$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/36900df0-0c64-38e9-a32b-d2bf819186c9.roa File: 36900df0-0c64-38e9-a32b-d2bf819186c9.roa (raw, json) Hash identifier: 8yl+rX0TWnyqmeKlPt2DQcS3UZcYXgpwPMN81anMQws= Subject key identifier: B6:22:73:78:E7:48:8C:62:79:95:70:FE:B1:87:A6:78:DE:72:09:63 Certificate issuer: /CN=bbe97a67-0973-4bfa-934d-628e0334b705 Certificate serial: 010D0C9F4328584B2E5C44AA9F80A6BE4600D880 Authority key identifier: 85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/36900df0-0c64-38e9-a32b-d2bf819186c9.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 395279 IP address blocks: 134.199.48.0/24 maxlen: 24 134.199.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:44:aa:9f:80:a6:be:46:00:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe97a67-0973-4bfa-934d-628e0334b705 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=d1c38e53-6229-4efd-9c58-4934bd5592c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e9:06:c1:5a:ef:3d:73:a9:d0:92:44:8f:8e: d4:65:e3:88:43:6c:4a:a0:f7:46:e1:fd:83:03:3c: 2f:62:64:f4:fc:8d:84:52:20:96:01:17:d6:e4:60: 0d:e1:20:61:6b:76:ba:05:75:59:81:48:52:ee:57: 3b:5a:c3:8d:1a:5f:90:c9:48:99:d0:3c:5f:bb:8d: 3f:f4:25:7c:5f:05:b1:cf:6d:42:bd:ea:9b:09:5f: ed:00:6f:81:62:f1:ad:b3:16:02:81:06:9b:89:34: 39:00:0f:06:ae:04:33:c5:bf:2d:29:26:98:54:d6: a2:f6:ac:07:cd:a7:a1:2a:2f:4f:c2:79:44:41:5c: 8e:7f:37:6b:99:7d:89:25:ea:3e:50:ef:51:4d:4c: 78:ea:23:dd:93:a8:dd:5f:b5:44:13:04:ad:e2:7c: 7d:d2:d1:05:b5:92:c7:74:46:68:73:6a:28:3c:fa: 18:c7:8a:3b:80:4e:fa:09:b6:19:29:75:1e:ae:4b: fd:dd:22:37:f2:3f:e9:4e:39:86:7e:d9:b5:61:64: ff:70:32:d8:47:d8:45:9a:2e:26:5a:00:3b:17:82: 70:e8:fc:81:20:f6:7b:d9:9b:cb:d3:69:c0:ae:7c: d0:e5:eb:5b:30:ce:45:c5:29:0c:07:e3:ff:1e:43: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:22:73:78:E7:48:8C:62:79:95:70:FE:B1:87:A6:78:DE:72:09:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/36900df0-0c64-38e9-a32b-d2bf819186c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705/bbe97a67-0973-4bfa-934d-628e0334b705.crl X509v3 Authority Key Identifier: keyid:85:D7:28:E1:02:6D:6C:2D:08:41:45:CA:19:40:EB:08:F7:21:B3:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bbe97a67-0973-4bfa-934d-628e0334b705.cer sbgp-ipAddrBlock: critical IPv4: 134.199.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8f:b5:2c:32:51:7e:c8:c5:25:75:0d:6f:49:41:f7:53:26: 1d:dc:82:e9:fc:4d:f1:dd:0b:c0:d1:31:fe:a5:da:b9:e9:6e: d7:00:02:5b:51:04:39:a0:ed:14:85:b3:08:5d:81:2c:7c:f6: 51:df:be:3e:03:ae:2a:ff:e6:cd:50:4f:ce:f9:c9:21:1c:67: 39:4f:ed:24:7e:e6:47:d0:ec:a4:3d:66:d4:f8:d5:37:0c:6c: 3c:f1:70:37:ec:68:fd:f6:cd:4e:98:ef:e0:9d:a1:83:17:2b: 92:5a:25:03:d3:cf:dd:6c:8e:86:6d:4c:0e:08:9b:a9:2f:7f: b5:79:46:2d:78:0d:0c:7f:ab:ec:e5:51:88:0a:d5:78:22:e1: 31:97:73:f5:2a:1d:53:62:30:79:74:43:19:04:c4:cf:94:3d: cf:0a:12:da:69:a4:f5:a7:b2:da:d8:21:8e:ad:2c:69:7b:48: 10:c1:65:17:88:bc:ca:05:02:92:d3:26:49:45:90:57:92:a3: a2:f8:54:21:7c:94:05:0a:8a:6d:18:9f:59:23:c9:0b:91:0b: cb:0c:5e:57:68:8d:c4:36:1f:a4:16:95:16:7d:51:9f:5c:f8: d8:ec:bf:8d:9c:e2:14:22:0d:ae:b7:6b:a2:4a:36:fe:85:c0: 3c:86:b3:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXESqn4CmvkYA2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJlOTdhNjctMDk3My00YmZhLTkzNGQtNjI4ZTAzMzRi NzA1MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZDFjMzhlNTMtNjIyOS00ZWZkLTljNTgtNDkzNGJkNTU5MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgukGwVrvPXOp0JJEj47UZeOIQ2xKoPdG4f2D AzwvYmT0/I2EUiCWARfW5GAN4SBha3a6BXVZgUhS7lc7WsONGl+QyUiZ0Dxfu40/ 9CV8XwWxz21CveqbCV/tAG+BYvGtsxYCgQabiTQ5AA8GrgQzxb8tKSaYVNai9qwH zaehKi9PwnlEQVyOfzdrmX2JJeo+UO9RTUx46iPdk6jdX7VEEwSt4nx90tEFtZLH dEZoc2ooPPoYx4o7gE76CbYZKXUerkv93SI38j/pTjmGftm1YWT/cDLYR9hFmi4m WgA7F4Jw6PyBIPZ72ZvL02nArnzQ5etbMM5FxSkMB+P/HkPQ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYic3jnSIxieZVw/rGHpnjecgljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5 N2E2Ny0wOTczLTRiZmEtOTM0ZC02MjhlMDMzNGI3MDUvMzY5MDBkZjAtMGM2NC0z OGU5LWEzMmItZDJiZjgxOTE4NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmJlOTdhNjctMDk3My00YmZhLTkz NGQtNjI4ZTAzMzRiNzA1L2JiZTk3YTY3LTA5NzMtNGJmYS05MzRkLTYyOGUwMzM0 YjcwNS5jcmwwHwYDVR0jBBgwFoAUhdco4QJtbC0IQUXKGUDrCPchs+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYmU5N2E2Ny0wOTczLTRiZmEtOTM0ZC02Mjhl MDMzNGI3MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhscwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2PtSwyUX7IxSV1DW9JQfdTJh3cgun8TfHdC8DRMf6l2rnpbtcAAltR BDmg7RSFswhdgSx89lHfvj4Drir/5s1QT875ySEcZzlP7SR+5kfQ7KQ9ZtT41TcM bDzxcDfsaP32zU6Y7+CdoYMXK5JaJQPTz91sjoZtTA4Im6kvf7V5Ri14DQx/q+zl UYgK1Xgi4TGXc/UqHVNiMHl0QxkExM+UPc8KEtpppPWnstrYIY6tLGl7SBDBZReI vMoFApLTJklFkFeSo6L4VCF8lAUKim0Yn1kjyQuRC8sMXldojcQ2H6QWlRZ9UZ9c +Njsv42c4hQiDa63a6JKNv6FwDyGs98= -----END CERTIFICATE-----Generated at Fri Oct 10 17:34:48 2025 by rpki-client