$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa File: da636e8c-4d89-3b3b-971d-d9b212de0db2.roa (raw, json) Hash identifier: 3cr/Q1ffDnr/pYo6Eqg/JDqlmUCoCxRnaJGhmL10tqU= Subject key identifier: 77:01:3C:80:EE:C4:4E:A7:F4:63:5E:A2:14:60:F7:25:32:50:DC:A0 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B8EACD43028B0C1BE19E7A500 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 173.199.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d4:30:28:b0:c1:be:19:e7:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=7f1c3da4-35b2-47a6-8919-3bbada1075dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ea:7b:d3:7d:cb:1f:b1:dd:9d:6b:28:92:cc: 77:66:af:3c:d6:db:69:85:5e:ce:48:da:98:46:77: d5:0d:fc:14:90:eb:ba:d4:dd:76:e1:25:06:08:bb: 4d:50:03:e7:a4:a4:88:d4:de:62:db:25:29:ee:bf: a8:a1:ee:4e:5e:45:86:77:55:da:9d:69:35:4d:06: 25:18:34:df:39:4f:2a:2e:75:39:40:9c:37:26:19: 25:29:92:e3:8d:92:9e:6c:84:6d:12:34:f3:4e:09: f4:ed:24:ea:6e:a0:c9:a7:bb:80:66:29:a9:9c:f9: c1:c9:3e:62:f6:cd:64:d0:f4:34:8b:9d:21:9f:cc: 65:6b:fe:13:c6:d0:19:c2:de:c8:38:cb:52:0b:d8: 18:64:62:ab:e9:1a:e7:0d:0f:46:de:d6:eb:cc:3b: 6a:70:86:72:b2:03:1a:a1:3d:9a:56:09:5b:7d:4d: ab:d4:b0:d5:c9:bf:e9:80:73:e2:74:78:cf:1b:cf: 6e:13:3c:ad:40:8d:b9:26:d2:36:ea:68:f6:f6:4e: 5c:f1:81:24:e7:aa:b0:b8:10:d0:a2:e6:4a:c5:91: 46:ee:ee:c8:3e:44:ae:f2:fd:f9:32:18:65:e8:43: d9:75:ab:bd:b3:35:c5:fa:59:83:77:af:39:9b:7e: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:01:3C:80:EE:C4:4E:A7:F4:63:5E:A2:14:60:F7:25:32:50:DC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da636e8c-4d89-3b3b-971d-d9b212de0db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 173.199.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e1:d9:20:fa:67:45:f4:dc:1f:92:01:00:94:84:64:2a:c4: df:6d:7d:5f:68:db:06:95:15:77:ad:07:6b:17:e0:d2:2e:54: 0d:c9:f2:72:1b:d9:e9:f0:23:f9:ce:75:a2:ff:c3:ee:5e:50: 5e:73:cf:7e:ca:6d:cc:57:e6:7e:2c:3b:b5:e8:9b:1c:46:dc: 66:43:2f:72:c9:40:18:5c:d9:80:ef:e0:3e:13:1d:8f:95:ca: 74:ad:e9:e1:7c:6b:66:f7:d1:73:3c:75:2a:60:d4:d1:ba:f9: 76:9b:78:4a:49:9b:19:76:d6:00:03:56:14:14:3d:71:5d:95: 01:0b:2a:09:9c:25:d6:7b:d7:9c:b6:ff:b8:b2:3b:47:ba:17: e6:ef:4d:aa:b1:84:a0:75:a0:46:82:df:a2:30:33:68:35:77: 96:bc:d3:29:e6:3c:60:1c:71:88:cd:13:77:07:ec:7b:64:2f: dc:2e:5b:52:b6:bf:f8:68:db:9c:cb:b3:b4:e8:9e:2c:25:bc: 2d:92:b3:cf:4f:a3:92:33:58:18:09:3a:fd:ec:18:f8:38:f4: 53:a3:9d:b8:1a:43:b2:39:80:5c:49:d4:03:92:ff:db:bb:8c: f5:c2:5e:a8:e2:83:d7:33:9a:b2:cf:0f:a8:52:5f:1c:91:f1: ba:53:0d:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNQwKLDBvhnnpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk N2YxYzNkYTQtMzViMi00N2E2LTg5MTktM2JiYWRhMTA3NWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOp7033LH7HdnWsoksx3Zq881ttphV7OSNqY RnfVDfwUkOu61N124SUGCLtNUAPnpKSI1N5i2yUp7r+ooe5OXkWGd1XanWk1TQYl GDTfOU8qLnU5QJw3JhklKZLjjZKebIRtEjTzTgn07STqbqDJp7uAZimpnPnByT5i 9s1k0PQ0i50hn8xla/4TxtAZwt7IOMtSC9gYZGKr6RrnDQ9G3tbrzDtqcIZysgMa oT2aVglbfU2r1LDVyb/pgHPidHjPG89uEzytQI25JtI26mj29k5c8YEk56qwuBDQ ouZKxZFG7u7IPkSu8v35Mhhl6EPZdau9szXF+lmDd685m34i+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcBPIDuxE6n9GNeohRg9yUyUNygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGE2MzZlOGMtNGQ4OS0z YjNiLTk3MWQtZDliMjEyZGUwZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcclMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHh2SD6Z0X03B+SAQCUhGQqxN9tfV9o2waVFXetB2sX4NIuVA3J8nIb 2enwI/nOdaL/w+5eUF5zz37KbcxX5n4sO7XomxxG3GZDL3LJQBhc2YDv4D4THY+V ynSt6eF8a2b30XM8dSpg1NG6+XabeEpJmxl21gADVhQUPXFdlQELKgmcJdZ715y2 /7iyO0e6F+bvTaqxhKB1oEaC36IwM2g1d5a80ynmPGAccYjNE3cH7HtkL9wuW1K2 v/ho25zLs7ToniwlvC2Ss89Po5IzWBgJOv3sGPg49FOjnbgaQ7I5gFxJ1AOS/9u7 jPXCXqjig9czmrLPD6hSXxyR8bpTDcY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:56:27 2025 by rpki-client