$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa File: b5a50cd5-cd84-3688-aa95-558c12a7c337.roa (raw, json) Hash identifier: 9qlS79oDNF6SFO6+fu3pSDk69+nGW3eXaH9iJjOTQCg= Subject key identifier: C1:62:F6:C1:DD:AB:DD:ED:E4:CF:CE:9D:4C:36:56:C0:4A:03:18:08 Certificate issuer: /CN=7d5cac87-cf05-44e8-9103-c269cf67c04b Certificate serial: 010D0C9F4328584B944221CF0E306DFE580D7380 Authority key identifier: 4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 22594 IP address blocks: 134.161.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:21:cf:0e:30:6d:fe:58:0d:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d5cac87-cf05-44e8-9103-c269cf67c04b Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=d440aea0-834c-4b8f-98a7-b3096669e9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:75:1b:48:b0:38:5a:8c:80:24:7c:26:6b: 0c:94:8a:d2:9a:86:ff:92:f4:2e:e3:2f:23:15:78: f3:02:4b:81:01:40:16:c5:61:9c:f1:3e:3d:b3:79: fb:64:70:91:2c:5e:9c:dd:5d:d5:04:63:64:a9:79: b4:34:d2:48:47:9c:a6:81:8c:7e:db:31:ce:c0:34: a6:bf:6d:74:2d:e2:01:54:ec:dc:71:15:51:50:7b: 74:3d:e0:0b:26:9a:1e:4f:c7:b1:ba:4b:9e:2e:c8: b6:22:8f:00:2e:90:10:ad:c2:31:53:ac:0a:eb:55: d0:a8:4c:32:d4:15:42:34:0c:6e:ee:b6:dd:76:42: 81:2c:00:67:a9:3f:18:da:4b:bd:c5:5b:4e:88:8f: 21:16:79:ed:02:e2:a4:65:ad:aa:b5:e3:3b:51:a9: 70:1d:a0:57:25:fd:35:2c:f5:e7:6b:3b:97:35:c8: b3:01:ce:93:77:e2:0b:35:20:b4:d7:2b:6f:fd:24: 6c:14:ee:0b:d8:c1:3b:92:98:45:b5:5a:65:a1:2c: f7:d9:b5:d3:25:41:06:72:34:48:b2:fd:aa:d9:e0: 3f:15:ba:76:bf:d6:1b:3f:03:57:28:96:96:07:62: 93:c9:3c:fd:1b:34:ef:0c:69:8b:b2:46:80:43:ed: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:62:F6:C1:DD:AB:DD:ED:E4:CF:CE:9D:4C:36:56:C0:4A:03:18:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.crl X509v3 Authority Key Identifier: keyid:4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer sbgp-ipAddrBlock: critical IPv4: 134.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:fa:ee:42:23:e0:69:e9:47:89:1b:f9:5e:e8:84:fe:a2:0b: 4c:42:79:a4:f7:e5:f1:c6:ba:f1:44:20:74:04:bc:92:1f:7c: bb:56:d4:a3:ad:9a:ce:21:7b:10:71:4c:51:bb:00:2e:9f:16: df:7f:44:10:64:a6:c7:5b:75:b8:f8:ac:a1:55:49:1d:4b:05: 0c:71:0d:7b:ea:2e:84:7b:c2:ff:18:a5:e0:86:29:f8:b5:75: bc:6f:97:55:5c:85:e8:a6:a7:fd:4e:d2:a5:7c:06:57:81:89: 16:ec:de:25:46:eb:37:7c:73:01:da:ad:6e:dd:2f:84:0b:06: 7e:9c:40:e3:a4:8a:0b:8d:44:73:f6:f5:b2:4d:41:7c:cd:ba: 3c:84:15:89:df:cc:00:1d:b8:1d:63:00:1a:4a:02:99:72:c4: c2:89:36:b5:51:db:f0:35:d1:85:e8:63:93:07:ef:86:9d:80: 31:34:45:06:06:50:fe:03:ef:ba:55:2f:b6:13:08:50:e5:c2: be:8e:84:1e:21:8a:33:54:23:af:62:fd:00:02:6a:0e:55:19: f0:0e:ff:4b:d1:20:0f:64:2c:2e:f9:03:72:6f:65:36:fb:5a: 93:df:49:3f:63:a7:a1:23:5c:2f:e1:c4:67:ea:82:7c:ab:59: dd:6e:4d:ae -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuUQiHPDjBt/lgNc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q1Y2FjODctY2YwNS00NGU4LTkxMDMtYzI2OWNmNjdj MDRiMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZDQ0MGFlYTAtODM0Yy00YjhmLTk4YTctYjMwOTY2NjllOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl91G0iwOFqMgCR8JmsMlIrSmob/kvQu4y8j FXjzAkuBAUAWxWGc8T49s3n7ZHCRLF6c3V3VBGNkqXm0NNJIR5ymgYx+2zHOwDSm v210LeIBVOzccRVRUHt0PeALJpoeT8exukueLsi2Io8ALpAQrcIxU6wK61XQqEwy 1BVCNAxu7rbddkKBLABnqT8Y2ku9xVtOiI8hFnntAuKkZa2qteM7UalwHaBXJf01 LPXnazuXNcizAc6Td+ILNSC01ytv/SRsFO4L2ME7kphFtVploSz32bXTJUEGcjRI sv2q2eA/Fbp2v9YbPwNXKJaWB2KTyTz9GzTvDGmLskaAQ+0FcQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMFi9sHdq93t5M/OnUw2VsBKAxgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZDVj YWM4Ny1jZjA1LTQ0ZTgtOTEwMy1jMjY5Y2Y2N2MwNGIvYjVhNTBjZDUtY2Q4NC0z Njg4LWFhOTUtNTU4YzEyYTdjMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2Q1Y2FjODctY2YwNS00NGU4LTkx MDMtYzI2OWNmNjdjMDRiLzdkNWNhYzg3LWNmMDUtNDRlOC05MTAzLWMyNjljZjY3 YzA0Yi5jcmwwHwYDVR0jBBgwFoAUTpXaPKnosYDX5f2SnkB+ZM4Q/q0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZDVjYWM4Ny1jZjA1LTQ0ZTgtOTEwMy1jMjY5 Y2Y2N2MwNGIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhqEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaPruQiPgaelHiRv5XuiE/qILTEJ5pPfl8ca68UQgdAS8kh98u1bUo62a ziF7EHFMUbsALp8W339EEGSmx1t1uPisoVVJHUsFDHENe+ouhHvC/xil4IYp+LV1 vG+XVVyF6Kan/U7SpXwGV4GJFuzeJUbrN3xzAdqtbt0vhAsGfpxA46SKC41Ec/b1 sk1BfM26PIQVid/MAB24HWMAGkoCmXLEwok2tVHb8DXRhehjkwfvhp2AMTRFBgZQ /gPvulUvthMIUOXCvo6EHiGKM1Qjr2L9AAJqDlUZ8A7/S9EgD2QsLvkDcm9lNvta k99JP2OnoSNcL+HEZ+qCfKtZ3W5Nrg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:12 2025 by rpki-client