$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ff2a7d44-76ee-3249-aedc-b2a081abfd41.roa File: ff2a7d44-76ee-3249-aedc-b2a081abfd41.roa (raw, json) Hash identifier: PXPcI7sV9Q+ge2Nv8VDOQyk7Buqqn0iu4fIyf/n+8dE= Subject key identifier: 3E:CC:E0:B0:9B:93:54:87:96:59:7E:70:72:39:6F:1D:8C:B0:09:87 Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584B76F2A0F35DA9EF2520DED100 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ff2a7d44-76ee-3249-aedc-b2a081abfd41.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 26229 IP address blocks: 162.138.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:a0:f3:5d:a9:ef:25:20:de:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=77a5bf40-28af-459c-972a-928a3a46fb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:83:c8:76:e4:d9:70:55:4b:7c:e0:71:53:4a: ab:7e:7c:91:b0:ec:ce:3c:10:e3:93:ab:9d:3d:fa: fb:fc:2d:a3:3f:08:70:4d:8d:aa:ac:19:e0:94:90: 92:5b:2d:80:b9:f2:c6:ff:8f:d7:8d:04:41:1a:cd: 9f:14:25:9c:b7:c8:56:00:ea:c5:bf:1a:72:c5:a1: d3:eb:ae:ea:02:03:3b:a1:dd:4b:01:af:2e:27:96: f4:51:65:51:25:ea:7e:14:2f:b5:a5:bf:8c:fa:58: 5d:de:88:0b:64:4b:4c:ab:4d:28:c5:2b:99:42:92: fc:a8:97:67:1b:f0:bb:cf:91:73:eb:64:94:05:fb: 07:fc:01:40:c9:49:9a:9f:9f:f2:16:5e:df:5f:d3: 5c:ed:77:4f:24:4f:8d:b5:3c:16:bc:08:cc:21:a4: 88:eb:53:03:4b:7e:44:34:2d:c3:d8:03:61:c5:13: 65:4a:fd:33:1c:89:17:c0:fa:42:c0:2e:30:d4:83: 8d:11:ea:2d:a6:b7:d7:c7:40:3c:21:fb:10:93:75: 8c:4f:86:47:6e:f6:67:b0:35:a2:49:c4:92:77:76: f0:22:f0:e7:17:41:06:52:5b:31:e5:e6:fd:19:e8: e5:34:06:a5:67:07:2a:cd:92:84:f7:9b:54:92:f4: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CC:E0:B0:9B:93:54:87:96:59:7E:70:72:39:6F:1D:8C:B0:09:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ff2a7d44-76ee-3249-aedc-b2a081abfd41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:94:da:65:53:24:5e:fd:9c:5d:4a:2d:09:58:00:ef:94:eb: 87:58:10:74:5f:dc:b9:76:69:45:a4:dc:2f:28:de:19:0a:84: 9d:9b:3b:ed:24:0b:8f:c1:08:df:e2:13:7b:e8:34:ae:22:53: e9:fc:ba:b2:71:0d:ce:a0:1a:83:dd:06:1d:68:7e:f1:c8:b5: fe:3b:74:79:c6:a4:f0:1b:64:5f:18:24:c0:6a:5d:f6:62:d8: 10:48:fc:05:bd:3e:d1:91:f0:ff:2b:ca:46:e6:87:3d:1e:1e: 96:99:77:30:a8:05:30:9c:4b:e7:9d:00:f0:ea:f5:a1:01:c7: 1d:c2:ff:5f:25:c3:4e:f5:f9:82:38:9c:df:ec:70:7f:93:42: 7c:81:b7:84:cd:9e:a8:ed:bd:0b:3e:ac:62:8c:13:73:66:38: 2d:19:33:92:e6:3f:4c:c5:f4:24:28:0d:51:c7:a0:0b:19:b7: 40:1f:f3:e7:45:88:f7:d1:f1:f5:e7:e6:84:6c:6a:4d:e1:bd: 68:99:c1:ec:b7:ce:2a:23:fd:2a:0c:61:42:85:11:fa:3f:2e: 42:c9:e8:06:fb:32:14:75:de:eb:3b:52:24:1a:18:b2:e1:22: 4b:67:e8:4f:9d:d0:7f:ef:87:1a:13:6f:f9:85:27:6b:2c:39: 83:38:92:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28qDzXanvJSDe0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzdhNWJmNDAtMjhhZi00NTljLTk3MmEtOTI4YTNhNDZmYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oPIduTZcFVLfOBxU0qrfnyRsOzOPBDjk6ud Pfr7/C2jPwhwTY2qrBnglJCSWy2AufLG/4/XjQRBGs2fFCWct8hWAOrFvxpyxaHT 667qAgM7od1LAa8uJ5b0UWVRJep+FC+1pb+M+lhd3ogLZEtMq00oxSuZQpL8qJdn G/C7z5Fz62SUBfsH/AFAyUman5/yFl7fX9Nc7XdPJE+NtTwWvAjMIaSI61MDS35E NC3D2ANhxRNlSv0zHIkXwPpCwC4w1IONEeotprfXx0A8IfsQk3WMT4ZHbvZnsDWi ScSSd3bwIvDnF0EGUlsx5eb9GejlNAalZwcqzZKE95tUkvTtVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7M4LCbk1SHlll+cHI5bx2MsAmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvZmYyYTdkNDQtNzZlZS0z MjQ5LWFlZGMtYjJhMDgxYWJmZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoorDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmU2mVTJF79nF1KLQlYAO+U64dYEHRf3Ll2aUWk3C8o3hkKhJ2bO+0k C4/BCN/iE3voNK4iU+n8urJxDc6gGoPdBh1ofvHItf47dHnGpPAbZF8YJMBqXfZi 2BBI/AW9PtGR8P8rykbmhz0eHpaZdzCoBTCcS+edAPDq9aEBxx3C/18lw071+YI4 nN/scH+TQnyBt4TNnqjtvQs+rGKME3NmOC0ZM5LmP0zF9CQoDVHHoAsZt0Af8+dF iPfR8fXn5oRsak3hvWiZwey3zioj/SoMYUKFEfo/LkLJ6Ab7MhR13us7UiQaGLLh Iktn6E+d0H/vhxoTb/mFJ2ssOYM4kl0= -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:27 2025 by rpki-client