$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa File: ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa (raw, json) Hash identifier: vJkoZ7ysBCzMz16a8gdVfBnsYT0BrwkO4INmUnro67o= Subject key identifier: F3:34:FD:F2:14:4E:BA:CC:9D:74:9B:34:97:66:55:D8:07:A1:D3:B7 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584B758CB440CBF93256D8649B40 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 26229 IP address blocks: 162.138.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:b4:40:cb:f9:32:56:d8:64:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=ff5f91e7-2ad9-4f5b-a236-0bca44858d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:60:eb:57:9f:88:fd:23:bd:ec:af:38:e1: 3f:70:e2:60:75:ab:90:9f:54:43:c0:7d:70:70:32: 14:17:8d:e5:64:d8:81:ec:8f:d5:c2:c0:41:75:c1: 1b:49:35:28:5d:be:b0:0a:37:56:b7:40:13:76:be: 54:37:bc:0b:d8:8e:70:07:6b:35:06:b2:54:53:f3: db:11:63:78:60:cf:b1:f0:11:34:6b:21:39:bf:6f: 16:d2:8c:07:b3:97:7c:94:9e:07:58:95:d0:01:f2: c9:58:71:8f:f7:d7:45:8d:51:7a:39:7c:3d:c6:1d: 78:a4:e1:64:7a:bd:18:a8:8a:8d:00:25:f0:df:5b: 00:99:b9:50:8b:53:4b:e5:fa:09:33:90:b9:42:f9: 85:5d:60:cf:97:c6:53:8c:78:50:cb:47:42:ae:92: 45:35:2b:e3:35:f6:a6:51:d8:43:1e:63:c7:2d:77: aa:6b:3c:4b:6a:c0:55:3f:bf:00:8a:9f:89:b5:27: 58:c3:67:b8:29:60:e9:1b:26:e5:88:75:92:2a:b5: 78:07:4e:6a:7b:70:14:67:7b:86:37:2f:8c:29:1d: 6e:54:52:1f:c3:44:91:a6:2e:29:56:db:41:1a:18: 21:5a:8d:fc:4d:ce:98:2d:4a:fa:70:be:40:33:07: d3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:34:FD:F2:14:4E:BA:CC:9D:74:9B:34:97:66:55:D8:07:A1:D3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:81:d9:39:51:37:f5:30:8f:06:b3:9b:fc:82:db:ed:29:5b: c1:a0:ac:d1:8a:93:d0:12:58:9a:ee:36:84:90:18:fd:1f:0f: 20:4f:d6:ea:53:b5:0b:3f:97:5d:d1:fd:80:24:2f:3f:26:63: 52:94:f8:10:46:f9:52:bc:65:83:da:05:d6:6f:b4:d8:d0:fb: 85:56:a0:e1:e0:17:86:27:2d:db:ee:12:10:23:ec:aa:bb:5a: 57:06:8f:3f:69:6c:13:ab:3b:d8:ef:83:c3:28:33:26:50:d6: f1:fb:a0:2d:25:2f:34:29:20:2c:03:b7:03:5a:23:c0:61:ad: 9a:e4:7b:36:17:db:6f:e3:a7:df:d6:04:6a:d7:ef:66:cd:d2: eb:7b:89:4d:b5:ee:11:8f:84:5b:f2:f6:d0:10:6f:67:52:3b: 0e:2e:6e:95:34:16:18:99:0d:94:69:b3:80:96:06:2e:fb:b6: d6:4e:f1:28:69:67:d9:06:a7:76:d2:87:44:36:5c:53:13:15: 8f:e5:45:b5:74:34:94:ca:5f:39:d0:bd:c6:30:89:7c:74:21: 9a:b1:24:42:82:a1:f1:00:43:e5:5a:74:96:89:a8:ca:15:4d: d9:f4:f9:15:57:1f:ea:8e:a0:a7:8c:80:6b:4e:e8:25:15:b2: 19:1c:14:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jLRAy/kyVthkm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZmY1ZjkxZTctMmFkOS00ZjViLWEyMzYtMGJjYTQ0ODU4ZDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZRg61efiP0jveyvOOE/cOJgdauQn1RDwH1w cDIUF43lZNiB7I/VwsBBdcEbSTUoXb6wCjdWt0ATdr5UN7wL2I5wB2s1BrJUU/Pb EWN4YM+x8BE0ayE5v28W0owHs5d8lJ4HWJXQAfLJWHGP99dFjVF6OXw9xh14pOFk er0YqIqNACXw31sAmblQi1NL5foJM5C5QvmFXWDPl8ZTjHhQy0dCrpJFNSvjNfam UdhDHmPHLXeqazxLasBVP78Aip+JtSdYw2e4KWDpGybliHWSKrV4B05qe3AUZ3uG Ny+MKR1uVFIfw0SRpi4pVttBGhghWo38Tc6YLUr6cL5AMwfToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM0/fIUTrrMnXSbNJdmVdgHodO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvYWIyY2RhYTQtNDE4MC0z OTVkLTkyOWMtM2IwMGZjNmExMjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGB2TlRN/Uwjwazm/yC2+0pW8GgrNGKk9ASWJruNoSQGP0fDyBP1upT tQs/l13R/YAkLz8mY1KU+BBG+VK8ZYPaBdZvtNjQ+4VWoOHgF4YnLdvuEhAj7Kq7 WlcGjz9pbBOrO9jvg8MoMyZQ1vH7oC0lLzQpICwDtwNaI8BhrZrkezYX22/jp9/W BGrX72bN0ut7iU217hGPhFvy9tAQb2dSOw4ubpU0FhiZDZRps4CWBi77ttZO8Shp Z9kGp3bSh0Q2XFMTFY/lRbV0NJTKXznQvcYwiXx0IZqxJEKCofEAQ+VadJaJqMoV Tdn0+RVXH+qOoKeMgGtO6CUVshkcFBc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:08:03 2025 by rpki-client