$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0110d5-1eed-3838-8f5e-8b104f8d3d19.roa File: 9d0110d5-1eed-3838-8f5e-8b104f8d3d19.roa (raw, json) Hash identifier: lN0sUlkUTQ09G8dGaZIWBLEGlHti6V/3F7AMc0N/YN0= Subject key identifier: 9A:2D:1F:54:FD:DF:A8:C3:5B:BD:78:0E:0F:15:93:9D:DF:05:A4:BD Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5B073725F4E10A22ED253A90 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0110d5-1eed-3838-8f5e-8b104f8d3d19.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 173.182.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:37:25:f4:e1:0a:22:ed:25:3a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=cfc41bc2-edda-4439-9ce6-b8d3f64e9c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:e0:5c:a9:e4:9f:85:15:2f:c7:ac:12:67: 40:57:62:95:5d:bd:65:17:e1:fb:8a:8e:52:08:33: d5:df:e4:d1:05:f7:bf:80:be:e1:e6:0b:50:e7:6e: bc:05:ce:b9:93:e3:98:c7:ec:7d:9e:7a:34:8e:9a: fa:38:91:b4:22:0f:86:cd:6f:fd:3d:64:72:d9:a5: 04:af:49:4c:79:5a:d2:02:65:1e:50:b0:c5:07:0e: 0e:a5:f5:d2:5d:0f:f1:45:21:fd:b9:f9:d2:d9:b2: dd:09:6a:ce:70:9c:44:2f:1b:b4:b5:50:af:d9:2e: 76:ef:17:dc:42:99:10:f1:87:2d:41:a4:38:c6:cc: 6c:22:aa:bd:92:7c:d2:dc:f4:26:3b:c9:42:48:89: 48:f2:a0:6e:67:20:3a:03:f6:c7:75:8f:ab:0b:85: 34:5a:72:d2:05:b1:7a:a5:f0:1b:84:93:e5:69:81: 76:f7:5e:f2:65:7c:37:93:a8:7e:e1:44:c2:6f:66: 71:2c:25:8d:aa:fa:cc:8f:43:8f:d0:87:da:bc:f4: 3e:04:bd:21:3d:20:94:22:09:11:ef:19:b7:8a:8b: 4e:04:08:b9:a2:de:f0:fc:ca:9c:b9:20:1c:b3:2c: 88:f1:ad:59:a7:63:e9:10:e9:f2:01:f3:da:57:6f: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2D:1F:54:FD:DF:A8:C3:5B:BD:78:0E:0F:15:93:9D:DF:05:A4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0110d5-1eed-3838-8f5e-8b104f8d3d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 173.182.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9d:e0:4e:f1:c9:0a:c5:48:5a:10:a3:48:e1:21:47:80:b7: 79:ea:f6:83:e6:6d:8c:36:58:21:d7:96:bf:c5:05:04:ca:77: 37:4c:5b:a2:46:97:2a:29:de:ca:bc:0c:fc:2a:a8:a3:6a:e0: 5f:5b:14:6f:e7:5c:02:d9:da:4c:52:14:88:83:d8:22:e4:65: f3:08:b1:1a:1e:63:f6:87:e0:b9:8a:24:89:78:6d:62:9c:6d: cf:12:1e:d2:7f:5d:fc:b8:58:4d:96:91:6f:0c:93:9a:9c:c9: 20:37:d0:da:e1:e9:2a:1e:e1:79:36:6d:db:4a:2c:3a:4a:da: 3e:0b:19:55:68:88:8c:9d:ea:4f:30:2f:d0:fa:3f:ab:6b:98: 74:34:a1:76:33:71:11:92:79:49:9f:18:a3:b2:78:8f:68:c1: 2c:47:26:b6:bb:3c:98:ad:e9:99:2c:cc:dd:36:b8:8f:f0:e4: 00:6d:8a:4b:e3:2a:26:77:ba:86:62:01:c4:d5:19:c9:ca:96: 29:fe:cf:74:42:14:bb:92:08:57:c6:39:e2:45:7b:dc:aa:e8: 67:21:c8:1d:ef:1d:13:8d:d3:0d:69:6b:95:ea:09:46:a9:4c: 61:46:d4:0b:06:d0:bc:00:83:11:15:b5:30:dd:32:50:a2:9d: b2:7d:99:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzcl9OEKIu0lOpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Y2ZjNDFiYzItZWRkYS00NDM5LTljZTYtYjhkM2Y2NGU5YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVbgXKnkn4UVL8esEmdAV2KVXb1lF+H7io5S CDPV3+TRBfe/gL7h5gtQ5268Bc65k+OYx+x9nno0jpr6OJG0Ig+GzW/9PWRy2aUE r0lMeVrSAmUeULDFBw4OpfXSXQ/xRSH9ufnS2bLdCWrOcJxELxu0tVCv2S527xfc QpkQ8YctQaQ4xsxsIqq9knzS3PQmO8lCSIlI8qBuZyA6A/bHdY+rC4U0WnLSBbF6 pfAbhJPlaYF2917yZXw3k6h+4UTCb2ZxLCWNqvrMj0OP0IfavPQ+BL0hPSCUIgkR 7xm3iotOBAi5ot7w/MqcuSAcsyyI8a1Zp2PpEOnyAfPaV29dPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJotH1T936jDW714Dg8Vk53fBaS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWQwMTEwZDUtMWVlZC0z ODM4LThmNWUtOGIxMDRmOGQzZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrbaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6d4E7xyQrFSFoQo0jhIUeAt3nq9oPmbYw2WCHXlr/FBQTKdzdMW6JG lyop3sq8DPwqqKNq4F9bFG/nXALZ2kxSFIiD2CLkZfMIsRoeY/aH4LmKJIl4bWKc bc8SHtJ/Xfy4WE2WkW8Mk5qcySA30Nrh6Soe4Xk2bdtKLDpK2j4LGVVoiIyd6k8w L9D6P6trmHQ0oXYzcRGSeUmfGKOyeI9owSxHJra7PJit6ZkszN02uI/w5ABtikvj KiZ3uoZiAcTVGcnKlin+z3RCFLuSCFfGOeJFe9yq6GchyB3vHRON0w1pa5XqCUap TGFG1AsG0LwAgxEVtTDdMlCinbJ9mUA= -----END CERTIFICATE-----Generated at Sun Oct 19 20:16:57 2025 by rpki-client