$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0b5837e5-d4f2-3c84-8f0c-5d10bda3a003.roa File: 0b5837e5-d4f2-3c84-8f0c-5d10bda3a003.roa (raw, json) Hash identifier: 49JCFTtBsJ3eBHRR2rWe8hMznLdbOwA6DBlq7tB19Qo= Subject key identifier: 7D:8D:E3:6A:AF:2E:C1:98:60:11:47:0D:2E:54:C7:02:CB:1A:DE:10 Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F4328584B987242EA5890504F7E18DA00 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0b5837e5-d4f2-3c84-8f0c-5d10bda3a003.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 134.202.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:42:ea:58:90:50:4f:7e:18:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=7b968ba5-100e-4967-9a81-7aa0f6d3d111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:f8:32:88:29:cf:b6:97:13:00:aa:ea:b5: b2:61:5e:89:40:c9:25:3a:d6:4a:42:43:20:0c:2e: b7:29:d6:5a:cd:9b:88:c3:7f:f3:2b:41:06:9f:a6: 93:4e:3e:59:9d:db:1b:03:ec:d3:10:d4:43:1d:3a: 9b:17:88:29:01:f0:88:89:be:be:d9:09:08:1a:d7: d6:27:02:6f:0e:83:36:a2:65:4e:56:53:c1:c8:81: 4a:36:bc:df:73:ed:cd:a9:32:ac:2b:24:d4:5e:e9: d0:85:a0:ea:20:de:0a:b0:cd:17:b2:cb:e3:43:32: a7:e7:8a:29:d6:cf:8c:c8:dc:b5:3c:5d:0c:2f:5f: aa:90:e1:12:da:c5:8d:c4:30:13:fe:8e:aa:7b:24: 51:d6:db:a6:45:b0:8a:18:59:42:64:52:98:45:c6: 40:cd:ed:aa:b1:04:7a:49:c0:a6:0f:c1:fb:40:3c: a3:59:42:b6:cf:28:82:c0:88:0a:19:a9:d7:f9:de: ee:fa:23:2b:be:dd:58:c8:92:9c:93:d9:56:aa:14: 02:12:33:7d:3b:57:c9:51:c0:44:e3:52:76:69:84: 2b:32:b4:39:55:1b:4e:9f:51:91:a4:a0:17:06:03: 47:95:da:ce:52:0e:82:60:b4:3e:93:37:20:60:ec: 9b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8D:E3:6A:AF:2E:C1:98:60:11:47:0D:2E:54:C7:02:CB:1A:DE:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/0b5837e5-d4f2-3c84-8f0c-5d10bda3a003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ae:44:a6:fc:90:b3:b6:dc:e5:c5:53:f8:21:cd:e6:b9:d9: 7a:8e:d1:dc:00:14:b5:63:66:9c:71:db:a7:41:56:fa:2f:92: 03:0b:df:3e:84:67:2a:68:e5:f3:37:3d:64:59:41:47:c4:5f: a8:cc:25:d6:aa:38:03:ed:b5:05:3b:80:66:42:3a:39:9e:95: 0d:f4:d3:bd:bd:ad:56:1c:cd:0c:c8:8b:41:fe:da:18:fe:c6: 5d:e5:54:db:2f:c6:b0:cb:a8:fb:d0:2c:37:32:0d:79:06:2d: a6:8d:8b:54:24:fa:4c:25:7a:56:d3:7e:4f:a2:b1:b2:5f:17: 7c:73:56:a5:cf:7b:f4:bb:db:47:65:2d:34:ab:0d:ff:f0:e9: c0:65:09:fc:05:2f:d0:87:5c:9d:0c:dd:6a:41:17:81:34:89: f3:63:77:fd:52:12:af:8b:89:ac:85:97:57:56:eb:6c:3f:28: 5b:ac:fc:97:5d:15:01:91:3c:2a:f1:5e:d2:88:15:ad:96:1e: 96:cf:e4:b3:74:65:9d:a2:22:d4:3c:c9:68:09:9c:08:8d:e6: c7:24:ba:43:d7:43:f8:62:66:e3:d3:93:53:a8:57:2a:59:38: 54:8c:4b:62:82:8d:b7:97:21:f8:5f:a4:cf:5c:70:8a:b4:b4: e1:bd:29:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckLqWJBQT34Y2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk N2I5NjhiYTUtMTAwZS00OTY3LTlhODEtN2FhMGY2ZDNkMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyf4Mogpz7aXEwCq6rWyYV6JQMklOtZKQkMg DC63KdZazZuIw3/zK0EGn6aTTj5ZndsbA+zTENRDHTqbF4gpAfCIib6+2QkIGtfW JwJvDoM2omVOVlPByIFKNrzfc+3NqTKsKyTUXunQhaDqIN4KsM0XssvjQzKn54op 1s+MyNy1PF0ML1+qkOES2sWNxDAT/o6qeyRR1tumRbCKGFlCZFKYRcZAze2qsQR6 ScCmD8H7QDyjWUK2zyiCwIgKGanX+d7u+iMrvt1YyJKck9lWqhQCEjN9O1fJUcBE 41J2aYQrMrQ5VRtOn1GRpKAXBgNHldrOUg6CYLQ+kzcgYOybuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2N42qvLsGYYBFHDS5UxwLLGt4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvMGI1ODM3ZTUtZDRmMi0z Yzg0LThmMGMtNWQxMGJkYTNhMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGquRKb8kLO23OXFU/ghzea52XqO0dwAFLVjZpxx26dBVvovkgML3z6E Zypo5fM3PWRZQUfEX6jMJdaqOAPttQU7gGZCOjmelQ300729rVYczQzIi0H+2hj+ xl3lVNsvxrDLqPvQLDcyDXkGLaaNi1Qk+kwlelbTfk+isbJfF3xzVqXPe/S720dl LTSrDf/w6cBlCfwFL9CHXJ0M3WpBF4E0ifNjd/1SEq+LiayFl1dW62w/KFus/Jdd FQGRPCrxXtKIFa2WHpbP5LN0ZZ2iItQ8yWgJnAiN5sckukPXQ/hiZuPTk1OoVypZ OFSMS2KCjbeXIfhfpM9ccIq0tOG9KRk= -----END CERTIFICATE-----Generated at Fri Oct 24 08:22:09 2025 by rpki-client