$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa File: f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa (raw, json) Hash identifier: wmxf8Clq+3Tz9LaXriGNgorKSy4wzaK+aPqOB0j5CKU= Subject key identifier: 40:CB:A9:E4:92:B9:59:97:56:E7:B8:52:43:B2:98:FC:0F:2F:CE:D0 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584B2CF6DB062451D6B934D8BD80 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 53768 IP address blocks: 162.134.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:db:06:24:51:d6:b9:34:d8:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=dfe8a542-c7f9-40ae-bfd8-37078a2c97a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:f8:31:86:f6:76:45:39:76:8e:45:7c:b9: ad:12:f8:ac:bd:4b:d8:32:7b:56:50:2f:76:46:e3: ec:3b:db:10:d5:56:b0:35:7d:93:a4:07:a0:5e:bf: 53:d4:fc:7d:6a:b9:94:80:7b:c7:1b:14:24:7f:d6: ee:b0:80:94:29:d7:79:99:4d:d7:5c:8a:d5:aa:17: fc:ee:69:ce:bf:1a:06:11:fd:21:6d:33:44:98:b4: 04:cf:19:cd:c7:43:83:69:83:85:b0:68:c7:6d:75: a1:53:c1:6b:b6:64:c6:c3:55:c1:1e:1f:c7:9c:37: e2:1b:3f:12:9e:f0:ee:b6:bf:f7:40:bb:0c:0a:d6: 5e:ad:b4:af:5e:38:08:8c:72:4a:6b:df:7e:a8:ce: 8d:5d:48:eb:ac:07:b7:b9:76:cd:41:43:0a:e2:4f: de:7e:05:3f:78:6f:18:22:6b:4d:46:6e:27:eb:4a: 10:90:20:72:ed:fa:5d:5a:db:7c:a4:bd:17:04:d8: 32:f1:64:a5:80:71:fe:41:0b:df:3c:40:b2:2c:a1: 3b:7a:4f:9b:f3:a6:1f:ab:54:41:38:96:97:6a:b0: 36:2a:c2:73:82:a5:45:c3:44:20:8d:bc:8f:63:1e: 0f:27:39:ed:7b:e8:7b:15:19:2d:9f:3f:2f:e7:85: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CB:A9:E4:92:B9:59:97:56:E7:B8:52:43:B2:98:FC:0F:2F:CE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c0:ec:54:97:18:1d:30:85:64:c1:15:86:25:49:32:3b:ca: 2c:74:10:75:a5:44:66:0e:de:d6:bc:e3:0e:98:6e:80:df:eb: f8:b7:a7:0d:04:87:d0:d1:3e:34:eb:14:69:38:bf:a3:40:d3: eb:61:e1:02:db:80:75:6c:41:12:4c:9e:65:8e:f7:85:e1:33: 16:d5:fb:d7:e2:3a:33:48:dc:af:37:78:96:17:db:c2:e5:d0: aa:d3:98:8a:9f:3b:8a:ff:c7:1a:ed:ac:a6:e0:67:f2:59:80: 17:e1:e1:31:42:2b:2c:6b:eb:09:de:04:7a:75:bd:54:35:fe: 70:f4:7f:7c:75:5b:72:a1:84:12:c6:d4:82:39:a9:b4:2b:ed: 9d:d3:7b:fe:45:2a:96:a1:7c:4a:75:43:64:85:44:77:c2:5b: e8:59:26:63:69:3b:20:09:d5:38:3b:37:5f:b6:42:39:ef:39: 10:c7:96:5d:6e:15:5f:79:75:10:c4:f0:b8:4f:9d:70:77:83: 56:45:b6:d1:92:95:c5:27:3f:80:3b:e5:fd:d6:09:34:8a:45: 9a:f1:a8:31:90:32:2f:12:55:7a:04:d5:36:ec:52:c7:7d:f5: ab:94:e0:50:8b:a1:05:74:9a:35:9e:96:05:f8:b0:5f:00:2a: e9:ea:f8:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9tsGJFHWuTTYvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGZlOGE1NDItYzdmOS00MGFlLWJmZDgtMzcwNzhhMmM5N2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIz4MYb2dkU5do5FfLmtEvisvUvYMntWUC92 RuPsO9sQ1VawNX2TpAegXr9T1Px9armUgHvHGxQkf9busICUKdd5mU3XXIrVqhf8 7mnOvxoGEf0hbTNEmLQEzxnNx0ODaYOFsGjHbXWhU8FrtmTGw1XBHh/HnDfiGz8S nvDutr/3QLsMCtZerbSvXjgIjHJKa99+qM6NXUjrrAe3uXbNQUMK4k/efgU/eG8Y ImtNRm4n60oQkCBy7fpdWtt8pL0XBNgy8WSlgHH+QQvfPECyLKE7ek+b86Yfq1RB OJaXarA2KsJzgqVFw0QgjbyPYx4PJznte+h7FRktnz8v54X/FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDLqeSSuVmXVue4UkOymPwPL87QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvZjUzOWNmZDEtOTUwMy0z MWUwLWEzODMtMmRiZTNiYWNkODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATA7FSXGB0whWTBFYYlSTI7yix0EHWlRGYO3ta84w6YboDf6/i3pw0E h9DRPjTrFGk4v6NA0+th4QLbgHVsQRJMnmWO94XhMxbV+9fiOjNI3K83eJYX28Ll 0KrTmIqfO4r/xxrtrKbgZ/JZgBfh4TFCKyxr6wneBHp1vVQ1/nD0f3x1W3KhhBLG 1II5qbQr7Z3Te/5FKpahfEp1Q2SFRHfCW+hZJmNpOyAJ1Tg7N1+2QjnvORDHll1u FV95dRDE8LhPnXB3g1ZFttGSlcUnP4A75f3WCTSKRZrxqDGQMi8SVXoE1TbsUsd9 9auU4FCLoQV0mjWelgX4sF8AKunq+Aw= -----END CERTIFICATE-----Generated at Fri Oct 10 23:36:55 2025 by rpki-client