$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/dbdaa320-d291-355e-a60d-c02fe99743a2.roa File: dbdaa320-d291-355e-a60d-c02fe99743a2.roa (raw, json) Hash identifier: TTW/5+trDit6LiDqv8fRbeSGSqZYX5I5HGwAa5YOIEc= Subject key identifier: 5C:CD:F1:34:C2:4F:C1:B3:3F:70:50:75:9F:2B:D5:2C:9A:3D:CE:38 Certificate issuer: /CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Certificate serial: 010D0C9F4328584BBB759331E467D9B9901A1600 Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/dbdaa320-d291-355e-a60d-c02fe99743a2.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 7106 IP address blocks: 209.143.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:93:31:e4:67:d9:b9:90:1a:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=3b3f4970-12c8-4197-a9e5-7ce1f768e09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:bd:a2:b2:65:f1:a3:7b:fa:8c:d7:a5:05: a4:5d:9d:ad:1f:8c:85:97:2b:3d:94:5f:1f:2f:02: 73:07:66:1c:5c:cb:2f:2c:fc:8e:a1:f9:1b:19:40: 84:e9:db:1c:1f:3e:f6:65:84:81:e0:97:e0:8f:d7: 21:05:f3:2b:2d:fb:e6:7b:87:26:91:89:cc:d7:70: d5:2f:b5:b2:77:3e:79:ac:9a:1d:bb:fc:a9:72:69: 03:06:36:fd:6e:ff:c8:03:fa:10:77:8b:a0:68:70: a1:a2:29:d3:a5:08:7a:ef:d9:03:bb:f8:5c:9c:97: 3e:29:14:a9:5e:5b:75:0e:40:0c:7a:b8:2c:76:89: 92:f7:c2:7f:4e:c9:c2:71:a9:92:3b:ac:be:00:be: 3f:be:a1:cb:00:94:86:b7:c5:6f:3d:a0:fa:e3:8f: 49:47:17:bb:3d:7f:aa:36:df:79:ad:3e:6b:b3:92: 99:6b:98:0a:2a:b6:4f:50:e0:d3:5f:1d:bb:81:a4: f1:86:90:b3:5b:a1:18:3a:98:66:32:a6:48:74:c7: 73:20:b8:44:50:6a:0b:91:e3:0d:09:54:08:08:fb: 80:c6:64:f7:84:df:dc:3f:f5:e3:96:5c:f5:d7:2a: c6:c1:30:01:c6:8b:9d:64:53:25:bb:71:76:6b:a0: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CD:F1:34:C2:4F:C1:B3:3F:70:50:75:9F:2B:D5:2C:9A:3D:CE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/dbdaa320-d291-355e-a60d-c02fe99743a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl X509v3 Authority Key Identifier: keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer sbgp-ipAddrBlock: critical IPv4: 209.143.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7c:d1:cd:06:ec:56:47:0f:dc:33:be:1d:0d:de:9d:c7:50: d6:91:e9:53:76:25:8f:25:b3:db:19:24:e1:a3:47:88:d8:c9: 0a:6a:6b:d6:20:52:0b:5d:78:0f:77:2f:15:99:22:01:ba:87: dc:96:84:2b:c0:8e:71:74:2b:3d:5c:97:b4:bb:3b:a7:48:66: 07:a1:7d:a1:73:f0:20:85:c6:f1:e3:ab:10:13:d1:ee:4e:e8: 3b:59:ef:39:c3:9d:1a:fa:f3:7a:ec:c5:1b:ef:ac:0c:cc:84: 15:69:61:0d:80:22:09:74:f0:6b:94:87:10:51:d7:e9:d6:41: f0:e6:90:3e:5f:b5:7f:f4:50:3d:e5:d3:15:49:31:31:90:e9: 1f:5f:c1:24:74:9a:d5:54:e9:c4:0b:39:4e:e2:2d:94:3f:63: 5e:fe:d5:e8:a2:de:6b:4c:86:09:fc:30:9e:ed:25:37:12:72: f1:ee:35:96:31:1c:2b:ce:fe:7d:f0:50:1b:9d:27:8b:6a:0f: 53:c5:f8:09:f2:d7:2b:9c:69:c8:25:7b:cc:cf:32:e7:a4:88: d6:20:6e:0c:8b:98:04:ee:86:1f:98:b7:4e:68:3c:cd:a2:c0: 78:6f:b8:f0:b0:50:27:e8:2c:de:b5:0b:51:a1:be:b8:fa:17: e0:e3:13:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZMx5GfZuZAaFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3YWUxMWQtNjI5Yy00NDQzLWJjMzctMmMzZWViZDA5 NDUzMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk M2IzZjQ5NzAtMTJjOC00MTk3LWE5ZTUtN2NlMWY3NjhlMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3q9orJl8aN7+ozXpQWkXZ2tH4yFlys9lF8f LwJzB2YcXMsvLPyOofkbGUCE6dscHz72ZYSB4Jfgj9chBfMrLfvme4cmkYnM13DV L7Wydz55rJodu/ypcmkDBjb9bv/IA/oQd4ugaHChoinTpQh679kDu/hcnJc+KRSp Xlt1DkAMergsdomS98J/TsnCcamSO6y+AL4/vqHLAJSGt8VvPaD6449JRxe7PX+q Nt95rT5rs5KZa5gKKrZPUODTXx27gaTxhpCzW6EYOphmMqZIdMdzILhEUGoLkeMN CVQICPuAxmT3hN/cP/Xjllz11yrGwTABxoudZFMlu3F2a6Ar0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzN8TTCT8GzP3BQdZ8r1SyaPc44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMzdh ZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJkMDk0NTMvZGJkYWEzMjAtZDI5MS0z NTVlLWE2MGQtYzAyZmU5OTc0M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjM3YWUxMWQtNjI5Yy00NDQzLWJj MzctMmMzZWViZDA5NDUzL2YzN2FlMTFkLTYyOWMtNDQ0My1iYzM3LTJjM2VlYmQw OTQ1My5jcmwwHwYDVR0jBBgwFoAUVzrzYfnlwTsn5iE24vcdpWrauOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mMzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNl ZWJkMDk0NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0Y8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD180c0G7FZHD9wzvh0N3p3HUNaR6VN2JY8ls9sZJOGjR4jYyQpqa9Yg UgtdeA93LxWZIgG6h9yWhCvAjnF0Kz1cl7S7O6dIZgehfaFz8CCFxvHjqxAT0e5O 6DtZ7znDnRr683rsxRvvrAzMhBVpYQ2AIgl08GuUhxBR1+nWQfDmkD5ftX/0UD3l 0xVJMTGQ6R9fwSR0mtVU6cQLOU7iLZQ/Y17+1eii3mtMhgn8MJ7tJTcScvHuNZYx HCvO/n3wUBudJ4tqD1PF+Any1yucacgle8zPMuekiNYgbgyLmATuhh+Yt05oPM2i wHhvuPCwUCfoLN61C1Ghvrj6F+DjE7U= -----END CERTIFICATE-----Generated at Mon Nov 3 08:55:50 2025 by rpki-client