$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa File: bcf274df-5509-357c-a371-e2d4c72b0723.roa (raw, json) Hash identifier: 2xhMxKOOtoZKjQzB2Dt0L4bYs2P4QFMNHal+uWXCigY= Subject key identifier: 67:D1:11:CF:EE:A7:BE:7A:7C:80:0F:A1:F4:FC:F2:32:7A:46:F3:95 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584B2CF6DA7D8D0965F7B041BF80 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 53768 IP address blocks: 162.134.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:da:7d:8d:09:65:f7:b0:41:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=f79c0b7e-2c4b-4123-95c6-e4e60baba02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6d:eb:76:f8:87:a7:77:25:f0:d8:de:1c:8e: c7:6e:eb:2a:55:7e:ff:67:6b:24:ed:64:b6:f9:b3: d5:7a:9c:49:e2:33:50:82:b2:72:b4:e0:f4:cd:5e: bb:35:cb:37:2a:83:6d:b0:de:df:b6:d4:10:da:03: 56:4f:5b:6e:b1:b0:c6:8c:e6:7b:fb:8d:fe:d2:fd: 86:59:ac:5e:99:9a:49:6d:60:1b:3f:4f:10:7f:87: 67:17:31:a5:3d:cd:5a:bd:27:e9:73:12:3e:ac:05: 94:fb:76:d9:c1:f2:dd:72:fa:2a:f9:7c:35:da:d5: 5d:c0:a5:ce:f2:66:a7:67:a4:0b:24:ee:4b:df:d3: c2:0b:2e:05:90:56:51:bb:37:30:74:eb:d1:52:2f: 55:0e:31:10:3a:36:28:25:6b:2a:50:8f:2b:0f:13: f9:f5:00:21:0f:6a:c1:13:2f:08:79:55:7d:31:fb: 74:04:56:fa:7a:55:64:df:17:89:f6:bf:ba:d0:34: d5:3e:1c:1d:44:fa:62:11:ac:81:62:af:c1:91:e4: 9a:79:80:a8:42:9d:08:36:2a:05:fa:88:a8:d7:8d: 39:3d:97:6c:fc:28:43:ff:ae:bb:06:23:f3:a1:df: 30:53:2e:32:85:62:60:55:90:26:33:30:eb:9d:ea: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D1:11:CF:EE:A7:BE:7A:7C:80:0F:A1:F4:FC:F2:32:7A:46:F3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bcf274df-5509-357c-a371-e2d4c72b0723.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:37:b4:2b:52:e3:a9:6c:65:b8:f9:9b:5c:36:4f:a7:06:27: fa:c0:29:9b:ce:e6:cd:79:20:1d:70:39:2a:d5:4b:1e:65:3a: ad:67:dd:85:30:81:ed:bd:f4:4f:ff:29:60:5a:5f:2d:3a:e9: fd:1f:e0:6a:90:08:16:f2:a7:3b:54:8c:19:40:99:70:94:50: c5:2c:00:b9:b8:a7:e6:59:93:b6:a4:e9:f5:30:2c:fc:96:1d: 4a:14:03:ec:3e:6e:bc:8d:9f:f4:34:1b:0d:e6:57:d3:76:7b: aa:50:72:f5:4e:0c:31:8e:5c:48:90:00:e3:4a:1f:0d:09:21: 1a:de:dd:0a:28:7b:04:43:95:1b:76:33:b2:01:ac:b5:20:3f: d1:bd:e6:5f:ba:ff:9b:df:46:8d:b1:22:8c:d1:6f:c5:56:ca: 26:75:f5:b7:86:c0:fe:3c:dd:5d:91:4f:b8:7c:5a:56:52:f6: 1d:3c:40:9e:b2:f2:bb:92:c6:da:5d:0f:c5:22:2d:74:02:43: e2:41:f3:60:b4:29:cf:f1:df:c5:50:da:82:26:81:f6:cc:50: 2f:ab:06:50:45:80:ef:9a:5b:89:92:dd:88:c4:86:34:a2:05: 37:9a:35:46:e8:59:d6:71:b0:70:53:d4:d7:bc:bf:bb:e3:35: 5a:39:4b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tp9jQll97BBv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk Zjc5YzBiN2UtMmM0Yi00MTIzLTk1YzYtZTRlNjBiYWJhMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh23rdviHp3cl8NjeHI7HbusqVX7/Z2sk7WS2 +bPVepxJ4jNQgrJytOD0zV67Ncs3KoNtsN7fttQQ2gNWT1tusbDGjOZ7+43+0v2G WaxemZpJbWAbP08Qf4dnFzGlPc1avSfpcxI+rAWU+3bZwfLdcvoq+Xw12tVdwKXO 8manZ6QLJO5L39PCCy4FkFZRuzcwdOvRUi9VDjEQOjYoJWsqUI8rDxP59QAhD2rB Ey8IeVV9Mft0BFb6elVk3xeJ9r+60DTVPhwdRPpiEayBYq/BkeSaeYCoQp0INioF +oio1405PZds/ChD/667BiPzod8wUy4yhWJgVZAmMzDrneoolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfREc/up756fIAPofT88jJ6RvOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvYmNmMjc0ZGYtNTUwOS0z NTdjLWEzNzEtZTJkNGM3MmIwNzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBooZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI3tCtS46lsZbj5m1w2T6cGJ/rAKZvO5s15IB1wOSrVSx5lOq1n3YUw ge299E//KWBaXy066f0f4GqQCBbypztUjBlAmXCUUMUsALm4p+ZZk7ak6fUwLPyW HUoUA+w+bryNn/Q0Gw3mV9N2e6pQcvVODDGOXEiQAONKHw0JIRre3QooewRDlRt2 M7IBrLUgP9G95l+6/5vfRo2xIozRb8VWyiZ19beGwP483V2RT7h8WlZS9h08QJ6y 8ruSxtpdD8UiLXQCQ+JB82C0Kc/x38VQ2oImgfbMUC+rBlBFgO+aW4mS3YjEhjSi BTeaNUboWdZxsHBT1Ne8v7vjNVo5S/o= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:46 2025 by rpki-client