$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/768e7440-8845-30dd-9ae9-c7cf232281b9.roa File: 768e7440-8845-30dd-9ae9-c7cf232281b9.roa (raw, json) Hash identifier: ELSXtDgI6FqQrn6d8lGij90HNCiLAGE9w7e07ZMXpOc= Subject key identifier: 69:4A:63:E0:3F:7D:4C:02:69:F6:A2:7D:74:9D:17:72:73:76:4A:EA Certificate issuer: /CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Certificate serial: 010D0C9F4328584B68FC9DB2A6685ECB26FC34C0 Authority key identifier: B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/768e7440-8845-30dd-9ae9-c7cf232281b9.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 54668 IP address blocks: 174.137.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9d:b2:a6:68:5e:cb:26:fc:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=bf761e12-e131-4bf2-ae29-a0385ac3c6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:26:f9:21:d3:43:cc:b1:79:97:c7:4d:ff: 2f:8d:7d:86:6d:8b:1a:43:75:19:12:b5:98:a7:78: ed:7d:98:0b:79:33:8f:3c:be:48:b1:53:14:34:34: c4:3b:b4:44:75:a3:f2:61:68:54:90:f0:ba:c5:3a: 92:e1:12:e9:80:f0:a7:4e:d1:94:07:c1:f9:26:4f: b9:b2:08:b2:6c:1f:9d:1a:08:cb:5c:6b:58:37:a0: 98:1d:d5:11:59:b9:b7:6d:9d:54:34:15:52:91:b8: 92:46:c8:98:d3:04:e3:d1:4e:53:5c:78:65:dd:40: b2:87:17:03:76:98:f6:01:de:16:c5:a1:c0:a8:e6: 9a:ed:1b:ec:72:a9:b9:2b:f3:06:c9:70:51:aa:ad: f4:b7:db:6a:c5:64:8d:47:a6:dc:d1:eb:db:06:09: 78:c2:0e:05:3f:4c:72:57:94:27:e5:5a:1d:67:6d: dd:b2:fa:fc:5d:26:3a:8e:bb:82:34:c5:3e:45:f2: a8:8e:ba:8f:fb:79:66:f4:3d:8d:ab:3d:74:45:a1: 76:aa:71:f4:8c:93:da:57:a6:36:96:7f:77:52:1b: 4c:dd:f3:25:6a:95:9a:35:f6:f9:a4:6f:97:15:f3: 63:6d:cb:98:6b:d3:19:ba:5c:6b:41:eb:e7:0d:fa: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4A:63:E0:3F:7D:4C:02:69:F6:A2:7D:74:9D:17:72:73:76:4A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/768e7440-8845-30dd-9ae9-c7cf232281b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.crl X509v3 Authority Key Identifier: keyid:B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer sbgp-ipAddrBlock: critical IPv4: 174.137.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ac:8f:d1:8d:30:4f:c9:62:03:bb:29:5e:7e:ad:ec:c4:98: 88:e6:d9:50:5b:14:cd:94:23:53:86:71:1c:8e:76:48:74:4b: 0a:8d:72:8e:2c:b2:20:ec:26:a8:71:36:82:f9:86:69:c7:f2: ac:93:e6:71:9c:c9:24:77:ae:d4:13:87:24:4d:0e:d3:ac:aa: c8:71:c6:d3:08:49:9e:30:0a:0f:bd:9b:44:1a:41:9a:6a:38: 00:66:40:62:11:81:35:df:ca:8e:68:01:a6:80:d6:34:74:e6: 27:67:5f:02:31:6c:bd:77:e4:3e:77:c5:a9:28:d5:ac:d9:69: 39:74:00:73:c4:5a:76:d5:fa:d0:51:5f:81:31:2a:91:37:9b: 31:b5:8e:5b:a2:28:49:d5:ff:cf:99:5d:97:eb:49:d4:08:31: fe:02:78:56:c4:43:71:cf:41:32:e3:65:0f:60:22:31:b2:b7: f1:ef:ed:05:2c:4c:fd:4a:f6:46:d2:ae:dc:25:57:54:f8:d9: 3a:72:10:c4:09:d5:91:20:f1:32:f6:a3:f2:68:17:75:ba:4a: 6a:e0:c5:02:b5:0d:47:c4:81:67:ab:dc:b6:df:2e:70:bd:8f: e8:5a:f6:c6:86:81:05:b0:53:2b:dd:6c:9c:31:36:63:bd:05: 5f:39:c9:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J2ypmheyyb8NMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWVjMDg2ZTItMzA1NC00YjM5LWFjNjktNmY3NDUzZWQx ODhmMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk YmY3NjFlMTItZTEzMS00YmYyLWFlMjktYTAzODVhYzNjNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIwm+SHTQ8yxeZfHTf8vjX2GbYsaQ3UZErWY p3jtfZgLeTOPPL5IsVMUNDTEO7REdaPyYWhUkPC6xTqS4RLpgPCnTtGUB8H5Jk+5 sgiybB+dGgjLXGtYN6CYHdURWbm3bZ1UNBVSkbiSRsiY0wTj0U5TXHhl3UCyhxcD dpj2Ad4WxaHAqOaa7Rvscqm5K/MGyXBRqq30t9tqxWSNR6bc0evbBgl4wg4FP0xy V5Qn5VodZ23dsvr8XSY6jruCNMU+RfKojrqP+3lm9D2Nqz10RaF2qnH0jJPaV6Y2 ln93UhtM3fMlapWaNfb5pG+XFfNjbcuYa9MZulxrQevnDfq2ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlKY+A/fUwCafaifXSdF3JzdkrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMw ODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0NTNlZDE4OGYvNzY4ZTc0NDAtODg0NS0z MGRkLTlhZTktYzdjZjIzMjI4MWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWVjMDg2ZTItMzA1NC00YjM5LWFj NjktNmY3NDUzZWQxODhmLzFlYzA4NmUyLTMwNTQtNGIzOS1hYzY5LTZmNzQ1M2Vk MTg4Zi5jcmwwHwYDVR0jBBgwFoAUs5ge2ktB1FAXDDXcH9pAYauvSX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZWMwODZlMi0zMDU0LTRiMzktYWM2OS02Zjc0 NTNlZDE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArol2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKsj9GNME/JYgO7KV5+rezEmIjm2VBbFM2UI1OGcRyOdkh0SwqNco4s siDsJqhxNoL5hmnH8qyT5nGcySR3rtQThyRNDtOsqshxxtMISZ4wCg+9m0QaQZpq OABmQGIRgTXfyo5oAaaA1jR05idnXwIxbL135D53xako1azZaTl0AHPEWnbV+tBR X4ExKpE3mzG1jluiKEnV/8+ZXZfrSdQIMf4CeFbEQ3HPQTLjZQ9gIjGyt/Hv7QUs TP1K9kbSrtwlV1T42TpyEMQJ1ZEg8TL2o/JoF3W6SmrgxQK1DUfEgWer3LbfLnC9 j+ha9saGgQWwUyvdbJwxNmO9BV85yfw= -----END CERTIFICATE-----Generated at Thu Oct 9 03:53:42 2025 by rpki-client