$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/f4097a7e-a971-32e5-9878-831870153f57.roa File: f4097a7e-a971-32e5-9878-831870153f57.roa (raw, json) Hash identifier: wgAkFe8+Dd1Sviwz8XaJ7DdmuP1vivzCUXA0GqDwqz8= Subject key identifier: 41:E2:89:09:52:3B:2F:D7:81:27:67:0F:C9:AA:4B:36:D4:2C:EC:F1 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584AD3A88116FFF57CEC9F4EE0C0 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/f4097a7e-a971-32e5-9878-831870153f57.roa Signing time: Tue 12 Aug 2025 01:15:50 +0000 ROA not before: Tue 12 Aug 2025 01:15:50 +0000 ROA not after: Mon 10 Nov 2025 02:15:50 +0000 asID: 26229 IP address blocks: 162.138.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a8:81:16:ff:f5:7c:ec:9f:4e:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Aug 12 01:15:50 2025 GMT Not After : Nov 10 02:15:50 2025 GMT Subject: CN=149d21c7-104a-4a2b-93b1-485040b0ee76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7c:4a:18:d6:61:34:88:6f:47:02:6c:a3:d3: 31:d3:ed:e2:5b:46:66:43:9f:4b:f3:fe:f2:37:23: b3:0b:8c:08:00:3c:9b:ec:95:28:f4:ea:a1:aa:01: 8f:b3:11:96:a6:7d:77:17:b1:80:9f:34:e2:d2:32: b0:c2:2b:44:8c:bc:3f:40:a9:09:37:06:ee:dd:92: 3e:9c:61:4c:37:ba:f8:1f:f4:55:7a:93:eb:28:7d: 66:60:82:ee:66:30:da:c7:d2:48:12:fb:bc:ad:77: 52:db:b5:db:9f:3d:ff:cc:fa:cd:bb:ef:e5:67:6e: 19:9b:af:41:a7:31:5e:b3:b0:e4:cc:94:3e:58:e0: c2:8e:08:ae:5b:7a:da:a7:df:ea:af:54:4b:8e:5e: 66:2e:36:72:99:46:72:cb:e1:bc:4d:06:43:53:30: 74:1a:07:ba:42:53:c1:01:a5:78:a6:93:4b:3e:73: 0e:57:fa:1c:2f:42:7f:c0:cb:44:8b:6a:df:d9:c5: 93:a8:56:8d:4b:bf:22:dd:53:a0:8e:45:fa:d2:18: 48:70:a7:a2:6f:f4:dd:18:c5:44:31:5a:ba:02:e8: cf:a9:81:ac:ba:65:2b:b7:a7:fa:73:15:25:f6:70: 36:33:b1:0c:a5:bc:f7:09:d8:c4:a1:ef:e5:a8:f5: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E2:89:09:52:3B:2F:D7:81:27:67:0F:C9:AA:4B:36:D4:2C:EC:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/f4097a7e-a971-32e5-9878-831870153f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:54:f0:ef:71:87:e2:60:11:ac:a1:a1:45:32:50:8f:85:9f: 03:28:48:4f:77:21:85:3a:74:b0:01:c8:86:30:e8:34:4d:d3: ae:05:92:9a:8f:f0:ce:1f:16:ff:58:86:01:39:b5:bd:e8:38: 99:0d:86:55:84:a8:de:ee:b3:64:59:9c:20:81:07:e9:e9:b0: ea:4f:ee:ea:b0:4a:ab:4c:74:29:ec:24:22:68:6e:60:1b:a2: ce:34:29:a4:5f:b2:5b:ba:9b:e8:76:d6:b8:47:83:58:68:97: af:bc:01:47:5d:36:ac:29:f4:ff:dd:c2:d0:06:39:9b:97:1b: 24:88:e0:df:29:2a:37:40:cf:e8:34:a4:42:ff:13:59:e8:a4: 60:e9:b4:7a:78:c6:84:fe:a2:71:ae:42:26:e4:c4:1a:42:9b: fd:11:3f:87:f1:65:94:33:e9:99:c2:e0:52:8c:ea:19:6c:7f: 93:6b:cb:eb:4f:da:4e:44:0f:38:02:1a:21:84:a4:6c:8d:c2: e8:8a:07:2a:fd:37:e9:2e:e7:0e:c8:6a:d0:56:fa:73:e4:14: 27:49:49:f0:04:60:a9:04:9a:9d:ee:8b:5d:72:a4:d0:63:0c: 72:54:aa:8d:e9:77:4c:c3:6f:19:2c:e5:19:b5:4c:bf:fb:90: 93:7c:04:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErTqIEW//V87J9O4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MDgxMjAxMTU1MFoXDTI1MTExMDAyMTU1MFowLzEtMCsGA1UEAxMk MTQ5ZDIxYzctMTA0YS00YTJiLTkzYjEtNDg1MDQwYjBlZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nxKGNZhNIhvRwJso9Mx0+3iW0ZmQ59L8/7y NyOzC4wIADyb7JUo9OqhqgGPsxGWpn13F7GAnzTi0jKwwitEjLw/QKkJNwbu3ZI+ nGFMN7r4H/RVepPrKH1mYILuZjDax9JIEvu8rXdS27Xbnz3/zPrNu+/lZ24Zm69B pzFes7DkzJQ+WODCjgiuW3rap9/qr1RLjl5mLjZymUZyy+G8TQZDUzB0Gge6QlPB AaV4ppNLPnMOV/ocL0J/wMtEi2rf2cWTqFaNS78i3VOgjkX60hhIcKeib/TdGMVE MVq6AujPqYGsumUrt6f6cxUl9nA2M7EMpbz3CdjEoe/lqPWAsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHiiQlSOy/XgSdnD8mqSzbULOzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvZjQwOTdhN2UtYTk3MS0z MmU1LTk4NzgtODMxODcwMTUzZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVU8O9xh+JgEayhoUUyUI+FnwMoSE93IYU6dLAByIYw6DRN064FkpqP 8M4fFv9YhgE5tb3oOJkNhlWEqN7us2RZnCCBB+npsOpP7uqwSqtMdCnsJCJobmAb os40KaRfslu6m+h21rhHg1hol6+8AUddNqwp9P/dwtAGOZuXGySI4N8pKjdAz+g0 pEL/E1nopGDptHp4xoT+onGuQibkxBpCm/0RP4fxZZQz6ZnC4FKM6hlsf5Nry+tP 2k5EDzgCGiGEpGyNwuiKByr9N+ku5w7IatBW+nPkFCdJSfAEYKkEmp3ui11ypNBj DHJUqo3pd0zDbxks5Rm1TL/7kJN8BJs= -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:04 2025 by rpki-client