd:92:72:fe:d4:8f:ec:95:79:48:ed:7d:ec:95:42:07: 4c:2b:b8:3c:10:92:19:7f:da:da:9b:49:2b:12:76:b4:23:82: 65:24:a1:69:e5:11:0a:2d:0a:2c:ea:0a:80:4c:d1:15:14:1c: 66:67:0b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6Q4pspdRmgNbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJkYzc3YjMtYTEzYS00MDVhLWI3YWQtMTgxZWFiODUx NjBiMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MTkyY2RlMjYtZDYyYy00NDY1LTk0ZDAtODIzMWVmNDY1Y2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyGlZaT+gTPmw+9VieCZCkamkcl6BZV+V6qL +I1keIN250ZbewOMjOcnpNiKO/naZ5B2JouGDKRf1K/P+pHPNaGtb5iGtY+Od6ux JQDRZsWdHBrvhbnsfLm00Z9bCOIxF1SBvhdcMhbmduodFDN7vYhAlJfjbp0Jw8s6 Ir5Mzcuc9BQ4xEef608fELRi7qLfPHgUfWrp+Caqgda6tUqr6Gbzo4FOhGv47Dji xMdsmTMjU0RR1jfn2CxAniRHsCLj2HJVkgoYRAzxIOf0t5uivgJIMFcuQun720g6 9NatdxeN+QzmzhH0xmW+a8TJuwua4a1/bFeRur7S2QF11Ve4twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBssvDI/rgYGmhSzjj5tQCsKO6J4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMmRj NzdiMy1hMTNhLTQwNWEtYjdhZC0xODFlYWI4NTE2MGIvYjg0ZTkwZjgtODU1NC0z ZmM3LTkwODctZDYwYWJiMTIzM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjJkYzc3YjMtYTEzYS00MDVhLWI3 YWQtMTgxZWFiODUxNjBiL2IyZGM3N2IzLWExM2EtNDA1YS1iN2FkLTE4MWVhYjg1 MTYwYi5jcmwwHwYDVR0jBBgwFoAU/3bLNIwx2LRcJKFVCVUydWQVLiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMmRjNzdiMy1hMTNhLTQwNWEtYjdhZC0xODFl YWI4NTE2MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMyTu1AiHkfVsryBTegq24r6OqXs5a/PQ+JdKcIoplyo06IG9yq7Znv oYLs4YgHM5PUcjMeSvPmegUu6JXAoh1Y4vVseBO2T98ZtC/X4iVFq8xyw+/z0K0j P1u6LaIB1lTw7z3gXgjHi62cpjNQVduxqEzPN4A8ODLWgrrE13kxSlBnKFgIqi9H kyvH7hcLGT8sOnVOJjh9mfh6CLLRk+Pht8+oXw9lhaGH6l5v89sQuuXHdFZYfxnH /qD2ogPJouoC4onvHsZR3ZJy/tSP7JV5SO197JVCB0wruDwQkhl/2tqbSSsSdrQj gmUkoWnlEQotCizqCoBM0RUUHGZnC9Y= -----END CERTIFICATE-----Generated at Thu Nov 6 00:05:34 2025 by rpki-client