$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/8896b689-171f-34b4-b9ae-56d03ec86257.roa File: 8896b689-171f-34b4-b9ae-56d03ec86257.roa (raw, json) Hash identifier: GVbfQxmPqHaakAh/FJEj3GPdoAB7ZmSISgYUua/FtMY= Subject key identifier: 83:A1:73:DB:7C:72:42:8E:B9:8E:0A:15:E6:8E:29:29:FE:11:3C:C2 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584BB45D451666B2339251699880 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/8896b689-171f-34b4-b9ae-56d03ec86257.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 26229 IP address blocks: 162.138.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:45:16:66:b2:33:92:51:69:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=bde0fcb7-e83f-42bd-b9ec-d5eed1606072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:97:90:66:39:ac:87:69:0c:4d:ed:a2:8e: 1c:e8:74:b9:ce:8d:b7:c8:1b:34:28:1c:ab:e7:7b: 52:3d:28:5d:bb:fa:af:54:c4:19:b3:0b:f0:98:ba: cd:06:d7:e2:47:83:e1:a7:7e:64:e4:5b:eb:a1:ea: 16:fb:1b:d9:8e:88:0c:f1:4e:19:e1:bd:e9:e3:ed: 13:e9:30:2e:32:3a:3d:f6:48:7e:ea:33:43:6e:e3: 3e:dd:72:a5:4e:b3:63:8b:ca:c1:96:00:40:90:7b: 48:e0:80:52:af:14:80:6d:bd:db:c7:75:2f:aa:af: 04:c6:64:51:5d:52:09:be:0a:58:54:c5:a0:42:6a: 5f:17:6c:26:98:01:6f:9a:ec:f5:fe:c2:48:60:81: dd:f6:77:f1:d4:15:c5:c2:38:60:71:c1:33:cc:f8: db:56:ca:13:e6:30:47:76:97:e0:99:b0:88:4d:db: 22:64:aa:be:18:31:06:7e:59:e2:36:bf:9a:98:13: 2f:ab:a6:fb:fb:83:e6:e6:d2:88:36:8f:5c:85:26: 7c:c9:51:fa:2b:b4:72:9b:42:f3:26:6d:5b:f0:e6: 1a:fe:87:db:e8:35:ab:96:54:e2:d4:b3:0f:b4:43: 6b:df:e1:1f:1c:51:b0:d5:da:6a:37:da:51:2b:e6: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A1:73:DB:7C:72:42:8E:B9:8E:0A:15:E6:8E:29:29:FE:11:3C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/8896b689-171f-34b4-b9ae-56d03ec86257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:16:4f:74:0d:5b:68:7c:e7:ba:73:f9:55:70:b5:5a:a1:c7: a6:13:f4:2b:22:e1:1d:c4:85:5a:67:35:06:0b:3d:5c:4b:0d: 24:43:0f:c8:2b:12:81:49:95:80:ec:72:cb:ce:ef:9d:52:45: c6:3d:25:7d:11:cc:75:df:e8:83:22:ca:0a:9b:e0:f7:b5:e8: b3:d8:2d:45:b7:3f:ed:45:55:63:cd:98:5e:0f:e7:04:15:0a: 87:ea:8a:fd:7d:a5:7c:37:56:09:4b:20:d2:29:5f:84:70:6a: ee:91:36:11:58:5d:92:3d:5a:6e:c7:43:f7:4b:7e:bf:bd:08: 40:2e:66:4f:dd:a8:e4:48:92:8f:aa:ce:b2:38:47:66:f5:03: 5a:ff:b9:58:c9:f2:5c:82:ed:41:68:54:66:15:df:2b:39:c1: 15:4e:7b:a4:15:7a:12:4b:c6:fc:88:64:8b:4b:c6:70:6a:73: 79:3b:a0:8f:c2:8a:a5:ba:9c:78:a5:70:bc:bb:a9:dc:4b:2e: ae:9e:1e:00:99:6a:c8:ee:fd:2e:50:1f:97:4a:3d:32:13:91: d5:45:52:c4:0e:5d:b8:c5:a3:04:35:ed:17:4c:b2:8f:da:3f: 75:63:ca:1b:f9:46:a0:e5:41:16:e7:55:1a:c4:08:29:d7:d1: 09:2a:e9:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUUWZrIzklFpmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YmRlMGZjYjctZTgzZi00MmJkLWI5ZWMtZDVlZWQxNjA2MDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcCXkGY5rIdpDE3too4c6HS5zo23yBs0KByr 53tSPShdu/qvVMQZswvwmLrNBtfiR4Php35k5FvroeoW+xvZjogM8U4Z4b3p4+0T 6TAuMjo99kh+6jNDbuM+3XKlTrNji8rBlgBAkHtI4IBSrxSAbb3bx3Uvqq8ExmRR XVIJvgpYVMWgQmpfF2wmmAFvmuz1/sJIYIHd9nfx1BXFwjhgccEzzPjbVsoT5jBH dpfgmbCITdsiZKq+GDEGflniNr+amBMvq6b7+4Pm5tKINo9chSZ8yVH6K7Rym0Lz Jm1b8OYa/ofb6DWrllTi1LMPtENr3+EfHFGw1dpqN9pRK+aEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOhc9t8ckKOuY4KFeaOKSn+ETzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvODg5NmI2ODktMTcxZi0z NGI0LWI5YWUtNTZkMDNlYzg2MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYWT3QNW2h857pz+VVwtVqhx6YT9Csi4R3EhVpnNQYLPVxLDSRDD8gr EoFJlYDscsvO751SRcY9JX0RzHXf6IMiygqb4Pe16LPYLUW3P+1FVWPNmF4P5wQV Cofqiv19pXw3VglLINIpX4Rwau6RNhFYXZI9Wm7HQ/dLfr+9CEAuZk/dqORIko+q zrI4R2b1A1r/uVjJ8lyC7UFoVGYV3ys5wRVOe6QVehJLxvyIZItLxnBqc3k7oI/C iqW6nHilcLy7qdxLLq6eHgCZasju/S5QH5dKPTITkdVFUsQOXbjFowQ17RdMso/a P3Vjyhv5RqDlQRbnVRrECCnX0Qkq6Y4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:09:27 2025 by rpki-client