$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/8e78b6d7-c15a-3312-9aef-29431360dad4.roa File: 8e78b6d7-c15a-3312-9aef-29431360dad4.roa (raw, json) Hash identifier: DVCyP8cK2NdjHI7oxJ/2ppN/B0Ldfg8yC04lqs8OFTk= Subject key identifier: 72:4E:A8:25:FC:4C:1D:2E:9A:A4:3F:BC:BF:3F:6E:CF:33:88:70:28 Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584B2FC1BA5DC71C51E8385D9648 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/8e78b6d7-c15a-3312-9aef-29431360dad4.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 27395 IP address blocks: 162.248.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ba:5d:c7:1c:51:e8:38:5d:96:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=ba53b25d-caca-453c-abf4-0ed29d7905c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:c9:98:80:26:0a:3c:5e:87:33:96:7e:1b: e8:77:c6:0f:56:d3:51:fc:2c:e6:5e:d9:df:33:af: 27:e8:1a:37:62:94:27:b4:53:c6:e5:3b:e4:f9:ba: f5:25:2a:cb:a7:2e:09:16:0e:75:1d:23:73:4e:e9: fe:b1:b1:70:a8:83:37:98:b2:bc:71:93:0d:af:cd: b6:63:4c:3f:0a:78:c7:37:70:5c:a2:f9:d5:f9:a3: 95:d4:20:dd:14:37:88:08:46:92:2f:d4:8d:95:06: 78:37:25:77:00:65:84:5b:ef:61:09:3f:a8:d8:05: af:e0:89:d5:c8:37:8e:d8:10:69:b4:40:73:bf:84: 95:fc:2d:03:3a:c4:35:31:b5:e8:58:9d:46:c6:64: 9a:83:a2:4f:e8:ec:be:37:c7:60:bf:3d:be:14:a6: 9f:6b:32:1c:74:25:2a:ad:af:0a:3c:22:fc:2b:14: c5:e0:38:ae:f7:77:b9:fc:f3:e6:a7:ab:02:33:e5: 8e:4a:61:97:85:72:d6:63:0c:5d:44:1e:a2:06:3e: 2c:6a:3a:c1:75:92:31:91:ef:31:59:3c:ec:c2:2a: 86:79:3c:09:07:e0:e2:65:ca:e7:ed:03:cb:70:10: c5:5a:b8:28:9f:b6:63:d9:39:d1:40:44:bb:23:99: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4E:A8:25:FC:4C:1D:2E:9A:A4:3F:BC:BF:3F:6E:CF:33:88:70:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/8e78b6d7-c15a-3312-9aef-29431360dad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 162.248.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f1:e5:d5:7b:81:bc:eb:3f:e9:f1:2d:1d:55:39:c5:17:fe: 9a:68:be:d1:1b:76:83:94:d6:3c:88:e0:e3:25:98:bf:4a:4b: f3:86:04:dd:82:d1:3f:18:c5:b5:c9:3a:0c:ba:1d:38:87:22: d4:0b:42:20:9b:4e:ec:5a:58:d9:2b:6e:40:82:21:98:82:29: 42:f3:43:26:5d:7a:36:ba:5a:d7:59:94:f2:bb:6e:f0:3b:63: 50:1e:90:48:0a:fc:16:f7:af:c8:12:29:89:c1:3f:fb:d6:3a: b6:dc:52:cd:ce:15:6e:a0:4b:c0:e1:99:2a:ed:bc:67:d0:df: 98:bc:35:4a:ec:96:46:65:ea:4c:81:87:1c:d4:b3:d0:f7:0c: c1:c2:ef:9a:cf:fe:4b:db:43:63:ef:82:97:bd:6c:e3:e3:9d: 5e:31:3b:e0:1a:a9:87:2a:55:f9:87:de:ea:13:79:38:23:c1: 08:c8:d5:29:d8:69:c0:6b:97:1c:b3:d9:be:bd:32:30:5e:a9: 41:cb:3e:5b:75:88:77:1a:b3:54:f1:bc:f4:86:99:02:96:cd: 7e:0e:4b:95:8e:aa:7d:c2:db:bc:1d:80:7e:77:57:00:de:4b: 08:50:c4:8a:72:57:85:75:32:b8:81:53:ba:7e:70:2e:a2:36: dd:ba:6a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbpdxxxR6DhdlkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YmE1M2IyNWQtY2FjYS00NTNjLWFiZjQtMGVkMjlkNzkwNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms/JmIAmCjxehzOWfhvod8YPVtNR/CzmXtnf M68n6Bo3YpQntFPG5Tvk+br1JSrLpy4JFg51HSNzTun+sbFwqIM3mLK8cZMNr822 Y0w/CnjHN3BcovnV+aOV1CDdFDeICEaSL9SNlQZ4NyV3AGWEW+9hCT+o2AWv4InV yDeO2BBptEBzv4SV/C0DOsQ1MbXoWJ1GxmSag6JP6Oy+N8dgvz2+FKafazIcdCUq ra8KPCL8KxTF4Diu93e5/PPmp6sCM+WOSmGXhXLWYwxdRB6iBj4sajrBdZIxke8x WTzswiqGeTwJB+DiZcrn7QPLcBDFWrgon7Zj2TnRQES7I5mCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJOqCX8TB0umqQ/vL8/bs8ziHAoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvOGU3OGI2ZDctYzE1YS0z MzEyLTlhZWYtMjk0MzEzNjBkYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoviFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjx5dV7gbzrP+nxLR1VOcUX/ppovtEbdoOU1jyI4OMlmL9KS/OGBN2C 0T8YxbXJOgy6HTiHItQLQiCbTuxaWNkrbkCCIZiCKULzQyZdeja6WtdZlPK7bvA7 Y1AekEgK/Bb3r8gSKYnBP/vWOrbcUs3OFW6gS8DhmSrtvGfQ35i8NUrslkZl6kyB hxzUs9D3DMHC75rP/kvbQ2Pvgpe9bOPjnV4xO+AaqYcqVfmH3uoTeTgjwQjI1SnY acBrlxyz2b69MjBeqUHLPlt1iHcas1TxvPSGmQKWzX4OS5WOqn3C27wdgH53VwDe SwhQxIpyV4V1MriBU7p+cC6iNt26avg= -----END CERTIFICATE-----Generated at Sat Oct 11 19:03:48 2025 by rpki-client