$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3bd726a4-278a-3d25-a461-0579f23ed131.roa File: 3bd726a4-278a-3d25-a461-0579f23ed131.roa (raw, json) Hash identifier: 4fZ77arJiO20nUlWy0Kag7Um1OagNku874Kg4/2fviU= Subject key identifier: B7:A7:2C:2A:41:7D:EC:3B:C2:46:0B:93:F5:6D:3F:98:CB:C2:2B:ED Certificate issuer: /CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Certificate serial: 010D0C9F4328584B87B21DBF9E846ECC1A680480 Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3bd726a4-278a-3d25-a461-0579f23ed131.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 144.81.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1d:bf:9e:84:6e:cc:1a:68:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=3186cfa2-0c94-4ffd-82e5-2214b146ed60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:a7:1f:4a:5f:c0:6e:95:fa:ed:6a:7b:5d: 1c:47:f1:a4:e1:52:19:30:42:c3:e5:8d:16:c4:71: ae:16:b7:05:a3:6d:44:dd:cc:6b:9c:ff:54:60:59: 8e:8e:11:a9:3e:bd:93:56:9d:b0:3d:98:cd:5b:52: fb:97:99:17:d1:55:37:3d:e2:31:4c:a4:fa:4b:51: 4c:93:03:0b:73:8e:ae:96:97:42:f6:bb:6a:34:96: 78:46:fd:87:0b:9f:a8:50:f5:0b:5a:09:54:98:85: be:f4:23:2d:bd:8f:f9:0c:1b:33:09:8e:df:f6:98: c6:9a:76:f4:5d:7e:70:0b:80:09:2f:f7:1f:d5:ac: 45:9b:1e:ba:b7:1a:56:66:5b:8f:b5:5a:45:6c:4f: 4f:8f:d8:cc:2a:a8:d8:b6:f2:23:9d:d1:2a:98:25: b2:97:58:89:3c:63:0b:c1:02:14:7a:0b:5a:7c:7b: 47:7a:6b:f4:50:b6:3f:51:b8:db:8f:45:21:80:24: 00:4f:fc:c8:41:68:b7:02:0b:09:5d:36:77:30:16: 11:90:31:b1:41:0e:28:42:54:ce:88:52:d2:4d:ed: c8:c8:5e:da:7b:03:3f:ee:e8:7e:df:fd:35:2c:23: 9c:aa:06:f1:9a:7e:59:13:06:a2:7b:5e:fa:a7:ba: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A7:2C:2A:41:7D:EC:3B:C2:46:0B:93:F5:6D:3F:98:CB:C2:2B:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/3bd726a4-278a-3d25-a461-0579f23ed131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl X509v3 Authority Key Identifier: keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer sbgp-ipAddrBlock: critical IPv4: 144.81.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:dd:de:52:e0:b8:a8:8e:d9:fc:3b:0c:3f:ef:59:69:09:13: b2:8a:8f:85:e5:ff:81:41:b9:71:0d:d2:7a:2e:79:82:e5:e6: 76:d1:9a:e6:4e:3b:78:5b:11:b6:21:f6:73:8a:cb:48:5f:0c: 97:e1:8f:ea:21:4c:75:db:88:5b:10:38:cb:ea:2b:7f:66:c4: 9d:17:d6:52:83:70:c1:ab:4f:98:8a:15:a7:79:c5:3d:a8:06: 56:2c:6e:86:07:50:7e:24:57:77:1f:98:bc:41:03:1c:62:f6: 86:cb:2b:32:01:80:88:47:25:35:d0:5a:94:20:1b:50:21:87: e7:94:fe:56:b0:c7:ed:c8:d7:8c:69:4f:59:dc:ba:f9:f7:0e: c0:41:97:c5:95:04:eb:f2:be:51:cf:b7:2b:3b:d3:1c:b8:fb: b3:99:9c:14:38:3a:a9:1c:a7:91:59:17:e2:4c:4f:91:d8:bb: 40:97:5e:55:f6:6b:a3:6b:6c:6e:a7:5e:c3:4c:28:3a:06:42: 63:14:c9:fa:3c:ac:14:db:65:b6:f5:08:9e:77:d5:27:7e:db: 86:06:6e:7e:1d:23:a7:b7:92:a5:5b:a2:2a:72:43:9d:15:e7: 99:98:99:b3:e7:c8:7b:4b:b5:eb:97:77:fd:49:fb:6e:2d:3a: 8c:04:09:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh2/noRuzBpoBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI1M2Y1NmYtYTU4Ni00ZTg1LTljNjEtYzNhMjc4ZTEz MTIwMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MzE4NmNmYTItMGM5NC00ZmZkLTgyZTUtMjIxNGIxNDZlZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLCnH0pfwG6V+u1qe10cR/Gk4VIZMELD5Y0W xHGuFrcFo21E3cxrnP9UYFmOjhGpPr2TVp2wPZjNW1L7l5kX0VU3PeIxTKT6S1FM kwMLc46ulpdC9rtqNJZ4Rv2HC5+oUPULWglUmIW+9CMtvY/5DBszCY7f9pjGmnb0 XX5wC4AJL/cf1axFmx66txpWZluPtVpFbE9Pj9jMKqjYtvIjndEqmCWyl1iJPGML wQIUegtafHtHemv0ULY/Ubjbj0UhgCQAT/zIQWi3AgsJXTZ3MBYRkDGxQQ4oQlTO iFLSTe3IyF7aewM/7uh+3/01LCOcqgbxmn5ZEwaie176p7qf4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLenLCpBfew7wkYLk/VtP5jLwivtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjUz ZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2EyNzhlMTMxMjAvM2JkNzI2YTQtMjc4YS0z ZDI1LWE0NjEtMDU3OWYyM2VkMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGI1M2Y1NmYtYTU4Ni00ZTg1LTlj NjEtYzNhMjc4ZTEzMTIwLzhiNTNmNTZmLWE1ODYtNGU4NS05YzYxLWMzYTI3OGUx MzEyMC5jcmwwHwYDVR0jBBgwFoAUIXvTyT0gyD5zZoVktKcujUUn38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjUzZjU2Zi1hNTg2LTRlODUtOWM2MS1jM2Ey NzhlMTMxMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkFGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7d3lLguKiO2fw7DD/vWWkJE7KKj4Xl/4FBuXEN0noueYLl5nbRmuZO O3hbEbYh9nOKy0hfDJfhj+ohTHXbiFsQOMvqK39mxJ0X1lKDcMGrT5iKFad5xT2o BlYsboYHUH4kV3cfmLxBAxxi9obLKzIBgIhHJTXQWpQgG1Ahh+eU/lawx+3I14xp T1ncuvn3DsBBl8WVBOvyvlHPtys70xy4+7OZnBQ4Oqkcp5FZF+JMT5HYu0CXXlX2 a6NrbG6nXsNMKDoGQmMUyfo8rBTbZbb1CJ531Sd+24YGbn4dI6e3kqVboipyQ50V 55mYmbPnyHtLteuXd/1J+24tOowECTg= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:34 2025 by rpki-client