$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa File: 0be8b0af-8061-36c3-8885-a1d714a9af7a.roa (raw, json) Hash identifier: 1LmLuRLZUjLSELYmSC3O3lIk1Svssh42Y5Bzu8k+dSE= Subject key identifier: C3:01:93:81:A4:A0:47:F1:49:4A:2A:49:46:F9:56:63:F1:68:AD:D5 Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584B1C36C6C413C67130F3C94A5C Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 10430 IP address blocks: 164.116.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c6:c4:13:c6:71:30:f3:c9:4a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=a1d9639f-9df2-4365-bd38-61237faaae8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:95:c7:47:2e:82:bf:86:39:1e:62:d1:ef: 84:13:6a:c3:d0:9a:7f:7a:ad:14:41:eb:04:1b:b3: b2:dc:94:14:ef:e0:f9:5c:96:b9:19:4d:b0:4a:f8: df:46:63:97:77:ed:d6:48:e0:f1:9f:3e:9c:87:f0: cb:a1:ef:4a:2a:01:4b:56:8b:85:e4:be:04:90:1f: ca:46:af:4c:fe:38:9e:81:b7:ca:6a:bd:24:91:7b: b2:82:8a:14:12:30:0f:21:0a:bb:aa:34:22:a2:00: 30:4d:35:09:e8:00:48:51:89:21:61:b7:20:64:04: 43:d2:2f:a4:9a:bc:f6:45:89:98:dc:c0:41:14:fa: 15:c0:34:c4:bd:58:6d:56:dc:fe:b8:8f:68:43:95: 02:4a:b4:1e:83:aa:d7:18:da:8c:a5:c2:a6:e6:43: 9b:83:df:bd:e3:6d:e1:2e:10:a0:25:07:72:f3:d7: 60:0c:a9:7d:35:a5:d8:3e:0e:64:d1:64:43:d4:b7: a8:60:e3:a0:d1:68:bc:5e:ee:60:7b:2e:ed:f9:e7: eb:55:d6:48:14:b1:6c:3f:8c:6d:18:34:3e:e3:c4: 01:c6:3b:05:73:38:52:ed:d1:e6:53:fb:8a:e5:bc: 19:7d:95:4f:c6:28:e2:76:94:2d:71:62:6d:f9:fa: 87:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:01:93:81:A4:A0:47:F1:49:4A:2A:49:46:F9:56:63:F1:68:AD:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 164.116.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:57:51:32:3f:f4:66:3a:03:39:68:7b:bc:d7:5a:97:52:3d: f2:14:5e:2c:0b:4a:13:9a:5b:54:5a:b1:40:92:3d:40:03:43: 90:81:8c:0c:f7:68:69:5e:26:0a:89:87:f8:e9:50:20:64:18: 45:15:b3:ee:89:0f:cb:e3:a5:b3:60:c0:af:45:62:08:48:e8: 17:a1:4a:4f:4f:91:0b:05:a4:bc:d7:91:48:14:08:48:6a:a3: 3a:aa:16:47:e4:67:f3:af:46:ee:f9:45:3d:f0:3f:31:7c:9e: 70:fd:0f:56:65:7a:c8:85:94:36:9d:21:a5:64:29:b2:1d:05: 07:fb:05:07:c9:bc:07:f0:23:16:61:8f:16:87:fb:6c:08:e2: 20:34:24:3e:11:73:0d:99:d6:87:47:6d:9b:be:df:b9:3d:ed: 0f:78:7b:97:61:28:38:0e:3e:15:ca:47:e5:e2:29:47:a7:ea: 24:39:8b:42:5d:5e:a8:df:ce:40:a0:c0:e5:c6:0a:66:3a:50: 8b:2f:e5:95:4d:6b:a6:45:eb:5b:33:68:19:6f:b2:6a:a6:f1: 81:6d:5a:cc:16:84:74:ef:c1:18:0d:9d:17:f6:1a:4b:56:86: 36:34:58:06:80:89:52:ea:51:0f:63:5e:15:4c:92:f7:ed:67: 94:d6:14:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEscNsbEE8ZxMPPJSlwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTFkOTYzOWYtOWRmMi00MzY1LWJkMzgtNjEyMzdmYWFhZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1aVx0cugr+GOR5i0e+EE2rD0Jp/eq0UQesE G7Oy3JQU7+D5XJa5GU2wSvjfRmOXd+3WSODxnz6ch/DLoe9KKgFLVouF5L4EkB/K Rq9M/jiegbfKar0kkXuygooUEjAPIQq7qjQiogAwTTUJ6ABIUYkhYbcgZARD0i+k mrz2RYmY3MBBFPoVwDTEvVhtVtz+uI9oQ5UCSrQeg6rXGNqMpcKm5kObg9+9423h LhCgJQdy89dgDKl9NaXYPg5k0WRD1LeoYOOg0Wi8Xu5gey7t+efrVdZIFLFsP4xt GDQ+48QBxjsFczhS7dHmU/uK5bwZfZVPxijidpQtcWJt+fqHKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMMBk4GkoEfxSUoqSUb5VmPxaK3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvMGJlOGIwYWYtODA2MS0z NmMzLTg4ODUtYTFkNzE0YTlhZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApHQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjFdRMj/0ZjoDOWh7vNdal1I98hReLAtKE5pbVFqxQJI9QANDkIGMDPdo aV4mComH+OlQIGQYRRWz7okPy+Ols2DAr0ViCEjoF6FKT0+RCwWkvNeRSBQISGqj OqoWR+Rn869G7vlFPfA/MXyecP0PVmV6yIWUNp0hpWQpsh0FB/sFB8m8B/AjFmGP Fof7bAjiIDQkPhFzDZnWh0dtm77fuT3tD3h7l2EoOA4+FcpH5eIpR6fqJDmLQl1e qN/OQKDA5cYKZjpQiy/llU1rpkXrWzNoGW+yaqbxgW1azBaEdO/BGA2dF/YaS1aG NjRYBoCJUupRD2NeFUyS9+1nlNYUtQ== -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:33 2025 by rpki-client