$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/3d3e98de-5572-3032-83d9-a5a0462e683e.roa File: 3d3e98de-5572-3032-83d9-a5a0462e683e.roa (raw, json) Hash identifier: hidvC0ZdFdYVGWhA7h//obquAjsYrpHy/Pfg2lhS7B8= Subject key identifier: 09:23:96:F8:CF:A9:27:0E:4F:01:31:96:67:03:08:ED:D7:22:56:46 Certificate issuer: /CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Certificate serial: 010D0C9F4328584AFC1BF7D0DB04B55A1E2B5260 Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/3d3e98de-5572-3032-83d9-a5a0462e683e.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 400329 IP address blocks: 136.175.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f7:d0:db:04:b5:5a:1e:2b:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=f1a29866-0ffc-4863-98ec-517980302dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:9e:d3:7f:bc:06:25:f3:e0:43:58:10:07: 68:53:13:41:29:80:ac:13:19:f4:0d:68:df:0f:77: c0:7c:20:d2:9e:4f:b0:af:a9:0a:94:76:77:09:1d: ff:14:c7:df:94:0f:14:7c:3c:ed:8c:34:38:89:4a: d7:33:61:ba:cd:af:5c:3d:b9:96:ce:5e:66:64:c3: 93:5b:b5:30:ba:93:41:04:c2:bb:74:42:f1:e2:60: b5:32:80:da:aa:52:06:36:87:b7:2f:62:26:fa:d8: 10:cc:c5:f6:f3:75:74:22:09:05:10:2c:ad:1c:7d: 4e:bf:40:60:e7:0c:26:22:a4:6d:03:bb:e3:9c:95: f2:9e:3b:b7:95:27:ba:e3:32:fc:76:2b:9b:4b:95: 78:8e:9d:db:ec:6c:20:23:90:09:87:fd:a9:38:c4: e2:f9:54:1c:01:99:b1:e6:db:f3:8c:b0:86:63:0f: b6:32:ff:01:b7:ce:0f:4e:33:20:be:da:0d:51:51: 98:ff:5f:d7:b2:80:00:2c:f4:9e:24:69:61:e7:22: f2:7e:ae:59:ec:1c:38:c3:03:b6:1d:36:ba:be:f4: 4b:1e:5c:ac:ce:35:2c:dd:dd:07:8d:6b:0f:5c:38: d2:92:35:1b:4f:cc:da:78:2c:ee:41:72:7c:d8:ab: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:23:96:F8:CF:A9:27:0E:4F:01:31:96:67:03:08:ED:D7:22:56:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/3d3e98de-5572-3032-83d9-a5a0462e683e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl X509v3 Authority Key Identifier: keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer sbgp-ipAddrBlock: critical IPv4: 136.175.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:78:05:e0:55:b8:44:ed:d5:da:59:12:4c:97:96:50:7c:46: 03:0d:55:15:d9:00:5c:6c:64:6f:bc:68:5c:a6:68:c3:52:a1: 9a:66:3e:69:f8:ed:9e:1c:ca:4f:1b:a9:c1:cb:28:49:cb:31: c9:26:94:42:6a:b5:44:5a:b0:0d:29:a9:5c:03:db:eb:1b:66: 3b:f8:a6:77:df:cc:3e:3d:c2:2c:48:16:09:2a:72:35:65:0f: 14:a4:36:b8:70:22:45:65:07:fe:bf:85:70:58:30:8f:ec:08: 71:d2:5e:bd:69:f9:b6:db:3f:30:1a:13:a3:6c:c7:68:de:5b: cf:b8:00:d6:9f:fd:80:49:32:59:e6:29:b8:8a:1e:3c:05:3d: 32:44:d5:a8:7a:57:ed:8b:14:a8:59:2a:3d:8f:94:72:92:81: 56:8e:2e:df:75:8b:dd:da:da:cb:e9:c3:e7:fc:4b:fd:bd:5b: d7:d2:ea:92:61:6b:55:2d:bb:81:9c:5e:89:40:90:97:a3:9e: 17:23:83:9c:31:e7:8d:95:39:f3:4a:49:44:4d:1b:ea:06:7e: bd:85:7d:b0:c4:2c:fa:28:f7:6f:44:3c:36:d1:2a:d6:cd:41: 21:11:2c:ed:70:13:e1:39:89:bc:ba:ee:3e:41:97:1c:50:62: b1:a6:b6:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/fQ2wS1Wh4rUmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4MDRkZWMtZmQwMC00MjZmLWJiYTQtMDM4ZDliNzUz ZmM1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjFhMjk4NjYtMGZmYy00ODYzLTk4ZWMtNTE3OTgwMzAyZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruOe03+8BiXz4ENYEAdoUxNBKYCsExn0DWjf D3fAfCDSnk+wr6kKlHZ3CR3/FMfflA8UfDztjDQ4iUrXM2G6za9cPbmWzl5mZMOT W7UwupNBBMK7dELx4mC1MoDaqlIGNoe3L2Im+tgQzMX283V0IgkFECytHH1Ov0Bg 5wwmIqRtA7vjnJXynju3lSe64zL8diubS5V4jp3b7GwgI5AJh/2pOMTi+VQcAZmx 5tvzjLCGYw+2Mv8Bt84PTjMgvtoNUVGY/1/XsoAALPSeJGlh5yLyfq5Z7Bw4wwO2 HTa6vvRLHlyszjUs3d0HjWsPXDjSkjUbT8zaeCzuQXJ82KtMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkjlvjPqScOTwExlmcDCO3XIlZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgw NGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhkOWI3NTNmYzUvM2QzZTk4ZGUtNTU3Mi0z MDMyLTgzZDktYTVhMDQ2MmU2ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTc4MDRkZWMtZmQwMC00MjZmLWJi YTQtMDM4ZDliNzUzZmM1L2E3ODA0ZGVjLWZkMDAtNDI2Zi1iYmE0LTAzOGQ5Yjc1 M2ZjNS5jcmwwHwYDVR0jBBgwFoAUaHUbHIZZZDl7Ob43HRBnZpyHMqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNzgwNGRlYy1mZDAwLTQyNmYtYmJhNC0wMzhk OWI3NTNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK9/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZ4BeBVuETt1dpZEkyXllB8RgMNVRXZAFxsZG+8aFymaMNSoZpmPmn4 7Z4cyk8bqcHLKEnLMckmlEJqtURasA0pqVwD2+sbZjv4pnffzD49wixIFgkqcjVl DxSkNrhwIkVlB/6/hXBYMI/sCHHSXr1p+bbbPzAaE6Nsx2jeW8+4ANaf/YBJMlnm KbiKHjwFPTJE1ah6V+2LFKhZKj2PlHKSgVaOLt91i93a2svpw+f8S/29W9fS6pJh a1Utu4GcXolAkJejnhcjg5wx542VOfNKSURNG+oGfr2FfbDELPoo929EPDbRKtbN QSERLO1wE+E5iby67j5BlxxQYrGmtko= -----END CERTIFICATE-----Generated at Wed Sep 10 02:39:03 2025 by rpki-client