$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa File: c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa (raw, json) Hash identifier: tCa/ZiS8QPZqYsg7NCwW6uOTCYQiyAZ08vX570JX25A= Subject key identifier: 23:CA:0F:BA:DA:8B:42:25:E4:30:E6:17:7D:E2:EA:6D:61:2F:50:E8 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584BB45D45272B2AD372033BFD40 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 26229 IP address blocks: 162.138.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:45:27:2b:2a:d3:72:03:3b:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=7f70124d-c40b-4439-a98c-db43de8009bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:f5:8e:d0:e6:70:d9:a7:9d:0c:c9:e7:86: 97:d3:b7:ad:82:7c:14:0a:79:e8:65:5a:95:a3:b3: 27:ab:d1:f8:93:0c:8e:8c:da:b1:aa:de:f8:85:58: 5b:25:6d:ee:32:de:1b:dd:93:81:21:f4:dd:a0:3e: 40:7a:a8:f8:d1:ab:b6:15:71:8f:ef:a3:d1:46:fd: 8b:1c:0a:50:e2:25:b3:0a:e7:96:b6:ad:1c:17:3c: b7:f6:20:48:87:50:d1:c2:79:2b:34:f3:f6:41:7f: ad:e3:f9:b6:ac:37:7f:d0:9a:ee:42:c8:c7:ce:4f: 4b:19:33:5d:e1:83:c3:2c:bc:c4:b9:72:71:61:4b: d3:e6:bc:a9:4b:0b:60:15:ec:86:50:75:57:7a:e9: b4:c1:1a:dd:e4:c1:83:67:cd:81:6e:40:07:7e:9b: 68:1a:df:2a:d9:b8:29:e3:c4:3c:ba:5d:d5:76:f0: 7d:de:ae:9f:f6:fe:44:33:ed:fd:43:a5:da:e1:b1: e7:f5:cf:8b:e7:70:6b:05:47:48:dc:b6:3f:d8:11: 7a:4c:e4:fc:a6:f3:d6:c8:97:23:66:a4:e6:6c:0f: 4a:a0:50:07:4f:73:af:79:aa:4a:32:25:1b:c2:85: 44:67:a6:9c:cb:a3:55:26:ac:c3:00:bb:e7:37:1d: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CA:0F:BA:DA:8B:42:25:E4:30:E6:17:7D:E2:EA:6D:61:2F:50:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:25:5f:5d:24:07:83:b8:cd:d0:62:01:9a:72:2d:c3:dc:1b: 04:a3:1e:2d:1e:18:9a:2c:e9:ef:e3:4a:71:42:df:d9:87:0d: 9e:85:f2:81:fc:40:5e:c2:2b:fc:dd:25:a4:80:e7:58:de:eb: d3:d1:7c:45:91:1c:a2:e9:4b:3a:ef:6a:fe:a3:6f:31:88:94: 30:75:71:20:9e:45:b4:bd:a3:ca:43:e3:40:ab:16:c8:d0:57: db:f1:a2:ef:54:60:0f:50:5b:35:f2:6f:6f:c4:b6:49:b9:19: 82:8f:0e:c9:78:16:0e:11:24:76:df:e3:57:46:63:26:50:ee: 22:ee:5c:82:8f:02:77:97:ea:bd:45:f7:8f:73:1f:ce:e6:c0: 00:ba:7e:0f:27:53:c8:bd:9e:a0:c0:0b:f1:b0:2e:3d:36:ae: 32:50:94:aa:7c:b4:55:4c:ef:f1:26:a0:db:83:7d:f2:d1:ac: e8:26:07:76:37:75:1c:30:42:1c:2b:b1:fc:9c:5a:35:61:01: 62:db:39:3d:16:a8:ea:a1:8d:5f:dd:9a:99:07:c6:26:60:7f: d5:62:37:cd:83:67:2c:54:39:1d:7e:97:73:50:78:56:e6:27: 0f:c1:85:46:a4:73:bb:53:55:48:2e:ec:e6:02:26:9f:e5:a1: 65:0d:82:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUUnKyrTcgM7/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk N2Y3MDEyNGQtYzQwYi00NDM5LWE5OGMtZGI0M2RlODAwOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit/1jtDmcNmnnQzJ54aX07etgnwUCnnoZVqV o7Mnq9H4kwyOjNqxqt74hVhbJW3uMt4b3ZOBIfTdoD5Aeqj40au2FXGP76PRRv2L HApQ4iWzCueWtq0cFzy39iBIh1DRwnkrNPP2QX+t4/m2rDd/0JruQsjHzk9LGTNd 4YPDLLzEuXJxYUvT5rypSwtgFeyGUHVXeum0wRrd5MGDZ82BbkAHfptoGt8q2bgp 48Q8ul3VdvB93q6f9v5EM+39Q6Xa4bHn9c+L53BrBUdI3LY/2BF6TOT8pvPWyJcj ZqTmbA9KoFAHT3OveapKMiUbwoVEZ6acy6NVJqzDALvnNx2VJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPKD7rai0Il5DDmF33i6m1hL1DoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvYzNmNzJmOWItMDdhMC0z NzI4LWFjYzEtMGQzZDIyZjNkNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGklX10kB4O4zdBiAZpyLcPcGwSjHi0eGJos6e/jSnFC39mHDZ6F8oH8 QF7CK/zdJaSA51je69PRfEWRHKLpSzrvav6jbzGIlDB1cSCeRbS9o8pD40CrFsjQ V9vxou9UYA9QWzXyb2/Etkm5GYKPDsl4Fg4RJHbf41dGYyZQ7iLuXIKPAneX6r1F 949zH87mwAC6fg8nU8i9nqDAC/GwLj02rjJQlKp8tFVM7/EmoNuDffLRrOgmB3Y3 dRwwQhwrsfycWjVhAWLbOT0WqOqhjV/dmpkHxiZgf9ViN82DZyxUOR1+l3NQeFbm Jw/BhUakc7tTVUgu7OYCJp/loWUNgmE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:56:55 2025 by rpki-client