$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d32dac0c-f03d-327f-85f8-d684d942a5b8.roa File: d32dac0c-f03d-327f-85f8-d684d942a5b8.roa (raw, json) Hash identifier: xPcIMgR4YV2LTF0f/2CGf8V91aLbSLt19FVI0PK9Hec= Subject key identifier: 3B:8C:AD:C0:F6:17:FC:5D:A1:8B:58:5C:A8:C7:CF:84:48:77:E3:EB Certificate issuer: /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Certificate serial: 010D0C9F4328584B4D11EAC37E04A706C774C140 Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d32dac0c-f03d-327f-85f8-d684d942a5b8.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 14793 IP address blocks: 76.164.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ea:c3:7e:04:a7:06:c7:74:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=ec272fa3-b67e-4e5b-aeb2-08f26dbdd634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0a:5b:5c:d5:b9:8b:0b:f8:09:b2:55:96:90: 6b:53:82:21:84:3d:31:6d:f9:d8:b2:2e:87:12:f1: e8:91:a0:79:b6:31:7b:c8:7b:a0:43:2f:4c:3e:99: ba:3b:2d:f5:e5:de:9d:6d:9e:ab:2f:a5:2f:eb:b4: 29:27:cd:ac:b0:fd:c5:7b:6d:d1:f5:46:7c:fb:42: b7:7b:a0:04:a5:e6:30:5c:6d:28:36:bc:0e:b6:8a: 37:9a:9e:a8:3a:f8:98:0b:1a:6c:38:bf:f5:cd:d2: f0:3c:0d:1e:f5:58:07:27:d3:96:3e:02:8f:36:cb: a1:ad:4e:4a:e3:6a:8a:d6:f0:29:68:eb:2b:04:6c: 7a:c2:06:1d:86:4c:1b:eb:4e:34:72:3a:7c:2d:4c: 51:68:35:d5:5a:13:5a:7c:9c:75:55:25:de:02:14: b6:a9:bc:0b:01:46:b3:c6:5a:1f:01:2d:8d:24:5a: 2f:ad:20:c9:87:d7:3a:17:90:60:a0:7b:47:c9:85: db:9f:79:0c:30:0b:f8:ac:e0:ca:51:8d:c6:1b:1e: 06:2a:b9:18:60:fc:40:98:35:6e:61:b5:32:47:59: 11:7e:d0:eb:0d:67:4f:59:5f:ca:3d:9e:a8:d6:ee: 92:fd:97:b6:23:84:db:96:be:46:e2:a8:bb:ae:54: 3b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8C:AD:C0:F6:17:FC:5D:A1:8B:58:5C:A8:C7:CF:84:48:77:E3:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d32dac0c-f03d-327f-85f8-d684d942a5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl X509v3 Authority Key Identifier: keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer sbgp-ipAddrBlock: critical IPv4: 76.164.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1c:da:6a:f9:89:9a:de:0b:63:17:80:b7:4e:23:50:9f:40: 4b:26:ae:80:09:16:b7:16:50:57:20:6f:3d:5b:ef:d0:ef:c9: 66:e1:3f:6b:9b:46:d7:11:19:ea:07:05:19:12:37:9c:d7:01: f9:ad:76:19:25:1c:56:09:07:ea:ea:cd:6c:b9:a9:d8:91:53: dd:29:78:38:84:08:d6:d3:60:2f:3d:fd:b4:f5:40:58:2c:3c: bc:2f:ab:fb:e9:ce:fe:f7:7a:6a:3b:2c:5e:0c:b3:04:64:5c: 72:fe:f2:07:ac:70:90:85:67:8f:45:84:66:0d:13:78:64:c2: 7c:bd:19:ae:37:ea:7d:58:6a:aa:69:07:81:1f:4d:9a:b6:41: e8:47:91:b9:0a:a1:45:2f:5e:06:c6:7f:0e:3c:0a:c7:d1:ff: f6:58:d6:b1:53:fe:05:41:c6:d5:82:f3:02:42:65:51:ee:13: 5a:2e:e1:d1:89:06:64:3a:8d:f4:54:49:38:a4:50:96:ff:5c: bc:81:e1:14:06:d3:bb:1c:cd:d8:38:37:a3:45:be:9d:93:95: ac:6a:f4:62:f9:a6:a0:75:93:d2:61:08:4d:df:db:17:27:27: 70:0c:ab:98:39:82:47:ee:b3:7d:4f:e3:89:f2:40:e0:a8:d4: 42:22:09:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEerDfgSnBsd0wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi MGY2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZWMyNzJmYTMtYjY3ZS00ZTViLWFlYjItMDhmMjZkYmRkNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgpbXNW5iwv4CbJVlpBrU4IhhD0xbfnYsi6H EvHokaB5tjF7yHugQy9MPpm6Oy315d6dbZ6rL6Uv67QpJ82ssP3Fe23R9UZ8+0K3 e6AEpeYwXG0oNrwOtoo3mp6oOviYCxpsOL/1zdLwPA0e9VgHJ9OWPgKPNsuhrU5K 42qK1vApaOsrBGx6wgYdhkwb6040cjp8LUxRaDXVWhNafJx1VSXeAhS2qbwLAUaz xlofAS2NJFovrSDJh9c6F5BgoHtHyYXbn3kMMAv4rODKUY3GGx4GKrkYYPxAmDVu YbUyR1kRftDrDWdPWV/KPZ6o1u6S/Ze2I4Tblr5G4qi7rlQ7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuMrcD2F/xdoYtYXKjHz4RId+PrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvZDMyZGFjMGMtZjAzZC0z MjdmLTg1ZjgtZDY4NGQ5NDJhNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2 OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3 YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKSyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0c2mr5iZreC2MXgLdOI1CfQEsmroAJFrcWUFcgbz1b79DvyWbhP2ub RtcRGeoHBRkSN5zXAfmtdhklHFYJB+rqzWy5qdiRU90peDiECNbTYC89/bT1QFgs PLwvq/vpzv73emo7LF4MswRkXHL+8gescJCFZ49FhGYNE3hkwny9Ga436n1Yaqpp B4EfTZq2QehHkbkKoUUvXgbGfw48CsfR//ZY1rFT/gVBxtWC8wJCZVHuE1ou4dGJ BmQ6jfRUSTikUJb/XLyB4RQG07sczdg4N6NFvp2Tlaxq9GL5pqB1k9JhCE3f2xcn J3AMq5g5gkfus31P44nyQOCo1EIiCSA= -----END CERTIFICATE-----Generated at Sat Oct 11 09:41:57 2025 by rpki-client