$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/25a4fcc8-45f6-3fa3-9f60-a99c0c7a1e59.roa File: 25a4fcc8-45f6-3fa3-9f60-a99c0c7a1e59.roa (raw, json) Hash identifier: uoaJOrbpS/cdBwtcTP/vK6czPU/J3I8KBF8uz9Q5+aU= Subject key identifier: B2:96:A8:2A:66:28:4B:BB:FD:D9:7A:F4:13:6E:E3:B7:B5:62:A1:4F Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B4081CCDBB696DC57EEA7CA60 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/25a4fcc8-45f6-3fa3-9f60-a99c0c7a1e59.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 136.25.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:cc:db:b6:96:dc:57:ee:a7:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=00df4934-1081-468a-8d0a-a8a1b1afdf7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:2a:4c:34:b1:fc:08:3f:12:df:c9:6e:a6: fa:9b:6f:ed:31:81:96:68:d8:d1:61:92:8a:c3:12: e9:b7:93:a5:66:fd:8c:fa:e5:07:2f:be:9c:62:94: ad:60:46:94:95:9f:53:63:9a:5b:b7:2c:17:c3:c5: f4:90:d4:79:cb:3f:eb:6e:58:a6:18:cf:33:2b:12: 01:a6:f3:1e:7d:36:83:5f:83:7a:6b:2a:53:d2:1d: a4:dc:7f:11:6d:21:58:78:3c:3e:6e:17:03:16:ba: b9:31:9d:c7:bb:b4:12:c0:a2:d4:e4:75:19:24:ae: 62:97:43:36:99:34:87:1a:35:3e:04:57:39:67:de: 68:e9:8f:f1:7e:40:3b:ac:d9:07:05:70:b6:41:b1: 15:e1:e7:be:b0:82:88:eb:36:2e:8c:5e:df:5a:d8: 36:84:31:a6:1b:f0:f3:25:b2:33:74:53:cb:22:77: 17:18:7d:a8:db:6c:f3:9a:f4:66:8b:70:0e:14:88: 9d:08:59:d3:af:cb:3a:1f:c7:95:ac:a8:bf:46:55: ad:66:f7:a8:c6:ac:95:df:38:17:34:ab:8f:52:4e: c9:f9:50:e2:fc:e4:27:db:1b:6c:9c:2b:81:f2:a5: 2f:f0:4d:8c:4f:ce:1f:83:51:7f:85:af:ba:55:c9: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:96:A8:2A:66:28:4B:BB:FD:D9:7A:F4:13:6E:E3:B7:B5:62:A1:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/25a4fcc8-45f6-3fa3-9f60-a99c0c7a1e59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.25.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a0:e2:77:0f:72:47:ff:9f:99:2b:15:06:45:98:4f:9a:80: be:5e:45:91:76:47:38:19:16:b3:7d:ed:61:ce:3f:6f:f9:3a: 65:b5:63:7f:d5:72:ff:27:2e:5f:6b:e6:7c:8e:cd:e2:20:b1: 97:9d:02:89:d6:3a:82:40:60:c2:71:a1:ea:1d:b9:55:d5:df: 6a:5b:fa:28:2d:06:96:66:b1:58:72:5b:f7:72:e0:04:56:1e: c4:ec:b5:7d:dc:ed:5d:92:8a:0d:a8:07:6e:8d:5b:ec:9a:48: 4e:02:7c:c4:cd:1b:91:f7:77:17:12:ae:59:26:33:49:a4:87: 7d:77:55:f2:2c:8c:d1:f8:aa:a4:8e:22:27:0d:65:47:94:42: cb:96:5d:70:3d:a1:9a:6a:a8:6a:66:96:6d:41:54:30:01:ce: 70:85:08:55:fe:9c:86:08:45:c1:b2:41:b8:a3:d8:89:2e:c4: b0:42:65:14:a9:f1:3c:31:37:c9:4f:a6:fe:e4:c4:2a:b3:27: 00:7e:cf:9b:73:36:ca:80:ae:a3:4a:e5:00:d2:ed:df:5d:5c: 33:f7:0f:ef:9c:a2:54:a9:b9:62:fb:9d:f2:4a:3f:e0:e4:2d: b9:e0:15:a9:f0:19:d1:c9:1c:46:3e:10:de:3c:a8:32:4b:bf: 12:7a:90:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgczbtpbcV+6nymAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MDBkZjQ5MzQtMTA4MS00NjhhLThkMGEtYThhMWIxYWZkZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H0qTDSx/Ag/Et/Jbqb6m2/tMYGWaNjRYZKK wxLpt5OlZv2M+uUHL76cYpStYEaUlZ9TY5pbtywXw8X0kNR5yz/rblimGM8zKxIB pvMefTaDX4N6aypT0h2k3H8RbSFYeDw+bhcDFrq5MZ3Hu7QSwKLU5HUZJK5il0M2 mTSHGjU+BFc5Z95o6Y/xfkA7rNkHBXC2QbEV4ee+sIKI6zYujF7fWtg2hDGmG/Dz JbIzdFPLIncXGH2o22zzmvRmi3AOFIidCFnTr8s6H8eVrKi/RlWtZveoxqyV3zgX NKuPUk7J+VDi/OQn2xtsnCuB8qUv8E2MT84fg1F/ha+6VcnCKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKWqCpmKEu7/dl69BNu47e1YqFPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvMjVhNGZjYzgtNDVmNi0z ZmEzLTlmNjAtYTk5YzBjN2ExZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOg4ncPckf/n5krFQZFmE+agL5eRZF2RzgZFrN97WHOP2/5OmW1Y3/V cv8nLl9r5nyOzeIgsZedAonWOoJAYMJxoeoduVXV32pb+igtBpZmsVhyW/dy4ARW HsTstX3c7V2Sig2oB26NW+yaSE4CfMTNG5H3dxcSrlkmM0mkh313VfIsjNH4qqSO IicNZUeUQsuWXXA9oZpqqGpmlm1BVDABznCFCFX+nIYIRcGyQbij2IkuxLBCZRSp 8TwxN8lPpv7kxCqzJwB+z5tzNsqArqNK5QDS7d9dXDP3D++colSpuWL7nfJKP+Dk LbngFanwGdHJHEY+EN48qDJLvxJ6kCs= -----END CERTIFICATE-----Generated at Tue Oct 21 16:15:48 2025 by rpki-client