$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa File: 28cc181f-7bbe-3348-96d4-658069e7572a.roa (raw, json) Hash identifier: HMUZg61EvX+PLuUfoiNxjKoR2gF9mq6GEkm+W0V02R4= Subject key identifier: EE:9A:03:61:9B:75:2D:E0:80:34:FF:2E:B7:73:2D:25:BD:A6:A2:0A Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584B25FC3E995DE50FB1CDE54B00 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 46450 IP address blocks: 142.154.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3e:99:5d:e5:0f:b1:cd:e5:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=9b2c3d12-3de7-48e3-ac49-c9883d6d4e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4a:14:8c:67:08:68:41:88:76:bd:55:29:9f: 0e:67:fd:bb:f5:ff:c5:46:3f:cb:ca:9d:9e:05:03: dc:1a:be:d7:cd:cf:bb:9a:a6:94:bc:ad:cc:a9:8b: 30:f6:e3:89:53:f0:1e:42:ee:dc:79:a6:4f:0f:1e: 4a:a6:aa:d7:4c:3c:ba:a7:2b:d2:3e:74:3f:c9:2f: 40:65:ef:81:38:02:91:67:a8:97:a2:a7:94:b2:36: 1f:87:b6:f7:8b:4b:c2:b1:a4:8b:a9:06:21:20:b2: f2:78:d8:92:84:98:2a:58:10:69:3f:b4:e0:aa:8b: cb:08:8f:ae:e9:4f:1d:21:6e:f2:42:35:d5:a7:b2: 39:26:5d:9c:53:69:8b:2e:e5:69:c6:75:95:f2:cb: d0:f1:2f:e6:5b:e9:80:4c:8f:7e:fd:b6:01:e4:4e: a1:5f:d6:e1:d4:40:18:de:01:45:14:3e:90:50:27: c5:60:1c:bf:7f:d6:51:d2:a7:32:c6:50:64:4b:ed: 54:8b:e8:ad:00:b2:2f:43:84:c8:8d:40:3d:b4:4b: 42:5e:fd:00:c0:50:7f:f3:0f:6d:e8:74:1a:a2:f5: e3:56:f1:86:87:66:09:f5:2f:61:9b:ea:54:75:00: 28:c4:1d:1f:d9:99:24:47:bf:37:2d:57:ad:af:06: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9A:03:61:9B:75:2D:E0:80:34:FF:2E:B7:73:2D:25:BD:A6:A2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 142.154.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:87:3f:82:09:93:7c:fe:af:25:81:ab:ed:40:8a:bc:9a:1a: fa:f9:20:16:d9:32:80:29:d1:5c:8d:ff:77:15:54:0f:92:ee: 14:ab:55:e0:cf:f1:4c:5a:fa:65:e1:8b:e3:7f:c3:cc:87:65: f6:89:7e:65:4f:38:2a:31:06:b1:d7:73:59:09:3c:73:e6:fb: 9d:d4:40:8b:cf:6b:fa:ae:db:64:39:b9:92:f7:f6:0e:c2:66: de:77:cd:a9:e6:e5:0c:91:36:0b:9a:f7:60:bc:8c:fa:0d:2f: 18:e2:38:e0:04:9f:0e:b3:3b:75:e7:02:5e:16:d8:46:03:6e: 72:6a:55:93:a1:8a:fd:87:42:5a:c2:aa:72:59:53:45:f8:0e: 97:17:9e:2b:b2:c8:7b:ac:df:a0:18:29:84:9b:51:49:ce:02: 0e:30:c4:1c:28:63:87:35:bf:ae:a5:3c:bf:bc:d3:c0:2c:2c: de:69:ef:40:d6:b4:13:74:f9:3e:60:09:d3:a0:41:75:e7:8d: 4a:ba:59:3f:ee:45:0a:39:d0:83:3c:9a:a9:06:55:74:bf:a3: 63:89:6c:c9:09:b5:4f:15:41:18:03:96:7a:c8:f5:63:b7:a0: 23:c1:c9:3d:78:29:ab:61:98:fc:f8:5f:d3:d4:99:13:f5:e1: 45:2f:08:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/D6ZXeUPsc3lSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk OWIyYzNkMTItM2RlNy00OGUzLWFjNDktYzk4ODNkNmQ0ZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkoUjGcIaEGIdr1VKZ8OZ/279f/FRj/Lyp2e BQPcGr7Xzc+7mqaUvK3MqYsw9uOJU/AeQu7ceaZPDx5KpqrXTDy6pyvSPnQ/yS9A Ze+BOAKRZ6iXoqeUsjYfh7b3i0vCsaSLqQYhILLyeNiShJgqWBBpP7TgqovLCI+u 6U8dIW7yQjXVp7I5Jl2cU2mLLuVpxnWV8svQ8S/mW+mATI9+/bYB5E6hX9bh1EAY 3gFFFD6QUCfFYBy/f9ZR0qcyxlBkS+1Ui+itALIvQ4TIjUA9tEtCXv0AwFB/8w9t 6HQaovXjVvGGh2YJ9S9hm+pUdQAoxB0f2ZkkR783LVetrwYJ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6aA2GbdS3ggDT/LrdzLSW9pqIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMjhjYzE4MWYtN2JiZS0z MzQ4LTk2ZDQtNjU4MDY5ZTc1NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjprAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOHP4IJk3z+ryWBq+1AiryaGvr5IBbZMoAp0VyN/3cVVA+S7hSrVeDP 8Uxa+mXhi+N/w8yHZfaJfmVPOCoxBrHXc1kJPHPm+53UQIvPa/qu22Q5uZL39g7C Zt53zanm5QyRNgua92C8jPoNLxjiOOAEnw6zO3XnAl4W2EYDbnJqVZOhiv2HQlrC qnJZU0X4DpcXniuyyHus36AYKYSbUUnOAg4wxBwoY4c1v66lPL+808AsLN5p70DW tBN0+T5gCdOgQXXnjUq6WT/uRQo50IM8mqkGVXS/o2OJbMkJtU8VQRgDlnrI9WO3 oCPByT14KathmPz4X9PUmRP14UUvCMo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:22:44 2025 by rpki-client