$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/748bb44b-091e-3726-b886-da5037a2cbe0.roa File: 748bb44b-091e-3726-b886-da5037a2cbe0.roa (raw, json) Hash identifier: F8yLIi2bd0PxI7d+ld04eb2Jz3n5VAMi0oRQfsoJFnI= Subject key identifier: E1:4E:CE:A6:7A:53:8D:B6:DD:1A:98:8C:3D:1D:56:64:CA:8B:3F:88 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584B2CF6DA1AD7F5783E2DAA8AA0 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/748bb44b-091e-3726-b886-da5037a2cbe0.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 53768 IP address blocks: 162.134.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:da:1a:d7:f5:78:3e:2d:aa:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=2822c224-91bd-4edc-8e7a-58291b515012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:ce:82:7e:1e:b3:f3:14:29:1f:1d:64:52: 7f:93:b0:b6:07:9b:8c:1f:91:7b:4c:7d:52:ae:1e: f3:76:8b:5e:3d:13:3e:f1:06:0b:cd:83:f7:8f:3a: bb:a5:2b:17:4c:74:03:42:72:65:42:3f:82:da:ac: 0d:10:2d:49:53:58:97:5d:ad:96:8a:1e:9e:b6:7b: b2:c3:8d:4b:b4:5f:5d:ec:80:f0:db:21:a0:c0:57: 1a:3e:e5:1d:05:99:cd:35:96:87:0d:40:f4:1a:05: f9:e9:75:e2:78:a5:07:10:b3:31:c1:dd:56:5d:b6: 84:f5:1d:7e:ad:27:8a:41:21:71:04:e4:31:7c:5c: c7:fb:7d:bb:04:3c:36:84:4b:6e:4c:2d:fa:3b:70: e0:1f:ab:3f:6f:be:29:c2:f4:85:ec:c6:07:7a:f9: 8a:59:1f:a7:04:de:8e:28:ea:d5:80:53:10:ee:bd: 9d:55:f9:22:40:03:26:23:fb:dc:ba:92:79:02:ee: c7:13:ae:93:c1:91:60:09:c9:df:a3:db:d2:13:16: 3f:9b:41:5e:d8:b1:d1:41:82:02:ec:bc:f5:b4:56: e4:19:74:d9:73:f0:7f:22:b7:ee:b0:a4:bc:3d:b7: a1:95:bf:e9:7a:c7:7a:84:13:4f:83:1a:1d:10:ec: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4E:CE:A6:7A:53:8D:B6:DD:1A:98:8C:3D:1D:56:64:CA:8B:3F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/748bb44b-091e-3726-b886-da5037a2cbe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d7:d8:89:a2:18:1d:a8:e1:8e:90:70:fd:57:5c:a6:31:8f: 1b:d5:ce:5a:4a:79:1e:51:2d:c1:da:e6:8e:f3:3a:18:e6:91: a5:94:9a:ba:79:31:82:41:ee:94:f1:ef:18:10:b3:af:2e:33: 16:0d:f7:55:f7:85:81:5d:5c:36:14:11:8d:f1:f0:95:a7:68: 88:82:e2:0e:b4:da:f5:22:ea:8d:df:80:f4:b8:87:a4:b0:6e: a3:e1:c5:13:24:15:fd:e2:92:d9:68:43:fa:fa:2e:c2:0d:99: 24:94:31:94:8c:74:56:fb:ff:9b:6a:b5:c7:c8:0b:d2:ec:52: 66:be:44:7a:d5:91:20:cf:c0:e8:3d:d7:fe:cd:cc:16:3a:5e: fe:49:20:e3:53:fd:25:35:f5:6b:c3:45:9a:06:19:83:37:d5: 93:a8:20:16:64:12:72:87:aa:91:dd:9f:b1:6e:4b:b3:c3:9c: c0:0a:74:a9:cd:91:76:18:66:af:e3:d8:db:c4:8e:c7:4e:c7: d1:94:0b:66:9e:67:e2:f0:79:df:f4:17:c1:85:19:05:e8:41: 12:82:29:0e:0f:e3:0e:78:2b:33:6f:12:55:5c:54:70:9a:c7: d6:86:56:29:b4:83:5d:b9:88:d1:0b:44:11:79:10:af:c6:f8: be:35:cf:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9toa1/V4Pi2qiqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MjgyMmMyMjQtOTFiZC00ZWRjLThlN2EtNTgyOTFiNTE1MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdTOgn4es/MUKR8dZFJ/k7C2B5uMH5F7TH1S rh7zdotePRM+8QYLzYP3jzq7pSsXTHQDQnJlQj+C2qwNEC1JU1iXXa2Wih6etnuy w41LtF9d7IDw2yGgwFcaPuUdBZnNNZaHDUD0GgX56XXieKUHELMxwd1WXbaE9R1+ rSeKQSFxBOQxfFzH+327BDw2hEtuTC36O3DgH6s/b74pwvSF7MYHevmKWR+nBN6O KOrVgFMQ7r2dVfkiQAMmI/vcupJ5Au7HE66TwZFgCcnfo9vSExY/m0Fe2LHRQYIC 7Lz1tFbkGXTZc/B/IrfusKS8Pbehlb/pesd6hBNPgxodEOzaAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFOzqZ6U4223RqYjD0dVmTKiz+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvNzQ4YmI0NGItMDkxZS0z NzI2LWI4ODYtZGE1MDM3YTJjYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEooZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/X2ImiGB2o4Y6QcP1XXKYxjxvVzlpKeR5RLcHa5o7zOhjmkaWUmrp5 MYJB7pTx7xgQs68uMxYN91X3hYFdXDYUEY3x8JWnaIiC4g602vUi6o3fgPS4h6Sw bqPhxRMkFf3iktloQ/r6LsINmSSUMZSMdFb7/5tqtcfIC9LsUma+RHrVkSDPwOg9 1/7NzBY6Xv5JIONT/SU19WvDRZoGGYM31ZOoIBZkEnKHqpHdn7FuS7PDnMAKdKnN kXYYZq/j2NvEjsdOx9GUC2aeZ+Lwed/0F8GFGQXoQRKCKQ4P4w54KzNvElVcVHCa x9aGVim0g125iNELRBF5EK/G+L41z6M= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:55 2025 by rpki-client