$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e10beb9f-dd1d-33a5-b2ab-4440c6699254.roa File: e10beb9f-dd1d-33a5-b2ab-4440c6699254.roa (raw, json) Hash identifier: tHCnLmtMSwzN7P+J2+OANN/gS7wLkZzg4088hJhE+SE= Subject key identifier: CD:21:6E:17:7F:B1:E6:71:F4:6C:23:BF:BB:99:FD:88:88:E3:E2:BC Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584B84E77946EAB1038BEDF969C0 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e10beb9f-dd1d-33a5-b2ab-4440c6699254.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14340 IP address blocks: 13.109.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:79:46:ea:b1:03:8b:ed:f9:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=33e3d5f4-66fd-4dd7-8b83-ef8852102aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:99:71:21:ec:18:23:94:28:6c:6d:13:6e:d6: aa:3f:61:0b:30:e5:7f:3e:4d:1b:6d:27:00:20:63: 9f:7e:8c:3e:97:91:4e:fc:77:96:e7:6a:9b:df:f6: 0b:08:80:e5:e8:81:34:d6:08:c6:8b:a4:df:76:b7: ce:fa:5d:be:9e:9f:15:57:85:5f:56:7d:16:cd:ba: ee:60:df:37:71:05:49:3a:40:ba:25:96:29:1a:ae: af:48:19:3f:02:78:7f:55:19:4b:d4:8e:ba:a1:05: 0f:1d:fa:c9:c8:07:a2:01:f5:97:fc:9d:e2:df:24: 33:ab:29:d1:36:12:5b:78:16:3d:3d:0a:ae:13:10: 2a:42:d6:cf:cb:98:ce:63:f8:82:1e:07:61:42:6e: 04:06:c6:5c:ef:f4:7e:93:bf:f7:fa:ee:f6:ea:cf: d7:83:84:19:d9:18:49:1e:84:40:7f:3d:be:ca:cf: 38:1f:34:61:d3:ed:23:77:7c:71:c6:5f:75:14:06: de:d7:16:13:e1:ba:39:ee:ea:2e:12:81:1c:8e:58: 4b:1e:c7:61:5f:77:6b:0a:c6:ee:5e:1f:7a:cc:d9: 50:1b:03:e4:fe:6b:9f:03:ba:d4:c0:58:a8:a0:e6: 1f:18:dd:3d:b8:32:2f:17:0f:9b:8e:b9:f1:33:67: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:21:6E:17:7F:B1:E6:71:F4:6C:23:BF:BB:99:FD:88:88:E3:E2:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e10beb9f-dd1d-33a5-b2ab-4440c6699254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 13.109.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:8c:69:d4:7a:4f:a2:0a:ba:01:8b:5a:f4:9f:cf:98:b3:e7: 20:49:86:fa:b5:b2:b0:7d:45:69:75:5b:d6:f1:36:a7:0a:3f: 5e:53:81:37:0c:66:44:83:c0:be:35:a5:2d:81:82:ae:f5:e4: 9a:5d:82:9e:9d:f6:d7:cc:6c:b7:17:89:34:c0:4a:79:a7:83: c2:03:e4:71:cd:19:51:f2:e0:1e:c0:c7:4d:f9:d6:0e:1e:54: 71:99:48:1f:d4:d2:01:30:81:fb:90:0c:5b:49:cb:d3:ef:a9: 92:2d:04:38:ae:7a:f5:8b:dc:59:ed:2a:c7:c6:c7:14:13:aa: 47:53:fe:2b:a1:37:97:8f:39:84:af:21:a8:b7:7b:bd:fb:22: c1:e1:4e:73:e5:7c:87:be:76:0f:ef:b6:8b:c6:f7:d4:15:78: d7:a8:47:3e:64:89:a7:16:fe:bc:6e:35:e9:70:bf:93:e6:9b: 47:ec:41:b2:b9:25:a7:8c:82:5e:e1:ba:c2:ba:49:50:9f:c7: 34:e2:9d:d2:41:0f:e7:82:64:21:d0:8d:38:37:f1:d2:f6:53: 94:bf:61:0c:a1:10:ab:55:2c:4b:b5:27:b4:d0:58:d2:3d:90: e0:dd:96:38:f0:61:23:fc:e5:fc:ad:f2:4a:f7:44:1d:43:22: 42:11:8e:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53lG6rEDi+35acAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MzNlM2Q1ZjQtNjZmZC00ZGQ3LThiODMtZWY4ODUyMTAyYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJlxIewYI5QobG0TbtaqP2ELMOV/Pk0bbScA IGOffow+l5FO/HeW52qb3/YLCIDl6IE01gjGi6TfdrfO+l2+np8VV4VfVn0Wzbru YN83cQVJOkC6JZYpGq6vSBk/Anh/VRlL1I66oQUPHfrJyAeiAfWX/J3i3yQzqynR NhJbeBY9PQquExAqQtbPy5jOY/iCHgdhQm4EBsZc7/R+k7/3+u726s/Xg4QZ2RhJ HoRAfz2+ys84HzRh0+0jd3xxxl91FAbe1xYT4bo57uouEoEcjlhLHsdhX3drCsbu Xh96zNlQGwPk/mufA7rUwFiooOYfGN09uDIvFw+bjrnxM2dW6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0hbhd/seZx9Gwjv7uZ/YiI4+K8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZTEwYmViOWYtZGQxZC0z M2E1LWIyYWItNDQ0MGM2Njk5MjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCDW2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCMadR6T6IKugGLWvSfz5iz5yBJhvq1srB9RWl1W9bxNqcKP15TgTcM ZkSDwL41pS2Bgq715Jpdgp6d9tfMbLcXiTTASnmng8ID5HHNGVHy4B7Ax0351g4e VHGZSB/U0gEwgfuQDFtJy9PvqZItBDiuevWL3FntKsfGxxQTqkdT/iuhN5ePOYSv Iai3e737IsHhTnPlfIe+dg/vtovG99QVeNeoRz5kiacW/rxuNelwv5Pmm0fsQbK5 JaeMgl7husK6SVCfxzTindJBD+eCZCHQjTg38dL2U5S/YQyhEKtVLEu1J7TQWNI9 kODdljjwYSP85fyt8kr3RB1DIkIRjkw= -----END CERTIFICATE-----Generated at Sat Oct 18 04:18:12 2025 by rpki-client