$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa File: 177f1d70-475f-3d07-b1ef-c54a858042bc.roa (raw, json) Hash identifier: zuNZLSXJTFjz6egOXhXPfZh79XCrOXA0a2zXPQMZw/o= Subject key identifier: 9D:56:36:67:73:74:FA:0C:D8:6B:D6:9D:D7:79:FF:47:D9:53:74:81 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F4328584B160F589662C6F037AF777700 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa Signing time: Thu 04 Sep 2025 20:04:51 +0000 ROA not before: Thu 04 Sep 2025 20:04:51 +0000 ROA not after: Wed 03 Dec 2025 21:04:51 +0000 asID: 12213 IP address blocks: 149.137.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:0f:58:96:62:c6:f0:37:af:77:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Sep 4 20:04:51 2025 GMT Not After : Dec 3 21:04:51 2025 GMT Subject: CN=870c299e-36db-47e7-91a3-e592ab219edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:97:e4:42:f4:83:d9:a7:63:54:f2:b6:a5: bd:f5:db:3e:00:3f:58:06:ba:a5:9b:4b:a5:31:0c: cb:b6:af:43:8d:f8:e4:65:d1:12:27:6a:05:53:61: 41:63:4c:00:14:e6:d6:eb:a5:b2:51:50:68:35:78: 91:5e:7a:4c:0e:1a:6c:a0:c8:24:c0:b4:33:c7:21: 93:d5:8b:6b:be:59:d2:79:04:54:32:7c:df:ca:cf: 43:f6:4c:bf:77:c6:77:5f:8f:65:4f:8f:96:22:e0: b0:b8:e3:3f:b6:91:24:41:e7:b0:d1:bb:61:ef:36: e9:6f:82:c8:e5:80:86:e6:5d:35:d7:b0:06:10:40: a8:1c:e7:2c:1b:33:6e:a9:7d:6b:b5:3a:13:a2:51: 5f:8c:8f:24:11:dc:6b:c9:59:20:12:ee:9e:62:31: 97:51:38:4d:2a:95:41:5e:27:3c:00:e3:f1:b1:b3: 69:9f:91:db:0f:1d:e9:4f:d4:db:2b:88:17:22:7c: 13:a8:83:be:62:22:5d:53:20:b7:6e:c1:a4:26:95: fa:d6:85:c4:cc:0f:22:ee:43:e1:b1:c9:14:b0:bb: e0:f7:db:d0:1e:15:d6:6a:f9:7b:53:17:5e:d4:61: 87:f7:3b:43:ec:27:b0:ed:2e:c0:80:37:34:0e:a0: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:56:36:67:73:74:FA:0C:D8:6B:D6:9D:D7:79:FF:47:D9:53:74:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/177f1d70-475f-3d07-b1ef-c54a858042bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv4: 149.137.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:07:05:91:e2:f9:09:58:8a:ab:38:75:13:17:30:c0:0d:16: c9:7b:1d:fc:15:a2:a9:76:49:0a:df:50:bb:0a:2f:d4:b0:69: 10:c6:18:8e:f3:ca:29:d3:24:c8:a0:c3:fe:5c:d9:16:a9:d2: be:8e:17:35:69:e7:aa:6f:80:a9:9e:b7:72:48:99:ba:fe:5a: a3:30:1a:2b:d8:b9:8a:8b:c6:97:37:3d:49:22:69:cd:d8:c4: b9:a9:e9:97:36:a1:a9:95:82:c0:92:5f:99:f7:77:e3:a0:80: 14:e7:bc:9e:6f:53:92:7e:72:6b:27:37:71:04:4f:42:18:09: 6e:6f:fa:aa:fe:7b:06:3a:37:e7:e2:33:ca:d8:47:c4:41:97: 05:45:18:99:ca:4b:07:38:e5:50:35:83:5c:b9:65:de:a0:03: af:ea:04:38:8c:ae:6b:67:3d:48:da:6f:1b:09:1f:32:1e:a1: a9:9f:6c:1a:a2:31:71:c0:1e:f5:9d:ed:8c:7a:31:b3:79:46: 0f:09:26:cb:d4:0c:d8:7f:1d:93:d8:f5:46:75:87:b4:97:08: c5:c8:3d:cc:fa:1e:94:98:42:2f:23:08:08:aa:00:08:73:96: c7:3c:5a:fd:2e:d9:f1:12:50:a3:e7:9d:30:11:97:7d:77:12: d7:03:f0:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWD1iWYsbwN693dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDkwNDIwMDQ1MVoXDTI1MTIwMzIxMDQ1MVowLzEtMCsGA1UEAxMk ODcwYzI5OWUtMzZkYi00N2U3LTkxYTMtZTU5MmFiMjE5ZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL6X5EL0g9mnY1TytqW99ds+AD9YBrqlm0ul MQzLtq9DjfjkZdESJ2oFU2FBY0wAFObW66WyUVBoNXiRXnpMDhpsoMgkwLQzxyGT 1YtrvlnSeQRUMnzfys9D9ky/d8Z3X49lT4+WIuCwuOM/tpEkQeew0bth7zbpb4LI 5YCG5l0117AGEECoHOcsGzNuqX1rtToTolFfjI8kEdxryVkgEu6eYjGXUThNKpVB Xic8AOPxsbNpn5HbDx3pT9TbK4gXInwTqIO+YiJdUyC3bsGkJpX61oXEzA8i7kPh sckUsLvg99vQHhXWavl7Uxde1GGH9ztD7Cew7S7AgDc0DqA/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1WNmdzdPoM2GvWndd5/0fZU3SBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMTc3ZjFkNzAtNDc1Zi0z ZDA3LWIxZWYtYzU0YTg1ODA0MmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElYnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcHBZHi+QlYiqs4dRMXMMANFsl7HfwVoql2SQrfULsKL9SwaRDGGI7z yinTJMigw/5c2Rap0r6OFzVp56pvgKmet3JImbr+WqMwGivYuYqLxpc3PUkiac3Y xLmp6Zc2oamVgsCSX5n3d+OggBTnvJ5vU5J+cmsnN3EET0IYCW5v+qr+ewY6N+fi M8rYR8RBlwVFGJnKSwc45VA1g1y5Zd6gA6/qBDiMrmtnPUjabxsJHzIeoamfbBqi MXHAHvWd7Yx6MbN5Rg8JJsvUDNh/HZPY9UZ1h7SXCMXIPcz6HpSYQi8jCAiqAAhz lsc8Wv0u2fESUKPnnTARl313EtcD8KQ= -----END CERTIFICATE-----Generated at Sun Oct 26 16:49:58 2025 by rpki-client