$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa File: 21975138-cf92-36b8-8d76-cc6b2ac602dd.roa (raw, json) Hash identifier: pJONgrP2cZIdYe7cA2UyA0z6UYqAm8FEizDVq05Js5s= Subject key identifier: F5:D9:AA:1D:E7:75:80:6B:41:FF:11:AE:D7:12:FE:3F:8E:27:5C:DD Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Certificate serial: 010D0C9F4328584B328C45005006EC2FCBA42E10 Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 40401 IP address blocks: 149.137.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:45:00:50:06:ec:2f:cb:a4:2e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=fe0e31e8-7bc3-4594-9218-b8f0e97688b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:2b:2d:ca:21:19:75:9f:3d:ab:61:6d:0b: c9:aa:68:d5:f0:fa:f8:25:98:7c:f3:6e:78:ea:07: 86:35:c1:a0:fe:4a:f6:15:98:f3:6a:00:5a:0d:e1: 8a:52:3d:a3:f3:86:66:29:e8:8b:6d:9d:d1:94:c4: 79:c4:18:02:4f:5c:b3:1d:9c:2f:26:14:c8:46:f5: 34:f9:94:fa:b6:c2:7b:f4:35:b5:ad:94:10:d6:c9: 24:22:24:e5:36:50:b6:f0:cb:08:06:64:e3:a1:04: 28:5f:2f:ce:e9:d6:37:3a:48:a3:1d:24:83:37:52: f6:36:2a:5c:da:2b:a3:a0:bb:a8:a7:85:08:22:62: f9:a2:1f:fa:16:2c:bc:37:e4:59:0a:05:73:02:64: 23:46:50:d2:9f:6b:29:72:58:de:34:dd:b1:7e:20: 8b:75:8a:86:56:2b:42:35:20:2b:59:24:31:05:85: 47:66:8f:17:79:da:2a:38:9e:4c:4d:72:77:32:1b: ff:60:a3:ac:88:06:3d:b0:3a:e8:11:70:0a:89:15: 9d:2d:76:fd:81:2e:b8:3f:81:69:92:24:23:95:35: 38:06:c8:72:a9:26:f9:46:bc:fd:9a:9c:56:39:85: da:e9:a9:a2:45:39:ac:01:0d:aa:94:df:6f:bd:b6: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D9:AA:1D:E7:75:80:6B:41:FF:11:AE:D7:12:FE:3F:8E:27:5C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/21975138-cf92-36b8-8d76-cc6b2ac602dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl X509v3 Authority Key Identifier: keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer sbgp-ipAddrBlock: critical IPv4: 149.137.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ce:5b:5b:db:4b:ba:7a:d2:ed:16:26:80:36:7e:ad:83:dd: 4c:49:d0:30:60:17:b7:14:c8:48:ee:fe:cc:f7:d3:2e:5e:52: 59:d3:36:4b:fa:cd:90:17:c3:f1:80:28:db:6e:cb:35:de:0d: 83:fe:e5:b2:9c:63:96:ed:a0:fb:ba:75:81:11:82:4d:4b:a8: 49:34:35:48:60:07:6c:bf:44:75:b5:4a:b9:a1:76:9c:25:86: be:0b:2f:48:75:53:48:42:ac:e0:d0:c8:ed:19:e3:f0:c8:09: c0:96:d4:87:df:9a:0c:6c:48:60:f6:ba:a7:3c:29:cf:81:40: ed:f7:93:d2:d4:9c:7f:ee:e2:49:7b:c7:ce:9a:38:96:1e:50: c4:57:77:cd:66:77:12:88:ec:0d:4a:58:61:93:e8:cc:7e:df: 7f:64:56:3f:6e:d9:39:11:f1:12:d9:7f:a5:e3:58:74:e0:39: ec:cb:4f:fe:3e:a3:de:01:41:66:88:28:7f:82:ea:7e:e0:70: 64:b5:5b:cc:cc:40:83:32:d9:09:4b:74:5a:75:81:2c:04:fe: 66:5d:18:d0:1b:bc:9f:13:4e:c5:bf:4d:46:de:44:a1:43:5a: 04:42:77:04:9e:38:34:08:80:9e:df:fc:1d:50:bd:fc:e9:88: d6:bb:44:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEUAUAbsL8ukLhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll Mjg3MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmUwZTMxZTgtN2JjMy00NTk0LTkyMTgtYjhmMGU5NzY4OGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB0rLcohGXWfPathbQvJqmjV8Pr4JZh88254 6geGNcGg/kr2FZjzagBaDeGKUj2j84ZmKeiLbZ3RlMR5xBgCT1yzHZwvJhTIRvU0 +ZT6tsJ79DW1rZQQ1skkIiTlNlC28MsIBmTjoQQoXy/O6dY3OkijHSSDN1L2Nipc 2iujoLuop4UIImL5oh/6Fiy8N+RZCgVzAmQjRlDSn2spcljeNN2xfiCLdYqGVitC NSArWSQxBYVHZo8XedoqOJ5MTXJ3Mhv/YKOsiAY9sDroEXAKiRWdLXb9gS64P4Fp kiQjlTU4BshyqSb5Rrz9mpxWOYXa6amiRTmsAQ2qlN9vvbbOGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXZqh3ndYBrQf8RrtcS/j+OJ1zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvMjE5NzUxMzgtY2Y5Mi0z NmI4LThkNzYtY2M2YjJhYzYwMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5 ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz YTQyOWUyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTOW1vbS7p60u0WJoA2fq2D3UxJ0DBgF7cUyEju/sz30y5eUlnTNkv6 zZAXw/GAKNtuyzXeDYP+5bKcY5btoPu6dYERgk1LqEk0NUhgB2y/RHW1Srmhdpwl hr4LL0h1U0hCrODQyO0Z4/DICcCW1IffmgxsSGD2uqc8Kc+BQO33k9LUnH/u4kl7 x86aOJYeUMRXd81mdxKI7A1KWGGT6Mx+339kVj9u2TkR8RLZf6XjWHTgOezLT/4+ o94BQWaIKH+C6n7gcGS1W8zMQIMy2QlLdFp1gSwE/mZdGNAbvJ8TTsW/TUbeRKFD WgRCdwSeODQIgJ7f/B1QvfzpiNa7RPY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:49 2025 by rpki-client