$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/b0de4770-aa77-3fc6-adc5-4d1cab0e7d36.roa File: b0de4770-aa77-3fc6-adc5-4d1cab0e7d36.roa (raw, json) Hash identifier: iYhQdGpert70K20JNMRRnRCAdtFa2FmGxRqopzWO3QU= Subject key identifier: 3E:F9:25:C6:AF:F8:D7:47:16:C4:61:B6:9F:D6:40:3B:82:C3:08:58 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584B76F2A19688E3343274176200 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/b0de4770-aa77-3fc6-adc5-4d1cab0e7d36.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 26229 IP address blocks: 162.138.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:a1:96:88:e3:34:32:74:17:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=6d3c9d03-0fbc-4d95-b3c5-fa02962c23cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5b:fa:c4:71:08:16:91:49:b2:ae:4b:07:62: a6:3d:a5:02:51:6e:4d:7d:8b:fe:a9:97:64:23:69: 27:0c:8a:c6:14:58:4b:f7:25:62:aa:63:d0:36:0b: fa:89:ab:95:7e:8c:58:55:3b:53:ed:2c:ea:ea:8e: bc:89:b4:b1:a1:24:4f:25:7a:9d:0b:65:e4:fe:b9: 9f:c7:01:ef:b4:77:aa:a7:0b:b3:ed:cd:bb:74:b3: 90:7b:81:90:81:ac:92:68:6e:ee:4f:1c:9f:25:2e: 7d:bf:eb:62:49:cd:de:4c:b8:11:b4:26:1a:fc:ec: 5a:9f:57:a2:3c:f5:4d:a0:9e:bd:3d:f5:09:61:79: 27:86:63:14:ae:1b:b2:e7:4f:bd:b1:e5:b1:76:75: c5:fb:58:15:25:91:ed:94:e7:9b:b8:c3:7e:9e:0c: 82:df:f0:b6:94:df:79:aa:af:da:0f:8e:58:25:4e: de:00:11:96:da:d7:06:c2:41:c3:cd:7a:13:f2:23: 31:0c:9a:f1:25:e5:76:2f:61:c2:d4:63:dd:25:0c: 71:7f:ee:bf:03:49:e4:18:3b:de:b9:27:6b:c4:29: ed:14:53:8a:bf:71:91:af:73:6d:0a:c2:dc:3c:c9: 2b:63:6d:12:79:ed:67:98:d7:0a:2a:2c:68:5f:10: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F9:25:C6:AF:F8:D7:47:16:C4:61:B6:9F:D6:40:3B:82:C3:08:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/b0de4770-aa77-3fc6-adc5-4d1cab0e7d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ea:13:ad:94:f2:d4:ab:37:95:b4:4a:f3:9a:d8:32:f0:f1: 4c:79:be:69:dc:f3:a7:96:88:7e:83:c7:5b:86:5b:d4:aa:ae: 23:8d:06:19:08:4f:73:87:03:b4:33:fb:b0:a1:96:04:30:11: b5:7f:c1:87:4f:c6:b8:03:10:ac:02:86:40:38:53:96:84:56: 36:89:cd:91:1b:d2:d8:bf:6b:6b:44:e2:6f:ce:d0:77:cb:4d: 0d:ca:fd:2a:f4:a5:42:1b:17:7e:8e:e3:20:30:d6:82:0f:c0: 36:ee:a9:53:b7:c8:d3:f4:68:04:63:cb:3e:04:0e:7a:8e:8a: 32:06:bc:86:fb:bd:d9:af:73:fc:49:20:e2:1d:cd:7c:c9:79: ac:ef:b3:da:6f:db:b7:40:fd:e3:8f:e7:08:1c:e0:b6:35:25: 0a:a3:2d:06:80:f0:82:5f:6d:74:bd:3e:1a:e1:7d:d5:63:c3: 1a:20:05:0e:86:1f:60:42:a4:63:4c:52:38:74:e2:7c:f3:ba: 6e:79:29:34:2d:d3:25:3b:6f:11:3b:e7:ad:08:e9:5d:c0:e7: 46:ae:81:cb:d8:03:59:4e:7a:0b:05:82:a6:b4:b2:c3:f3:f3: 09:c6:f3:34:24:8a:ec:0f:9b:6b:95:a4:ac:d0:f5:3f:79:20: 10:c2:70:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28qGWiOM0MnQXYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NmQzYzlkMDMtMGZiYy00ZDk1LWIzYzUtZmEwMjk2MmMyM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1v6xHEIFpFJsq5LB2KmPaUCUW5NfYv+qZdk I2knDIrGFFhL9yViqmPQNgv6iauVfoxYVTtT7Szq6o68ibSxoSRPJXqdC2Xk/rmf xwHvtHeqpwuz7c27dLOQe4GQgaySaG7uTxyfJS59v+tiSc3eTLgRtCYa/Oxan1ei PPVNoJ69PfUJYXknhmMUrhuy50+9seWxdnXF+1gVJZHtlOebuMN+ngyC3/C2lN95 qq/aD45YJU7eABGW2tcGwkHDzXoT8iMxDJrxJeV2L2HC1GPdJQxxf+6/A0nkGDve uSdrxCntFFOKv3GRr3NtCsLcPMkrY20See1nmNcKKixoXxAw4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD75Jcav+NdHFsRhtp/WQDuCwwhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvYjBkZTQ3NzAtYWE3Ny0z ZmM2LWFkYzUtNGQxY2FiMGU3ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3qE62U8tSrN5W0SvOa2DLw8Ux5vmnc86eWiH6Dx1uGW9SqriONBhkI T3OHA7Qz+7ChlgQwEbV/wYdPxrgDEKwChkA4U5aEVjaJzZEb0ti/a2tE4m/O0HfL TQ3K/Sr0pUIbF36O4yAw1oIPwDbuqVO3yNP0aARjyz4EDnqOijIGvIb7vdmvc/xJ IOIdzXzJeazvs9pv27dA/eOP5wgc4LY1JQqjLQaA8IJfbXS9PhrhfdVjwxogBQ6G H2BCpGNMUjh04nzzum55KTQt0yU7bxE7560I6V3A50augcvYA1lOegsFgqa0ssPz 8wnG8zQkiuwPm2uVpKzQ9T95IBDCcBk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:00 2025 by rpki-client