$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/528c6eca-658f-3db1-96f1-978471e85ca5.roa File: 528c6eca-658f-3db1-96f1-978471e85ca5.roa (raw, json) Hash identifier: g/p++eu2tZSVosN9CWuqiOSiTHF9La3QartfgZftJAo= Subject key identifier: 06:6B:57:38:DC:76:5B:47:3B:38:4B:F6:5B:83:D8:F9:73:60:46:0D Certificate issuer: /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Certificate serial: 010D0C9F4328584B23319856073F9458D15ED180 Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/528c6eca-658f-3db1-96f1-978471e85ca5.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 26229 IP address blocks: 162.138.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:98:56:07:3f:94:58:d1:5e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=3eefb3db-276a-43eb-afb6-15b1946328ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:ea:43:84:b3:ba:b0:ab:f6:4e:13:2d:2b: f8:c6:e4:07:dc:29:5a:f1:ba:be:f0:f6:47:3e:42: 94:89:da:47:47:aa:02:7f:92:91:64:b9:63:c2:3f: 8a:14:9a:94:d2:51:52:95:ff:bd:db:43:8c:c2:29: 2c:7a:86:9b:37:d2:e0:3f:c8:8d:43:a3:c3:83:5e: 91:73:87:96:86:d4:d1:72:20:f3:f8:ce:5e:c4:f4: d4:df:44:3c:b4:dc:41:97:53:8e:43:db:5e:1c:48: 64:d7:ec:f5:9e:68:6f:27:ab:95:d4:cb:be:4c:e1: 56:ab:80:ef:9d:a6:b8:a6:99:99:56:f6:06:ad:36: ea:c7:a0:ff:ee:91:8a:92:e7:1c:6a:48:c5:0a:b2: 43:78:b0:c0:a9:89:2d:37:4f:b1:3b:72:cb:5e:48: a7:41:bd:c4:d1:92:4e:04:01:77:b3:db:d8:d0:79: d4:25:36:ed:8a:c0:dd:ae:94:91:52:62:38:99:35: 9c:b8:84:7b:a9:2c:84:ca:bf:eb:eb:2d:62:8a:94: 88:d8:be:6c:2b:50:87:cd:60:1e:40:3d:68:86:df: e2:19:bf:f3:26:71:ea:ac:86:53:03:86:0b:e2:2a: 28:31:5e:54:73:4b:a6:04:54:f1:a5:40:e6:6d:e2: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6B:57:38:DC:76:5B:47:3B:38:4B:F6:5B:83:D8:F9:73:60:46:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/528c6eca-658f-3db1-96f1-978471e85ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl X509v3 Authority Key Identifier: keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer sbgp-ipAddrBlock: critical IPv4: 162.138.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:49:04:4b:d3:06:08:04:17:33:00:46:eb:60:5d:89:94:12: 85:d9:18:64:98:4f:bc:2d:92:a4:d4:56:cf:f5:12:92:1c:73: ba:78:9d:5e:27:f9:cb:a4:7a:f7:31:8e:23:ef:5e:09:9e:89: 6a:17:09:64:57:34:a6:5a:b2:aa:e5:08:da:cc:2a:d0:b4:0c: 49:52:03:da:55:06:ab:c9:20:bf:ca:42:26:32:9c:aa:bc:e7: cd:cf:15:f9:6c:a9:c8:b6:dc:19:17:33:d2:63:07:44:11:18: e4:9c:68:0d:95:3d:77:5d:d4:52:a8:e7:95:49:72:0a:0c:db: 3b:5c:b9:a9:eb:48:d2:f4:31:fe:5f:cc:ea:12:2a:d4:56:ba: 5d:cb:ce:21:4e:ee:84:0a:a9:b6:b6:c0:ae:14:cb:c9:4f:b4: 25:eb:51:33:3b:1a:e3:00:ad:36:25:67:62:21:65:b4:9a:42: bf:7a:e9:39:d4:10:8d:a2:ce:1c:22:0c:98:4a:7d:d5:f3:dc: 98:85:25:6d:3e:a3:1b:e4:67:5b:ff:6b:97:03:09:34:3e:77: cc:68:08:d7:77:4a:97:bf:4a:9b:6f:3d:c4:15:d5:22:72:ca: a6:ad:43:db:89:9f:2b:f8:66:f3:9c:42:80:20:fb:31:af:4f: b2:80:dd:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZhWBz+UWNFe0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA5ZjllOGItOTMwNy00ZWIwLWJhNzctOWIxNDE2OWJi ZWJhMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk M2VlZmIzZGItMjc2YS00M2ViLWFmYjYtMTViMTk0NjMyOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjbqQ4SzurCr9k4TLSv4xuQH3Cla8bq+8PZH PkKUidpHR6oCf5KRZLljwj+KFJqU0lFSlf+920OMwikseoabN9LgP8iNQ6PDg16R c4eWhtTRciDz+M5exPTU30Q8tNxBl1OOQ9teHEhk1+z1nmhvJ6uV1Mu+TOFWq4Dv naa4ppmZVvYGrTbqx6D/7pGKkuccakjFCrJDeLDAqYktN0+xO3LLXkinQb3E0ZJO BAF3s9vY0HnUJTbtisDdrpSRUmI4mTWcuIR7qSyEyr/r6y1iipSI2L5sK1CHzWAe QD1oht/iGb/zJnHqrIZTA4YL4iooMV5Uc0umBFTxpUDmbeKOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZrVzjcdltHOzhL9luD2PlzYEYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlm OWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0MTY5YmJlYmEvNTI4YzZlY2EtNjU4Zi0z ZGIxLTk2ZjEtOTc4NDcxZTg1Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzA5ZjllOGItOTMwNy00ZWIwLWJh NzctOWIxNDE2OWJiZWJhL2MwOWY5ZThiLTkzMDctNGViMC1iYTc3LTliMTQxNjli YmViYS5jcmwwHwYDVR0jBBgwFoAU/ZKogq57090/RlGRmqMOn6kqGMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDlmOWU4Yi05MzA3LTRlYjAtYmE3Ny05YjE0 MTY5YmJlYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpJBEvTBggEFzMARutgXYmUEoXZGGSYT7wtkqTUVs/1EpIcc7p4nV4n +cukevcxjiPvXgmeiWoXCWRXNKZasqrlCNrMKtC0DElSA9pVBqvJIL/KQiYynKq8 583PFflsqci23BkXM9JjB0QRGOScaA2VPXdd1FKo55VJcgoM2ztcuanrSNL0Mf5f zOoSKtRWul3LziFO7oQKqba2wK4Uy8lPtCXrUTM7GuMArTYlZ2IhZbSaQr966TnU EI2izhwiDJhKfdXz3JiFJW0+oxvkZ1v/a5cDCTQ+d8xoCNd3Spe/SptvPcQV1SJy yqatQ9uJnyv4ZvOcQoAg+zGvT7KA3T4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:29 2025 by rpki-client