$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa File: 4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa (raw, json) Hash identifier: FXQZYiXO4ooV8YF1Kr8bwL+HuV+OvaJAZBi5RGwWSfU= Subject key identifier: 55:BF:79:2C:71:0E:57:12:31:3C:37:F9:2A:F2:13:CA:A1:C7:36:FB Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Certificate serial: 010D0C9F4328584B2496CF60F6F5D81DB421AB20 Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 14299 IP address blocks: 207.135.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:cf:60:f6:f5:d8:1d:b4:21:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=3ca26312-b1a2-4630-b734-1f139c480beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:11:4a:ae:84:9b:ba:b1:d3:16:ce:fd:eb: fa:a6:78:ee:c8:bc:d9:f8:12:99:db:1c:3a:4f:4f: c8:d0:fd:87:09:e8:53:18:7c:77:7c:7a:9a:0d:31: c5:b4:47:5b:8c:cb:4e:e0:25:5a:56:50:8d:b6:ea: a9:4d:85:6e:8a:74:a0:c7:60:f2:4c:fe:c9:25:49: af:08:93:e1:19:6c:76:48:34:a8:1a:85:23:66:f5: 65:bc:7f:2e:bf:c1:ee:26:00:4a:e1:d5:11:1b:52: a8:47:e4:8d:4f:bd:b5:9e:cd:a7:31:bf:b4:3f:ba: 53:60:c0:46:ba:85:3f:34:a4:21:26:24:b5:d4:88: 13:2a:f0:44:49:84:c3:f4:b9:24:4f:73:02:82:c7: 1b:da:43:7f:96:8c:a1:20:bb:e3:bb:62:ab:f7:46: 3c:7c:e9:9a:ae:11:71:1c:26:aa:7f:91:5c:17:c1: ad:f0:41:ca:40:17:b8:cf:b8:75:aa:ec:5e:32:0d: 67:a0:c6:90:09:2f:e9:17:37:14:53:b3:f9:8c:be: fe:61:c7:a6:ca:df:49:f6:7c:d1:12:04:1e:78:8d: 63:e7:42:18:87:4d:95:7a:5f:c3:4f:dd:40:a7:8d: d6:26:95:aa:58:f5:e7:13:6b:bb:2a:11:69:7d:31: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BF:79:2C:71:0E:57:12:31:3C:37:F9:2A:F2:13:CA:A1:C7:36:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/4428f34d-8403-3ab2-89cc-23ccdbcedae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl X509v3 Authority Key Identifier: keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer sbgp-ipAddrBlock: critical IPv4: 207.135.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:40:90:c1:54:95:aa:5d:9f:2b:68:57:7c:e0:4a:05:cb:00: cd:cb:dc:d0:33:c7:f1:f6:0e:21:bf:8c:42:56:06:73:6b:4b: 94:1d:2a:04:ed:74:6f:09:40:1d:d1:c7:d2:44:b7:1e:44:a2: 92:4a:97:97:b5:08:1c:fb:38:61:f1:bc:11:77:1c:75:34:d9: 2c:cf:8a:0d:6f:cb:67:c2:a8:b5:8d:b4:d0:7d:c6:bc:ff:c1: 36:b0:38:57:1e:77:77:5b:80:88:30:47:a4:ab:e6:55:53:78: 11:45:5a:96:c5:5f:ac:39:b8:52:40:99:ba:be:09:cc:d7:74: 2b:7f:63:cc:4b:f3:53:f9:bd:2d:94:9c:13:4b:dd:54:d4:ee: e1:e8:7e:18:28:67:2b:57:bc:6e:8c:61:86:7e:5a:51:44:9a: a3:93:89:16:22:a1:43:1e:d8:71:a4:db:6e:42:ec:31:70:3b: 0d:16:71:9b:f1:d8:44:c9:95:9b:4d:b5:09:de:b7:c9:ea:8e: c6:54:a1:9d:a8:6d:df:ae:1d:b9:fe:d0:2d:f0:ed:c6:03:7e: 22:cf:6a:f0:be:c9:ce:cb:22:0d:60:42:bb:79:6e:a2:53:02: e8:36:6f:2b:9d:89:a8:4a:04:35:0f:8b:39:f9:16:12:c0:b6: 49:8c:92:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskls9g9vXYHbQhqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll NWU3MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk M2NhMjYzMTItYjFhMi00NjMwLWI3MzQtMWYxMzljNDgwYmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj0RSq6Em7qx0xbO/ev6pnjuyLzZ+BKZ2xw6 T0/I0P2HCehTGHx3fHqaDTHFtEdbjMtO4CVaVlCNtuqpTYVuinSgx2DyTP7JJUmv CJPhGWx2SDSoGoUjZvVlvH8uv8HuJgBK4dURG1KoR+SNT721ns2nMb+0P7pTYMBG uoU/NKQhJiS11IgTKvBESYTD9LkkT3MCgscb2kN/loyhILvju2Kr90Y8fOmarhFx HCaqf5FcF8Gt8EHKQBe4z7h1quxeMg1noMaQCS/pFzcUU7P5jL7+Ycemyt9J9nzR EgQeeI1j50IYh02Vel/DT91Ap43WJpWqWPXnE2u7KhFpfTHHhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFW/eSxxDlcSMTw3+SryE8qhxzb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3 ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvNDQyOGYzNGQtODQwMy0z YWIyLTg5Y2MtMjNjY2RiY2VkYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5 NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5 ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk NTA5OWU1ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz4ecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBAkMFUlapdnytoV3zgSgXLAM3L3NAzx/H2DiG/jEJWBnNrS5QdKgTt dG8JQB3Rx9JEtx5EopJKl5e1CBz7OGHxvBF3HHU02SzPig1vy2fCqLWNtNB9xrz/ wTawOFced3dbgIgwR6Sr5lVTeBFFWpbFX6w5uFJAmbq+CczXdCt/Y8xL81P5vS2U nBNL3VTU7uHofhgoZytXvG6MYYZ+WlFEmqOTiRYioUMe2HGk225C7DFwOw0WcZvx 2ETJlZtNtQnet8nqjsZUoZ2obd+uHbn+0C3w7cYDfiLPavC+yc7LIg1gQrt5bqJT Aug2byudiahKBDUPizn5FhLAtkmMkrk= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:54 2025 by rpki-client