$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/3f441421-d975-3868-bacd-9228067fffb0.roa File: 3f441421-d975-3868-bacd-9228067fffb0.roa (raw, json) Hash identifier: 8rC8Lxf3pvCQvUubdOo6EkGX9rVgoFiwKrQ4UxE5bKM= Subject key identifier: 72:D2:3D:9E:5B:53:14:A2:3B:1B:47:2A:70:0B:87:BC:12:90:8D:AE Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584B13D6BB5499BBDCD00FA60680 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/3f441421-d975-3868-bacd-9228067fffb0.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 23470 IP address blocks: 185.150.189.0/24 maxlen: 24 185.150.190.0/24 maxlen: 24 185.150.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bb:54:99:bb:dc:d0:0f:a6:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=bc8e02e1-d585-4c84-be1a-4033a6a5b95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:77:6e:f9:25:87:4e:e7:c2:5e:c5:f9:2b: e5:26:b6:44:0e:75:39:ac:c4:e4:e4:43:27:13:bd: 49:bb:50:a7:fa:e3:fc:bc:76:b5:e1:50:0a:92:e3: c0:ea:c7:47:78:50:b5:a6:03:d1:30:84:0c:9f:6e: af:c2:61:7c:3c:da:bd:d8:d7:0f:1d:a0:08:92:f6: 3c:67:7a:90:b0:b0:f3:ed:a4:dc:0e:71:a8:34:5a: 7c:0a:de:ca:ec:47:3d:88:29:3e:be:95:58:1a:28: a1:64:52:3e:fa:53:8c:b8:e4:88:af:53:e8:e1:7c: 03:0d:7c:2d:de:f5:70:28:43:2c:87:83:7f:e9:c2: 9d:03:64:e2:5e:5b:d7:d8:46:56:78:40:b1:82:c8: 13:e3:2d:1a:e5:78:f9:c5:c8:93:08:b0:c8:a1:16: 54:31:d0:7e:73:16:ac:c9:1e:cc:02:d3:e1:65:a4: 2e:06:53:ff:c9:cc:84:6a:42:a8:cd:e5:f6:d2:5d: 76:8b:83:d9:9b:f4:bb:f0:eb:ff:8f:bd:4c:b1:e4: 0a:4a:ab:62:e7:cd:5d:4c:75:10:9e:e4:9b:6f:32: 86:0d:22:e4:ed:c0:d5:ac:34:da:e2:93:3b:2b:ef: 7b:b8:4a:a1:d0:00:05:c2:ed:4c:12:d8:82:b3:d5: b4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D2:3D:9E:5B:53:14:A2:3B:1B:47:2A:70:0B:87:BC:12:90:8D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/3f441421-d975-3868-bacd-9228067fffb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 185.150.189.0-185.150.191.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3f:84:f9:4f:1d:1d:40:a8:d6:f0:1d:fd:9a:e0:ad:b9:94: 1a:c2:97:e0:37:08:29:a5:64:d8:0f:c7:e6:91:08:0b:84:aa: 39:00:8e:99:35:a7:a1:95:7e:a5:20:9e:0f:37:32:8e:00:83: 58:f9:a2:51:77:8c:e4:9a:11:2e:3c:2e:87:dd:e7:e1:43:e9: 9c:08:c6:8b:0e:bd:61:62:1e:1d:17:4d:6b:be:98:2b:4c:e8: f3:87:fd:b3:58:03:2b:84:78:e9:c8:aa:a3:cf:09:bb:16:7e: 95:1c:c9:d3:0a:59:9e:e2:70:28:67:a6:7b:60:d6:7f:a2:64: 58:9c:a9:f0:68:bf:ae:4e:9d:36:7c:af:03:1d:ad:eb:47:e9: 38:b3:14:9a:f9:78:6b:60:23:65:1a:99:33:b1:0a:2b:4b:68: 79:48:d3:bb:02:2d:01:1a:95:8a:6c:f5:e0:d0:80:c4:12:1a: d2:63:50:bc:9a:2a:0d:aa:22:b1:bb:3b:7d:b4:49:31:fa:c9: 90:d5:44:fc:12:2a:61:f2:b2:f4:af:e9:21:bb:03:9b:48:59: 3c:60:05:33:10:6f:10:42:9a:71:10:20:c0:af:24:96:1a:11: 97:11:e5:1c:64:38:0c:92:67:fe:d6:18:13:46:7d:29:8c:8c: 8c:8f:e5:ff -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEsT1rtUmbvc0A+mBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YmM4ZTAyZTEtZDU4NS00Yzg0LWJlMWEtNDAzM2E2YTViOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1R3bvklh07nwl7F+SvlJrZEDnU5rMTk5EMn E71Ju1Cn+uP8vHa14VAKkuPA6sdHeFC1pgPRMIQMn26vwmF8PNq92NcPHaAIkvY8 Z3qQsLDz7aTcDnGoNFp8Ct7K7Ec9iCk+vpVYGiihZFI++lOMuOSIr1Po4XwDDXwt 3vVwKEMsh4N/6cKdA2TiXlvX2EZWeECxgsgT4y0a5Xj5xciTCLDIoRZUMdB+cxas yR7MAtPhZaQuBlP/ycyEakKozeX20l12i4PZm/S78Ov/j71MseQKSqti581dTHUQ nuSbbzKGDSLk7cDVrDTa4pM7K+97uEqh0AAFwu1MEtiCs9W0mQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHLSPZ5bUxSiOxtHKnALh7wSkI2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvM2Y0NDE0MjEtZDk3NS0z ODY4LWJhY2QtOTIyODA2N2ZmZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5lr0D BAa5loAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPD+E+U8dHUCo1vAd/ZrgrbmUGsKX4DcIKaVk2A/H5pEI C4SqOQCOmTWnoZV+pSCeDzcyjgCDWPmiUXeM5JoRLjwuh93n4UPpnAjGiw69YWIe HRdNa76YK0zo84f9s1gDK4R46ciqo88JuxZ+lRzJ0wpZnuJwKGeme2DWf6JkWJyp 8Gi/rk6dNnyvAx2t60fpOLMUmvl4a2AjZRqZM7EKK0toeUjTuwItARqVimz14NCA xBIa0mNQvJoqDaoisbs7fbRJMfrJkNVE/BIqYfKy9K/pIbsDm0hZPGAFMxBvEEKa cRAgwK8klhoRlxHlHGQ4DJJn/tYYE0Z9KYyMjI/l/w== -----END CERTIFICATE-----Generated at Thu Oct 9 01:24:06 2025 by rpki-client