$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/823652a8-3986-3edc-b010-29419cbf2da7.roa File: 823652a8-3986-3edc-b010-29419cbf2da7.roa (raw, json) Hash identifier: YbGk+/+NLY9k12/cJMMOdp7UnrQZ40+NELqOEw92xzo= Subject key identifier: BD:5E:EB:19:7F:25:65:18:95:AD:7C:F7:AE:01:C5:E5:CC:5A:A5:86 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584BB45D4539A46F07D65AA6D600 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/823652a8-3986-3edc-b010-29419cbf2da7.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 26229 IP address blocks: 162.138.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:45:39:a4:6f:07:d6:5a:a6:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=dca10499-a1ce-406b-a272-f908ec48778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:55:0d:e5:ce:b2:bd:e5:bf:56:15:59:1f: 70:01:b6:6a:eb:9b:b6:83:f1:7d:a8:55:6a:16:96: 55:e3:af:c3:cb:4e:76:29:aa:80:ef:41:e6:87:f9: 84:f9:60:5b:fa:10:aa:78:9c:14:45:d4:df:d4:66: a0:b9:a0:62:ed:a6:f0:7e:e6:f4:67:ba:d5:00:66: 83:3f:12:4f:25:7c:2c:68:b7:d9:49:a7:65:36:61: 4b:9f:c5:95:d3:c5:de:fd:27:f9:91:b0:f0:7c:47: bd:f1:1d:ac:39:03:cb:8a:d8:65:14:85:50:02:a0: 4c:d6:37:0e:59:5a:21:c8:fe:2a:83:ea:38:56:99: c5:fa:5c:a8:d9:97:e3:d9:19:81:ea:29:7a:b8:d2: 58:b3:81:ff:45:a1:1e:11:c8:60:d4:a4:b9:c6:67: 19:06:49:e7:35:ca:8e:15:22:e6:15:78:d8:69:7f: a9:ce:c2:bd:2c:53:49:0e:46:1b:54:7c:61:d8:ba: 0b:47:57:d9:1a:fc:56:c4:29:27:1a:20:37:c1:8b: 9d:37:07:15:c5:1a:3d:e1:b1:d9:5c:ba:5d:34:91: 5d:ee:da:0f:fb:42:e6:02:a4:a8:3e:56:05:91:a6: ad:83:ca:0f:0e:75:19:2b:fd:9f:50:a0:e8:c3:c2: 7d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:EB:19:7F:25:65:18:95:AD:7C:F7:AE:01:C5:E5:CC:5A:A5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/823652a8-3986-3edc-b010-29419cbf2da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e2:b4:d7:6b:e0:18:ac:07:68:c9:1e:f7:bc:84:d3:06:e5: 5f:2f:fc:2f:32:23:58:d0:de:16:63:80:c9:a3:d2:70:c2:33: 37:7b:1b:07:de:15:29:00:12:a3:67:51:5e:37:29:1c:a5:1d: 89:0c:59:72:73:da:0f:e4:a0:06:7e:eb:0d:52:da:c7:82:09: b6:96:86:8b:8e:4f:24:cb:09:d5:5b:7a:6f:e2:13:de:41:a3: bc:82:8b:08:67:5e:ed:a9:1f:a8:ab:1f:00:0f:00:e7:cb:87: 8f:d8:24:a8:7c:ad:d9:ec:b9:83:7c:f8:5a:0f:1a:25:79:b3: 72:4d:60:64:91:09:59:cc:48:76:cd:cc:6a:b4:b8:3c:77:9f: 68:b3:5b:eb:29:62:2b:28:28:a9:b1:b5:4d:33:57:14:e3:e2: 97:09:9a:bd:e6:9d:27:b0:ca:d0:31:17:1e:99:62:d9:a8:fc: 2c:41:f3:72:0a:7f:4e:15:e4:6e:e1:87:da:5e:7f:a0:e1:eb: 27:b5:7f:8c:f9:cc:86:9b:13:18:ce:c6:10:e9:f0:6c:ee:65: 9a:7d:ed:3f:da:96:88:69:40:a7:a5:d8:7c:ea:9c:9f:38:e1: 52:50:b2:5c:a4:f6:42:91:87:dd:b8:ca:23:4f:5d:ba:0f:99: 76:58:3c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUU5pG8H1lqm1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZGNhMTA0OTktYTFjZS00MDZiLWEyNzItZjkwOGVjNDg3NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiJVDeXOsr3lv1YVWR9wAbZq65u2g/F9qFVq FpZV46/Dy052KaqA70Hmh/mE+WBb+hCqeJwURdTf1GaguaBi7abwfub0Z7rVAGaD PxJPJXwsaLfZSadlNmFLn8WV08Xe/Sf5kbDwfEe98R2sOQPLithlFIVQAqBM1jcO WVohyP4qg+o4VpnF+lyo2Zfj2RmB6il6uNJYs4H/RaEeEchg1KS5xmcZBknnNcqO FSLmFXjYaX+pzsK9LFNJDkYbVHxh2LoLR1fZGvxWxCknGiA3wYudNwcVxRo94bHZ XLpdNJFd7toP+0LmAqSoPlYFkaatg8oPDnUZK/2fUKDow8J9zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1e6xl/JWUYla18964BxeXMWqWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvODIzNjUyYTgtMzk4Ni0z ZWRjLWIwMTAtMjk0MTljYmYyZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHitNdr4BisB2jJHve8hNMG5V8v/C8yI1jQ3hZjgMmj0nDCMzd7Gwfe FSkAEqNnUV43KRylHYkMWXJz2g/koAZ+6w1S2seCCbaWhouOTyTLCdVbem/iE95B o7yCiwhnXu2pH6irHwAPAOfLh4/YJKh8rdnsuYN8+FoPGiV5s3JNYGSRCVnMSHbN zGq0uDx3n2izW+spYisoKKmxtU0zVxTj4pcJmr3mnSewytAxFx6ZYtmo/CxB83IK f04V5G7hh9pef6Dh6ye1f4z5zIabExjOxhDp8GzuZZp97T/alohpQKel2HzqnJ84 4VJQslyk9kKRh924yiNPXboPmXZYPNg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:57:54 2025 by rpki-client