$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4922b4a4-1e67-34bc-8a79-d4664b544e31.roa File: 4922b4a4-1e67-34bc-8a79-d4664b544e31.roa (raw, json) Hash identifier: qmAbATQZNhHKbHNvelAgsSXqowD+3TyP/jgmCbshaik= Subject key identifier: B2:17:1E:9C:AD:2A:78:1C:47:75:34:41:C9:F6:B5:B5:45:1F:5D:6C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3CF568D303840295DB5D00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4922b4a4-1e67-34bc-8a79-d4664b544e31.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 137.83.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:f5:68:d3:03:84:02:95:db:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=70e94435-cd36-47b8-8bbb-572df625977c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:c7:67:f5:58:b5:8b:2a:11:0f:6a:61:14: ae:71:d9:54:7e:b9:16:fe:04:4d:f2:90:0d:54:f8: ab:b0:2d:5d:3a:c8:76:94:e4:24:67:25:92:80:61: 75:ce:c6:3a:7f:aa:63:48:df:c7:00:5d:7c:07:f9: d3:1e:f1:7a:05:db:9d:3c:55:5b:99:63:c3:d6:ee: 53:b1:94:53:84:36:d1:ea:c1:23:57:09:66:6f:16: 2b:a8:9a:c2:f5:ac:5e:59:bd:02:12:2c:90:ff:c5: 77:eb:65:6a:f1:07:fe:ea:01:4a:27:82:a9:9f:66: 5a:d0:01:12:eb:ed:a3:17:78:71:c3:a9:e5:cb:08: a8:90:85:3e:77:88:ae:bd:de:38:fb:3c:e5:71:b2: 1c:bd:62:df:3f:f3:fc:cd:c1:41:49:30:a0:cf:13: 22:98:b9:87:2e:79:b1:18:d8:ae:94:b4:05:85:de: cc:b8:5a:aa:bf:1f:00:9c:35:d6:48:ec:f5:d2:83: df:72:b8:bd:ec:5a:11:5d:f0:2f:21:62:a0:ea:c8: db:0f:ac:c2:93:66:6b:25:a0:90:49:b5:00:8b:9b: d7:77:5f:76:8d:2a:d7:a7:d7:ac:63:fb:09:60:e8: 6e:6e:e5:2f:73:4e:20:a5:b9:ff:4e:98:7a:3c:31: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:17:1E:9C:AD:2A:78:1C:47:75:34:41:C9:F6:B5:B5:45:1F:5D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4922b4a4-1e67-34bc-8a79-d4664b544e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 137.83.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:03:3d:4d:09:35:c1:80:5f:e3:28:04:c0:e9:27:92:c9:91: 42:b1:5d:4e:3f:0b:7f:3d:5f:3e:90:3e:b9:db:56:5f:0f:7a: 0a:64:f8:6a:82:91:af:09:62:72:1e:ca:1d:c2:a4:ca:14:30: 07:75:d8:37:50:92:36:a9:e9:7a:26:e7:cb:90:cd:7c:43:fd: d4:7e:a1:f2:30:72:7f:04:d3:3a:89:b8:8d:83:b2:9e:1e:97: a4:91:08:6b:25:da:9d:3e:ec:d1:20:fe:26:49:d4:42:cf:d4: a8:7c:c5:d2:8b:2b:56:16:ae:45:e1:21:18:71:02:d5:4c:45: 46:d7:cd:0c:19:5b:03:ed:0e:64:30:62:c5:e9:05:e9:4d:74: a2:f0:fd:76:4b:26:83:a3:e6:f5:14:2a:72:9d:e6:c5:bf:ad: 52:82:88:39:fe:10:46:3b:96:a9:9f:75:39:b1:ed:cb:b3:e7: 91:02:c6:59:03:74:bc:ee:00:0f:fc:78:63:49:07:bc:ae:44: a8:3b:8b:24:a7:8f:43:3e:8c:9a:a6:1a:e4:8a:05:53:b6:fb: eb:08:8a:a4:69:f0:5f:ce:ff:7b:fc:0b:c8:2d:c2:29:cf:af: ea:fc:34:81:02:47:fd:2d:96:9c:5e:69:18:74:ba:4a:d1:13: b9:8b:c3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPVo0wOEApXbXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NzBlOTQ0MzUtY2QzNi00N2I4LThiYmItNTcyZGY2MjU5NzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlLHZ/VYtYsqEQ9qYRSucdlUfrkW/gRN8pAN VPirsC1dOsh2lOQkZyWSgGF1zsY6f6pjSN/HAF18B/nTHvF6BdudPFVbmWPD1u5T sZRThDbR6sEjVwlmbxYrqJrC9axeWb0CEiyQ/8V362Vq8Qf+6gFKJ4Kpn2Za0AES 6+2jF3hxw6nlywiokIU+d4iuvd44+zzlcbIcvWLfP/P8zcFBSTCgzxMimLmHLnmx GNiulLQFhd7MuFqqvx8AnDXWSOz10oPfcri97FoRXfAvIWKg6sjbD6zCk2ZrJaCQ SbUAi5vXd192jSrXp9esY/sJYOhubuUvc04gpbn/Tph6PDE30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIXHpytKngcR3U0Qcn2tbVFH11sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDkyMmI0YTQtMWU2Ny0z NGJjLThhNzktZDQ2NjRiNTQ0ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVO6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8DPU0JNcGAX+MoBMDpJ5LJkUKxXU4/C389Xz6QPrnbVl8Pegpk+GqC ka8JYnIeyh3CpMoUMAd12DdQkjap6Xom58uQzXxD/dR+ofIwcn8E0zqJuI2Dsp4e l6SRCGsl2p0+7NEg/iZJ1ELP1Kh8xdKLK1YWrkXhIRhxAtVMRUbXzQwZWwPtDmQw YsXpBelNdKLw/XZLJoOj5vUUKnKd5sW/rVKCiDn+EEY7lqmfdTmx7cuz55ECxlkD dLzuAA/8eGNJB7yuRKg7iySnj0M+jJqmGuSKBVO2++sIiqRp8F/O/3v8C8gtwinP r+r8NIECR/0tlpxeaRh0ukrRE7mLw04= -----END CERTIFICATE-----Generated at Thu Oct 23 08:25:38 2025 by rpki-client