$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d2f15d35-29a6-37fa-84c2-8271147aaa50.roa File: d2f15d35-29a6-37fa-84c2-8271147aaa50.roa (raw, json) Hash identifier: AX6akuL+j5U0J2pwkdrww3BV+mgroSjqNIQWAzZcbrM= Subject key identifier: 3E:13:CC:76:EE:F8:DD:66:92:BE:96:33:D5:FC:1C:27:05:1F:CF:62 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B33F19DFD27EAFAB25BC11400 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d2f15d35-29a6-37fa-84c2-8271147aaa50.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 53813 IP address blocks: 137.83.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9d:fd:27:ea:fa:b2:5b:c1:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=3d5f2b76-10a9-4548-a480-af0e69149a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:59:68:f3:30:6f:1a:7b:bc:5f:19:34:2d: cd:dd:5f:c8:26:68:cb:5a:e8:04:84:10:cb:a0:2d: e7:b9:a4:5f:ed:e3:ba:01:ff:90:b6:8a:53:e6:61: 26:73:d5:3c:72:f6:84:46:57:5f:c2:5b:db:16:9a: 86:74:1f:1e:84:6e:28:e8:cf:84:e3:fe:6d:1a:2e: 50:cf:dd:11:de:78:a9:14:e6:5d:c2:60:f0:ca:b2: 94:e3:a8:4f:3d:a7:29:c3:c6:11:ec:17:dd:ce:3b: e1:9e:8c:5a:2f:05:02:97:99:e2:bc:f1:f1:17:a2: 26:ec:e0:f1:0b:ac:a0:b8:d1:19:8c:a4:04:90:5f: 0d:1a:d4:68:d1:8b:bd:f1:e3:fe:d5:60:6b:c6:c0: 74:ec:48:f5:94:18:32:7d:9b:76:f8:02:2e:c9:ea: 6c:c7:6f:b0:94:a6:33:6f:53:3c:c9:ea:49:55:98: fc:15:e8:68:8a:14:92:3f:4c:05:d6:a0:4b:53:84: 68:49:b8:46:c7:41:d3:d5:c7:96:41:e4:2d:5c:84: 6f:c6:42:27:ec:4f:9e:5a:17:b5:da:42:30:32:4e: 10:50:c9:b6:b9:b5:93:f1:7f:d9:5b:d2:4b:da:17: 2d:6a:b2:f1:25:29:a2:6b:75:ee:af:e7:df:93:09: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:13:CC:76:EE:F8:DD:66:92:BE:96:33:D5:FC:1C:27:05:1F:CF:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d2f15d35-29a6-37fa-84c2-8271147aaa50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:84:4a:f2:32:c2:bb:25:bc:82:79:d0:b4:0a:28:f6:66:03: 8b:ae:f7:35:36:fe:cf:2b:0f:72:44:a2:df:60:61:d0:46:24: 4c:0f:d0:9a:41:ab:68:03:97:5f:ad:05:85:d4:42:82:fc:59: 5a:ba:70:2a:0e:c2:c0:6c:25:bf:03:e6:76:9d:ad:34:c1:a2: 77:d7:ba:b7:32:74:1d:6a:40:3d:c0:70:c2:1c:cf:20:09:41: da:0f:44:7a:0a:f3:57:8b:0d:2e:4a:1e:b3:2a:6b:ec:f6:93: 33:3e:d5:4c:a4:7d:0b:bf:ad:3f:e7:69:63:2c:57:8b:ef:f7: b1:ff:41:25:17:7a:10:a4:b1:e8:64:48:6f:8b:80:8b:95:97: 04:5d:50:6b:08:5f:c7:67:26:5a:ca:90:bf:12:42:1d:3d:d3: 55:c4:a8:d7:ca:19:a7:05:90:eb:d2:a6:83:6d:98:20:1a:a5: f0:56:18:20:1a:00:16:a4:03:6d:10:a4:ed:c6:89:3d:3a:6b: d5:4b:37:7d:2e:80:ed:99:c9:4e:44:2c:de:af:bc:cd:42:84: ff:94:71:24:5f:49:b0:cc:fe:cc:19:39:5b:fe:65:a6:27:76: 49:35:5c:a2:ff:02:e9:fd:3a:c9:2c:47:65:6a:11:e1:43:4e: 46:b9:a2:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8Z39J+r6slvBFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk M2Q1ZjJiNzYtMTBhOS00NTQ4LWE0ODAtYWYwZTY5MTQ5YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5RZaPMwbxp7vF8ZNC3N3V/IJmjLWugEhBDL oC3nuaRf7eO6Af+QtopT5mEmc9U8cvaERldfwlvbFpqGdB8ehG4o6M+E4/5tGi5Q z90R3nipFOZdwmDwyrKU46hPPacpw8YR7BfdzjvhnoxaLwUCl5nivPHxF6Im7ODx C6yguNEZjKQEkF8NGtRo0Yu98eP+1WBrxsB07Ej1lBgyfZt2+AIuyepsx2+wlKYz b1M8yepJVZj8FehoihSSP0wF1qBLU4RoSbhGx0HT1ceWQeQtXIRvxkIn7E+eWhe1 2kIwMk4QUMm2ubWT8X/ZW9JL2hctarLxJSmia3Xur+ffkwk0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4TzHbu+N1mkr6WM9X8HCcFH89iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDJmMTVkMzUtMjlhNi0z N2ZhLTg0YzItODI3MTE0N2FhYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2ESvIywrslvIJ50LQKKPZmA4uu9zU2/s8rD3JEot9gYdBGJEwP0JpB q2gDl1+tBYXUQoL8WVq6cCoOwsBsJb8D5nadrTTBonfXurcydB1qQD3AcMIczyAJ QdoPRHoK81eLDS5KHrMqa+z2kzM+1UykfQu/rT/naWMsV4vv97H/QSUXehCksehk SG+LgIuVlwRdUGsIX8dnJlrKkL8SQh0901XEqNfKGacFkOvSpoNtmCAapfBWGCAa ABakA20QpO3GiT06a9VLN30ugO2ZyU5ELN6vvM1ChP+UcSRfSbDM/swZOVv+ZaYn dkk1XKL/Aun9OsksR2VqEeFDTka5ojM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:46 2025 by rpki-client