$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa File: e969eb6b-84bd-33ed-adf5-6a299076b70f.roa (raw, json) Hash identifier: EnbMTKsSGT3mqItBjWoiIXnrUtJQ1h9oO/2VSw5Hy9o= Subject key identifier: 5F:BC:42:E3:4D:DC:14:80:86:6F:C4:83:B5:C8:79:C4:5B:AD:A9:7C Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584BA93262FCBB7BE3995F84DE68 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 32870 IP address blocks: 136.147.164.0/22 maxlen: 24 136.147.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:62:fc:bb:7b:e3:99:5f:84:de:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=84b8a366-a918-4bff-abef-ff4aadc86e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:92:13:a4:ca:8c:0d:3c:34:1f:ba:25:13: e2:5b:aa:24:44:1a:37:57:ba:f0:f2:d6:35:37:a8: ed:1b:2c:b7:e7:09:ae:33:0e:3c:44:76:83:94:f9: 1b:6d:13:92:ec:09:2a:1c:35:dd:b8:65:5b:cf:7e: 59:dd:fd:32:ea:2d:93:04:6a:5a:2f:3c:e3:0e:ce: d3:d1:44:89:5e:ce:65:6b:49:51:c9:1e:27:47:36: 46:77:0a:92:83:dc:e9:04:77:e9:67:52:a6:b1:8c: 12:4c:2e:6a:d3:71:35:cd:39:a5:8d:32:86:28:0c: 6e:0d:3a:79:fb:52:56:0a:3d:c8:01:31:8b:81:8c: 2d:0e:be:38:a3:b7:94:2a:25:fc:83:55:30:2c:db: d1:2d:7f:34:bd:e3:27:29:09:d0:07:2c:59:0b:3e: aa:1e:78:3f:ec:dd:8a:87:82:a0:be:6b:11:0a:35: 14:1d:0d:6b:a9:bf:30:6e:d2:cb:6d:7b:6d:ec:7d: 64:a7:3e:72:a4:e2:a3:c3:02:9f:93:21:28:bc:d0: 0f:d5:6e:17:3e:2a:2a:13:0f:ac:4c:77:30:ca:22: a8:88:f3:f1:73:66:9f:b8:0c:e4:0b:15:06:fb:e1: 67:67:1d:95:55:a3:24:9b:7d:8b:4e:84:c1:f0:81: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BC:42:E3:4D:DC:14:80:86:6F:C4:83:B5:C8:79:C4:5B:AD:A9:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.164.0/22 136.147.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:f3:62:60:a0:66:29:78:11:b5:73:43:da:17:d5:5f:3b:d5: 61:c2:74:5c:4c:52:2c:c0:7d:0e:3a:3f:15:06:64:ff:dd:db: 3c:85:ca:8f:81:62:36:e0:5a:0e:60:7b:72:04:76:02:2e:fb: e9:28:de:25:96:55:ad:a1:5d:b0:e4:00:c5:33:d1:52:5b:8a: 41:17:b2:09:a4:3f:bc:6e:c4:ba:1a:31:80:98:ca:cc:d2:43: f8:a9:33:18:26:cd:fc:12:f0:3e:0f:03:a0:05:a0:63:17:e7: 58:4e:b9:fd:6b:5c:59:c8:d1:27:08:15:fa:55:ba:86:c8:7c: ef:46:19:36:d8:3b:b5:b4:83:c2:63:49:65:e7:af:5b:d8:fe: 0e:b9:50:8f:87:cf:4d:c2:52:0d:e8:34:9e:82:9b:ec:83:3a: 54:ea:71:7c:5c:e2:53:71:04:9f:c3:d1:75:b9:54:b5:ea:98: 4d:1c:74:a3:29:75:55:67:88:d2:0b:79:b2:5e:e6:9f:12:e9: 58:55:68:61:a4:92:f4:f2:9c:7f:b5:59:4e:6a:cc:4b:fc:ab: 32:9d:1e:d2:cf:21:2c:2a:e9:14:12:81:1d:f5:5c:76:c5:0f: 12:f7:92:45:ae:ad:f4:72:6c:24:10:fc:5a:1e:61:58:fa:9d: f8:f2:41:30 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEupMmL8u3vjmV+E3mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ODRiOGEzNjYtYTkxOC00YmZmLWFiZWYtZmY0YWFkYzg2ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oWSE6TKjA08NB+6JRPiW6okRBo3V7rw8tY1 N6jtGyy35wmuMw48RHaDlPkbbROS7AkqHDXduGVbz35Z3f0y6i2TBGpaLzzjDs7T 0USJXs5la0lRyR4nRzZGdwqSg9zpBHfpZ1KmsYwSTC5q03E1zTmljTKGKAxuDTp5 +1JWCj3IATGLgYwtDr44o7eUKiX8g1UwLNvRLX80veMnKQnQByxZCz6qHng/7N2K h4KgvmsRCjUUHQ1rqb8wbtLLbXtt7H1kpz5ypOKjwwKfkyEovNAP1W4XPioqEw+s THcwyiKoiPPxc2afuAzkCxUG++FnZx2VVaMkm32LToTB8IFw1wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFF+8QuNN3BSAhm/Eg7XIecRbral8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZTk2OWViNmItODRiZC0z M2VkLWFkZjUtNmEyOTkwNzZiNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiJOkAwQB iJOuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMbzYmCgZil4EbVzQ9oX1V871WHCdFxMUizAfQ46PxUGZP/d 2zyFyo+BYjbgWg5ge3IEdgIu++ko3iWWVa2hXbDkAMUz0VJbikEXsgmkP7xuxLoa MYCYyszSQ/ipMxgmzfwS8D4PA6AFoGMX51hOuf1rXFnI0ScIFfpVuobIfO9GGTbY O7W0g8JjSWXnr1vY/g65UI+Hz03CUg3oNJ6Cm+yDOlTqcXxc4lNxBJ/D0XW5VLXq mE0cdKMpdVVniNILebJe5p8S6VhVaGGkkvTynH+1WU5qzEv8qzKdHtLPISwq6RQS gR31XHbFDxL3kkWurfRybCQQ/FoeYVj6nfjyQTA= -----END CERTIFICATE-----Generated at Wed Nov 5 03:59:27 2025 by rpki-client