$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa File: ab4a7e1a-4ce4-327a-b528-184e489b447c.roa (raw, json) Hash identifier: aQ7ZAC5ixQWnMARYpG5rWIU04VvvhxO4h59NQ+CPvpU= Subject key identifier: C6:F1:0D:14:15:ED:51:CA:C0:06:01:48:E8:1D:C2:70:D1:42:BB:44 Certificate issuer: /CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Certificate serial: 010D0C9F4328584B80B755E08CDE8F740123B080 Authority key identifier: 1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 394090 IP address blocks: 192.136.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:55:e0:8c:de:8f:74:01:23:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3f6717-2048-44c1-ae77-50e5ce6e9dea Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=be450709-86c5-4a5b-870d-5dcb4e4ea8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:b1:fe:0f:03:e4:4f:ad:98:f7:29:37:e1: 30:a7:71:36:93:2a:5e:a9:79:85:73:80:a6:7c:69: d6:18:59:49:87:b9:aa:c9:9e:66:c3:c0:4b:0c:f6: 6e:c2:7c:3e:a6:5f:d9:d3:55:43:0f:dc:96:6d:ed: d8:4b:8a:3e:95:9f:2b:95:f2:38:99:3d:ba:37:ea: 20:2f:2c:e8:24:87:2f:ae:fa:2e:d1:d3:39:3d:69: c1:a6:64:88:6b:ab:0b:fe:56:ef:19:39:50:83:42: 7f:dc:63:8e:30:89:c1:81:f0:02:f7:e1:19:ea:41: 3a:bc:f3:51:7b:5c:5c:f7:48:34:88:dc:87:ab:e4: 69:05:67:df:61:71:0b:94:08:e8:64:fb:dd:bc:05: 9c:08:cd:3d:15:a0:52:88:69:a4:bf:29:5c:73:d9: f6:ac:a2:c7:1b:c5:02:ec:a1:c5:67:17:ca:aa:57: fb:9c:ac:4e:34:f5:f9:ea:ed:57:02:72:dc:a5:68: be:c5:5f:fa:1d:17:57:54:25:a5:6b:76:a1:02:bf: 0f:50:d3:f6:17:43:e4:36:d3:49:f6:0f:68:d3:47: 6a:3d:93:82:a1:15:0a:cc:b6:78:a0:95:a5:ac:22: 56:e1:ec:1e:27:cc:36:09:76:68:13:6f:76:7e:af: ad:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F1:0D:14:15:ED:51:CA:C0:06:01:48:E8:1D:C2:70:D1:42:BB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/ab4a7e1a-4ce4-327a-b528-184e489b447c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.crl X509v3 Authority Key Identifier: keyid:1B:39:C6:E8:96:F9:A7:95:6A:3B:1A:A3:C5:2A:04:36:96:3E:4D:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4c3f6717-2048-44c1-ae77-50e5ce6e9dea.cer sbgp-ipAddrBlock: critical IPv4: 192.136.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:60:f6:31:fb:64:99:81:20:ff:d4:06:88:14:2e:73:a7:e4: 34:72:87:c5:93:10:8c:15:d3:4d:fe:c7:5d:15:08:34:79:0f: 47:87:37:17:61:7a:9e:fd:8d:e0:1e:8c:a1:37:fb:11:04:d9: 04:2c:51:96:da:00:bb:ee:8d:b6:d9:0c:32:84:0b:7b:24:dd: 7d:ba:c8:f0:76:a4:95:45:b9:d8:d2:1d:2f:7f:55:37:08:eb: 63:25:de:3a:34:93:cb:22:15:5a:d4:fd:bd:ba:19:2c:5c:f6: 9b:05:5f:09:a9:44:d8:b4:dd:e1:80:2b:82:ad:29:49:32:4f: d7:11:eb:c8:95:7c:23:ed:22:68:46:9d:8d:44:ab:61:a4:39: 25:bd:fb:90:37:58:ee:90:d1:e8:0d:68:9c:c5:9a:e6:f3:ee: f2:4c:58:cf:78:f7:3e:5a:c1:78:f9:75:a9:3b:bf:c8:a0:e3: ca:a5:98:34:13:23:79:30:f1:e7:a9:e2:ed:37:5e:4e:df:6f: 01:53:a7:c6:cd:f8:f2:fd:1f:79:5e:1e:38:18:01:13:fd:82: bc:e9:c4:8d:92:2b:ab:5c:ed:af:29:22:29:f2:51:43:79:4a: 0a:75:04:51:e8:8a:01:17:c6:f2:1a:34:c7:0f:36:81:64:ac: 50:a6:6b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1XgjN6PdAEjsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzZjY3MTctMjA0OC00NGMxLWFlNzctNTBlNWNlNmU5 ZGVhMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YmU0NTA3MDktODZjNS00YTViLTg3MGQtNWRjYjRlNGVhOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfqx/g8D5E+tmPcpN+Ewp3E2kypeqXmFc4Cm fGnWGFlJh7mqyZ5mw8BLDPZuwnw+pl/Z01VDD9yWbe3YS4o+lZ8rlfI4mT26N+og LyzoJIcvrvou0dM5PWnBpmSIa6sL/lbvGTlQg0J/3GOOMInBgfAC9+EZ6kE6vPNR e1xc90g0iNyHq+RpBWffYXELlAjoZPvdvAWcCM09FaBSiGmkvylcc9n2rKLHG8UC 7KHFZxfKqlf7nKxONPX56u1XAnLcpWi+xV/6HRdXVCWla3ahAr8PUNP2F0PkNtNJ 9g9o00dqPZOCoRUKzLZ4oJWlrCJW4eweJ8w2CXZoE292fq+tZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbxDRQV7VHKwAYBSOgdwnDRQrtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNm NjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1Y2U2ZTlkZWEvYWI0YTdlMWEtNGNlNC0z MjdhLWI1MjgtMTg0ZTQ4OWI0NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGMzZjY3MTctMjA0OC00NGMxLWFl NzctNTBlNWNlNmU5ZGVhLzRjM2Y2NzE3LTIwNDgtNDRjMS1hZTc3LTUwZTVjZTZl OWRlYS5jcmwwHwYDVR0jBBgwFoAUGznG6Jb5p5VqOxqjxSoENpY+TaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YzNmNjcxNy0yMDQ4LTQ0YzEtYWU3Ny01MGU1 Y2U2ZTlkZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJg9jH7ZJmBIP/UBogULnOn5DRyh8WTEIwV003+x10VCDR5D0eHNxdh ep79jeAejKE3+xEE2QQsUZbaALvujbbZDDKEC3sk3X26yPB2pJVFudjSHS9/VTcI 62Ml3jo0k8siFVrU/b26GSxc9psFXwmpRNi03eGAK4KtKUkyT9cR68iVfCPtImhG nY1Eq2GkOSW9+5A3WO6Q0egNaJzFmubz7vJMWM949z5awXj5dak7v8ig48qlmDQT I3kw8eep4u03Xk7fbwFTp8bN+PL9H3leHjgYARP9grzpxI2SK6tc7a8pIinyUUN5 Sgp1BFHoigEXxvIaNMcPNoFkrFCma3Q= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:53 2025 by rpki-client