$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa File: 8b836509-70a5-3781-a36d-d60531590d29.roa (raw, json) Hash identifier: KdjChCF1gfXbyCIoGCjvwv8Z+DmbEIxWELNoDwSw0dg= Subject key identifier: C8:10:39:FE:D2:C8:CA:7E:A9:E3:88:8B:D4:26:24:4C:E3:64:93:E3 Certificate issuer: /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Certificate serial: 010D0C9F4328584B52A7537BB04C7037340786C0 Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 394968 IP address blocks: 204.128.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:53:7b:b0:4c:70:37:34:07:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=649a495a-1b17-4015-9965-d51d6e619f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:be:cb:ba:1b:45:4f:f1:d9:60:49:98:a2:fd: a5:92:b4:d7:7a:3e:4b:fc:04:91:72:c0:86:3f:62: c8:c8:9d:17:a7:af:98:03:49:26:4d:10:f4:6b:67: f0:c8:0c:7b:2a:e9:d5:7a:5d:17:6d:bb:79:ff:a9: f9:b6:db:8e:8a:7e:a8:d8:30:25:e2:92:43:f2:51: 43:21:57:c5:6c:a8:0c:c1:c3:42:5b:f4:40:dd:04: b7:6d:fb:c3:5a:89:7b:5b:cf:05:28:a7:33:e6:39: bd:63:97:86:27:89:e9:b8:0a:a7:cd:97:11:50:35: 8c:a9:46:63:2b:fc:81:ad:f5:21:0e:04:76:4b:38: f1:f9:d5:e8:fc:ce:30:92:0b:23:20:b1:f4:b6:bc: f8:05:1c:9b:89:c1:46:99:82:f0:38:a2:eb:b0:91: 77:8a:aa:52:17:0c:ee:fd:b5:3b:67:6b:d7:d2:d4: f7:dc:9d:79:13:8b:48:d8:82:2f:53:02:c8:20:7c: 94:65:9e:c0:9d:73:55:a3:c9:37:ee:7d:59:32:02: 76:4b:d2:36:20:07:b8:82:9a:fa:87:b8:01:d9:da: d5:12:02:c3:57:03:e9:45:f9:56:25:9d:e9:73:d9: 9c:88:17:59:f7:fe:45:7f:a4:b9:0e:19:66:2a:e5: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:10:39:FE:D2:C8:CA:7E:A9:E3:88:8B:D4:26:24:4C:E3:64:93:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl X509v3 Authority Key Identifier: keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer sbgp-ipAddrBlock: critical IPv4: 204.128.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6d:d4:9f:df:38:58:3b:61:e1:f3:87:1b:63:a8:8f:33:3d: 42:72:92:b6:44:36:a5:08:a1:5a:32:fc:c3:d6:21:d4:fc:b7: 83:3e:71:ce:62:b1:09:4f:80:1e:60:44:04:a3:4c:38:c2:c8: d7:06:c3:d9:2c:9c:59:b1:c3:94:02:17:44:21:a9:8e:26:fb: 21:ab:cd:c5:8d:96:cb:2c:bd:dd:56:7d:97:65:09:e5:76:d5: 4b:42:7d:30:19:2c:a1:d5:33:19:ee:ab:87:76:c8:68:d2:0a: 5a:25:61:1d:ce:57:a9:72:7c:56:65:48:0c:5c:55:16:c9:3b: 49:ca:2f:b2:20:41:ca:0b:94:c2:73:1c:2f:10:32:25:d9:19: 14:b8:3a:67:e1:e7:1b:52:af:7c:6b:c8:c7:77:ea:64:7d:e6: 2e:f3:46:bd:0a:83:4b:ce:d3:6e:f0:6b:41:8f:6e:62:04:ee: fc:d8:cc:f4:75:b9:56:3c:17:d2:5c:ac:d4:b2:35:3e:0c:4b: e8:20:f7:92:2a:00:99:80:fa:c0:1c:dd:14:3d:10:36:0a:75: 13:61:8d:86:b7:79:f1:a9:b6:34:1e:a1:aa:e2:c8:a6:7c:6e: 14:e0:cb:02:f8:c6:8c:f8:2e:35:d1:dc:a2:8a:0b:72:d2:42: 04:ab:7f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1N7sExwNzQHhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RkNTYwZDQtNzdjOS00YWI2LWIyMmItOTc3MWFhM2I2 N2MyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NjQ5YTQ5NWEtMWIxNy00MDE1LTk5NjUtZDUxZDZlNjE5Zjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb7LuhtFT/HZYEmYov2lkrTXej5L/ASRcsCG P2LIyJ0Xp6+YA0kmTRD0a2fwyAx7KunVel0Xbbt5/6n5ttuOin6o2DAl4pJD8lFD IVfFbKgMwcNCW/RA3QS3bfvDWol7W88FKKcz5jm9Y5eGJ4npuAqnzZcRUDWMqUZj K/yBrfUhDgR2Szjx+dXo/M4wkgsjILH0trz4BRybicFGmYLwOKLrsJF3iqpSFwzu /bU7Z2vX0tT33J15E4tI2IIvUwLIIHyUZZ7AnXNVo8k37n1ZMgJ2S9I2IAe4gpr6 h7gB2drVEgLDVwPpRflWJZ3pc9mciBdZ9/5Ff6S5DhlmKuXgOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgQOf7SyMp+qeOIi9QmJEzjZJPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1 NjBkNC03N2M5LTRhYjYtYjIyYi05NzcxYWEzYjY3YzIvOGI4MzY1MDktNzBhNS0z NzgxLWEzNmQtZDYwNTMxNTkwZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2RkNTYwZDQtNzdjOS00YWI2LWIy MmItOTc3MWFhM2I2N2MyLzdkZDU2MGQ0LTc3YzktNGFiNi1iMjJiLTk3NzFhYTNi NjdjMi5jcmwwHwYDVR0jBBgwFoAUaH23I0rV6sAiz6qA1UzejvWxHL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1NjBkNC03N2M5LTRhYjYtYjIyYi05Nzcx YWEzYjY3YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzICvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZt1J/fOFg7YeHzhxtjqI8zPUJykrZENqUIoVoy/MPWIdT8t4M+cc5i sQlPgB5gRASjTDjCyNcGw9ksnFmxw5QCF0QhqY4m+yGrzcWNlsssvd1WfZdlCeV2 1UtCfTAZLKHVMxnuq4d2yGjSClolYR3OV6lyfFZlSAxcVRbJO0nKL7IgQcoLlMJz HC8QMiXZGRS4Omfh5xtSr3xryMd36mR95i7zRr0Kg0vO027wa0GPbmIE7vzYzPR1 uVY8F9JcrNSyNT4MS+gg95IqAJmA+sAc3RQ9EDYKdRNhjYa3efGptjQeoariyKZ8 bhTgywL4xoz4LjXR3KKKC3LSQgSrf1c= -----END CERTIFICATE-----Generated at Wed Oct 8 23:35:55 2025 by rpki-client