$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa File: d3a3f524-d194-33cd-a5b9-49d4b272b875.roa (raw, json) Hash identifier: o+QAa7sa8sUwixVFTLSEoAxjbhXkdhVovRC/Lkl1XD8= Subject key identifier: 97:D2:38:9A:35:28:1C:DB:E0:53:A7:8B:3C:30:17:50:78:73:37:65 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584B2CF6D9D941B749DEAC632620 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 18994 IP address blocks: 162.134.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:d9:d9:41:b7:49:de:ac:63:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=dd8c6e5c-16f7-43a4-98d6-93e0451ed28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e3:ae:e0:05:54:84:aa:51:33:22:fd:8b:fc: db:05:58:38:a8:75:1d:7d:a9:9a:de:81:4d:12:4e: 2f:44:84:e6:7f:94:f4:11:b1:d3:48:0e:40:87:7c: 16:da:7d:c6:7b:39:6c:64:70:87:b5:c5:d3:c6:fc: 5e:b6:eb:1c:7b:b9:26:9a:da:f2:1c:78:eb:f6:21: ac:9f:fe:90:ad:ec:2e:b1:b5:24:cf:cc:4e:18:71: 10:33:18:83:7b:db:f0:60:4f:f0:67:02:8c:63:e2: 9c:26:9c:a1:4a:3e:c1:f0:f2:63:89:69:19:1f:5b: 08:22:b4:45:4c:b7:73:96:41:b6:10:fe:14:48:6e: 6f:1a:fb:bb:b0:52:95:1e:f8:d4:98:fa:56:8f:d6: 1f:f9:77:e5:48:de:eb:e9:3f:59:ce:78:a2:bb:54: 67:5d:b5:73:e3:8d:af:2f:34:0d:84:20:cb:51:de: 08:f9:22:3f:bc:d2:2d:47:ae:e8:24:35:f1:3e:26: f7:ad:5a:f8:37:b7:ee:c9:21:a9:bf:40:4d:4b:25: 05:39:b2:20:ff:fc:56:91:b0:8d:86:c5:46:9d:a8: b3:a4:33:ae:70:ff:4e:07:ce:fc:36:25:c4:58:c6: f6:c3:fd:0a:82:77:c5:5e:f9:ba:d2:3f:79:26:23: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D2:38:9A:35:28:1C:DB:E0:53:A7:8B:3C:30:17:50:78:73:37:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:91:c5:21:bd:f7:2e:13:ee:4d:6c:00:be:13:ed:a5:b6:b5: b8:bf:d1:a2:f6:57:b2:32:2b:b1:84:eb:d6:d0:21:58:66:53: 4c:d2:41:7f:94:65:cb:05:21:70:89:2b:6f:4a:51:49:78:f0: 94:6e:0e:b4:5d:15:ab:9c:68:bd:55:34:a8:1b:ab:98:91:d9: 9f:f0:af:c8:27:9b:e8:f4:45:a0:95:88:f9:f7:dc:81:90:d0: 5f:58:03:ec:d9:85:29:32:72:e2:76:b4:c6:4f:86:10:be:fa: bc:44:c5:af:4c:ee:2e:92:cc:0d:00:e4:9e:e8:a8:49:cb:5a: 3e:fc:74:ae:36:8d:23:9d:62:2b:24:ae:e7:79:5f:21:b0:0f: 91:07:ac:00:cd:dd:ce:d6:60:ee:ec:53:5c:4b:1d:71:77:66: 18:b6:79:af:98:28:83:88:72:bd:2f:fa:02:d0:d2:32:16:68: aa:9c:1d:7c:f5:49:13:95:8d:a4:ff:57:78:96:d7:5a:3b:25: 38:19:89:29:55:3a:95:89:67:d9:6a:81:6d:82:88:3f:63:37: e4:ac:75:71:c6:0b:d2:5f:2e:5f:12:aa:45:f1:a4:0c:b7:96: 8f:bd:ea:76:7a:f1:a8:f8:e0:61:1b:73:c7:71:ae:d5:20:03: 15:b7:1c:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tnZQbdJ3qxjJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQ4YzZlNWMtMTZmNy00M2E0LTk4ZDYtOTNlMDQ1MWVkMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguOu4AVUhKpRMyL9i/zbBVg4qHUdfama3oFN Ek4vRITmf5T0EbHTSA5Ah3wW2n3GezlsZHCHtcXTxvxetusce7kmmtryHHjr9iGs n/6QrewusbUkz8xOGHEQMxiDe9vwYE/wZwKMY+KcJpyhSj7B8PJjiWkZH1sIIrRF TLdzlkG2EP4USG5vGvu7sFKVHvjUmPpWj9Yf+XflSN7r6T9Zzniiu1RnXbVz442v LzQNhCDLUd4I+SI/vNItR67oJDXxPib3rVr4N7fuySGpv0BNSyUFObIg//xWkbCN hsVGnaizpDOucP9OB878NiXEWMb2w/0KgnfFXvm60j95JiNngQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfSOJo1KBzb4FOnizwwF1B4czdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvZDNhM2Y1MjQtZDE5NC0z M2NkLWE1YjktNDlkNGIyNzJiODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyRxSG99y4T7k1sAL4T7aW2tbi/0aL2V7IyK7GE69bQIVhmU0zSQX+U ZcsFIXCJK29KUUl48JRuDrRdFaucaL1VNKgbq5iR2Z/wr8gnm+j0RaCViPn33IGQ 0F9YA+zZhSkycuJ2tMZPhhC++rxExa9M7i6SzA0A5J7oqEnLWj78dK42jSOdYisk rud5XyGwD5EHrADN3c7WYO7sU1xLHXF3Zhi2ea+YKIOIcr0v+gLQ0jIWaKqcHXz1 SROVjaT/V3iW11o7JTgZiSlVOpWJZ9lqgW2CiD9jN+SsdXHGC9JfLl8SqkXxpAy3 lo+96nZ68aj44GEbc8dxrtUgAxW3HLM= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:48 2025 by rpki-client