$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa File: 13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa (raw, json) Hash identifier: zAIptfiyPaLUYmM/uihqilCtXfNMKABFSFgsq5SY+3w= Subject key identifier: 59:4C:5B:1F:63:3B:F9:41:80:A4:EE:C6:28:B4:65:4E:F8:0C:9E:1D Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07BEA8C969932257D2FB00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 137.220.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:be:a8:c9:69:93:22:57:d2:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=ade02dc6-10bd-49a7-bfd6-b9e4ea65e4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:37:ad:c1:17:e5:aa:12:db:5d:a0:52:5e: 36:49:94:45:32:04:35:7a:c1:e4:e4:ce:46:fc:ca: 51:aa:7a:30:e6:4d:36:92:83:f3:0b:4e:c6:f7:a2: 46:1b:95:d8:6b:eb:50:bb:3c:dc:0c:f8:03:e6:22: 3e:9c:3c:e6:1f:5c:10:db:b6:80:3d:c8:e2:d6:54: cd:8a:ec:c4:08:6c:e2:6f:37:bc:d8:2c:1e:6a:8a: c1:bb:24:23:6c:f3:5d:ab:29:ba:4a:f8:63:27:af: 94:f1:7c:37:eb:4f:bb:38:9e:8b:ab:9e:c9:fb:3a: 99:e4:6a:3b:2b:90:b6:7a:8e:5e:cc:be:9a:ca:d9: 5b:8a:54:79:da:53:df:a0:77:44:7f:26:c3:20:cb: 2b:0f:ff:d3:06:4e:1c:34:27:b0:19:63:26:bf:07: 14:ee:c9:cb:27:8e:1d:b5:21:80:c3:0f:49:0b:5a: d4:29:40:3a:03:78:43:47:bc:db:a9:cd:97:ed:ec: c6:20:59:f3:4b:cd:49:03:4d:72:24:83:58:b6:e7: c7:33:fd:a7:68:a1:0c:d1:7e:8c:fd:9c:05:2b:dc: a8:05:eb:74:de:17:30:97:63:66:6a:cb:44:3a:b0: b4:87:e6:1f:27:4c:dd:ff:d7:9e:c1:1a:9d:cf:7f: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4C:5B:1F:63:3B:F9:41:80:A4:EE:C6:28:B4:65:4E:F8:0C:9E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 137.220.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3e:ff:fc:27:45:cc:73:57:69:a5:e4:ce:4f:cc:8a:48:c8: be:91:0c:1f:ba:a7:0e:e5:78:16:f5:6e:81:2b:e1:5e:6e:7c: 4f:ff:14:18:00:7f:55:21:27:3e:62:03:3c:a5:d4:41:2d:3e: 50:ff:42:21:87:ba:83:fa:b9:4f:16:03:e7:a3:21:a3:e8:b3: f3:fd:ee:dc:a8:fe:63:c9:81:08:7d:f3:e8:0a:ad:eb:23:e8: 75:25:ea:1d:51:2d:22:a1:ad:3f:61:59:ae:ad:3d:26:c5:1c: ca:f4:15:cf:f7:73:fb:5a:0d:08:88:fd:54:7d:4b:d5:52:81: 5e:d0:3a:eb:d0:ea:6b:75:75:02:ce:b7:50:46:ca:e6:c8:8b: bf:08:b0:73:26:66:47:82:9c:a0:1e:41:57:70:cf:b5:6d:15: ef:4b:5a:40:59:5f:9b:88:f1:5e:6d:ad:12:ea:95:e3:79:7b: 23:d1:1e:9a:13:0e:7b:1d:c4:d7:73:dc:38:80:ca:51:e1:e9: ad:55:7a:d4:18:cc:ce:ab:93:f6:05:67:aa:3c:6a:2d:96:0d: b7:74:29:01:72:35:44:4f:a6:7c:8c:75:ab:6d:bd:16:6e:c8: 76:db:3e:26:ee:47:8e:62:1a:ff:55:ab:e2:48:8f:76:98:ae: 08:59:cd:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB76oyWmTIlfS+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YWRlMDJkYzYtMTBiZC00OWE3LWJmZDYtYjllNGVhNjVlNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtQ3rcEX5aoS212gUl42SZRFMgQ1esHk5M5G /MpRqnow5k02koPzC07G96JGG5XYa+tQuzzcDPgD5iI+nDzmH1wQ27aAPcji1lTN iuzECGzibze82CweaorBuyQjbPNdqym6SvhjJ6+U8Xw360+7OJ6Lq57J+zqZ5Go7 K5C2eo5ezL6aytlbilR52lPfoHdEfybDIMsrD//TBk4cNCewGWMmvwcU7snLJ44d tSGAww9JC1rUKUA6A3hDR7zbqc2X7ezGIFnzS81JA01yJINYtufHM/2naKEM0X6M /ZwFK9yoBet03hcwl2NmastEOrC0h+YfJ0zd/9eewRqdz3/VTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlMWx9jO/lBgKTuxii0ZU74DJ4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMTNiOWRjNjQtZmNkNi0z MTY4LWJiOGYtNWFhMjgyNmQxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAidwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU+//wnRcxzV2ml5M5PzIpIyL6RDB+6pw7leBb1boEr4V5ufE//FBgA f1UhJz5iAzyl1EEtPlD/QiGHuoP6uU8WA+ejIaPos/P97tyo/mPJgQh98+gKresj 6HUl6h1RLSKhrT9hWa6tPSbFHMr0Fc/3c/taDQiI/VR9S9VSgV7QOuvQ6mt1dQLO t1BGyubIi78IsHMmZkeCnKAeQVdwz7VtFe9LWkBZX5uI8V5trRLqleN5eyPRHpoT DnsdxNdz3DiAylHh6a1VetQYzM6rk/YFZ6o8ai2WDbd0KQFyNURPpnyMdattvRZu yHbbPibuR45iGv9Vq+JIj3aYrghZzeE= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:05 2025 by rpki-client