$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa File: a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa (raw, json) Hash identifier: SGnXtELJ5begIB8LfqJj48fdKKafQMvNnD8ev61NOZc= Subject key identifier: 4C:76:82:B6:A3:2F:F2:D8:E0:EA:A7:8C:3E:59:C2:7C:02:E0:ED:27 Certificate issuer: /CN=ff58fb87-11da-4b05-b322-2070c2639fa7 Certificate serial: 010D0C9F4328584B785745BF2ED7D5F86BA2CE60 Authority key identifier: 02:1A:0A:17:9D:49:29:1F:8C:B0:63:92:C3:31:DE:DD:EC:EF:8F:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 40591 IP address blocks: 134.82.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:45:bf:2e:d7:d5:f8:6b:a2:ce:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff58fb87-11da-4b05-b322-2070c2639fa7 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=eaff54a1-8210-4592-80e9-384ee4625c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:e8:c7:da:19:fb:01:99:31:50:a4:4a:07: 80:96:73:ab:0d:35:b3:da:f6:bb:01:17:1f:0d:f5: 45:d6:c0:cc:c1:93:04:1d:a5:79:ba:ed:be:9a:d3: 5d:3d:75:c7:a9:39:e8:0f:17:ee:ec:a5:61:40:5c: de:18:32:e3:ee:7b:fb:d3:be:24:bf:96:92:d7:7e: 9a:36:b5:0d:c8:0c:5a:f3:e4:ed:63:5f:42:a3:c8: 66:63:a2:1f:f3:b7:85:40:02:22:06:84:7d:1e:7b: 0e:15:80:68:e7:fd:b3:e4:40:35:78:eb:21:10:4f: 01:bd:a4:0a:6f:81:a3:14:e2:d7:85:c0:64:52:40: 4c:55:41:9c:c0:f4:62:91:cc:b2:1a:55:6e:00:e8: c6:1c:41:1f:ca:58:ea:67:97:3e:b3:c6:9f:98:25: 56:07:07:f3:fb:26:38:cf:2b:ac:25:7e:f6:c6:f1: 84:0c:b5:8b:d4:7c:b9:ec:17:85:77:e7:bb:cb:9b: 05:c7:6b:d7:dc:b4:97:6b:a0:88:a9:1c:69:86:50: cd:2c:03:8d:8a:6f:83:a5:bd:86:81:16:b8:fe:02: 5e:a4:22:18:9e:f9:e7:1e:8d:62:56:36:13:bf:36: 19:d4:1f:ca:e8:1b:c9:14:95:11:55:92:75:75:09: 4c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:76:82:B6:A3:2F:F2:D8:E0:EA:A7:8C:3E:59:C2:7C:02:E0:ED:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.crl X509v3 Authority Key Identifier: keyid:02:1A:0A:17:9D:49:29:1F:8C:B0:63:92:C3:31:DE:DD:EC:EF:8F:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer sbgp-ipAddrBlock: critical IPv4: 134.82.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:17:df:ee:cb:0c:01:e8:1b:f7:95:a0:c5:56:db:e5:66:f3: 22:d0:30:58:b1:b7:95:8a:be:d1:50:74:d2:41:1b:4a:21:87: e0:8a:49:79:7e:a8:86:02:ad:04:91:a9:e2:0a:12:67:a4:99: f5:80:ef:e7:3a:2c:71:80:66:b1:4a:13:d7:b4:63:a6:90:8f: e9:ad:86:16:3a:17:45:42:36:df:74:b5:fa:74:fb:01:6d:2b: bc:e2:65:45:f0:75:11:9a:5c:e2:53:67:aa:f8:96:1d:ce:a0: 9b:96:0c:c6:e0:27:c6:aa:15:de:40:12:63:01:38:1b:50:90: 2b:c2:65:6d:a4:b0:fc:a2:e3:ee:d3:94:e6:60:d4:93:38:a9: 7b:f6:5f:ab:36:30:05:0c:f7:51:3c:e6:b8:c0:79:7d:43:2f: 27:de:4d:ab:85:59:fc:9a:9f:c4:50:f4:a0:10:22:12:15:d4: df:cc:4d:7f:58:24:3f:2d:f0:db:23:a3:fb:14:31:0c:41:64: 5a:7a:1c:d3:38:80:21:6e:63:9d:f7:c5:49:f8:6e:e0:16:8a: 20:6e:bd:15:a7:41:49:89:87:f5:8e:f1:ea:17:23:26:1a:a9: a8:f3:9b:8d:f9:66:02:b8:ba:44:34:3c:3e:70:9b:0c:db:0a: d7:0e:d9:fa -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt4V0W/LtfV+GuizmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY1OGZiODctMTFkYS00YjA1LWIzMjItMjA3MGMyNjM5 ZmE3MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk ZWFmZjU0YTEtODIxMC00NTkyLTgwZTktMzg0ZWU0NjI1YzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7vox9oZ+wGZMVCkSgeAlnOrDTWz2va7ARcf DfVF1sDMwZMEHaV5uu2+mtNdPXXHqTnoDxfu7KVhQFzeGDLj7nv7074kv5aS136a NrUNyAxa8+TtY19Co8hmY6If87eFQAIiBoR9HnsOFYBo5/2z5EA1eOshEE8BvaQK b4GjFOLXhcBkUkBMVUGcwPRikcyyGlVuAOjGHEEfyljqZ5c+s8afmCVWBwfz+yY4 zyusJX72xvGEDLWL1Hy57BeFd+e7y5sFx2vX3LSXa6CIqRxphlDNLAONim+Dpb2G gRa4/gJepCIYnvnnHo1iVjYTvzYZ1B/K6BvJFJURVZJ1dQlMMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEx2grajL/LY4OqnjD5ZwnwC4O0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mZjU4 ZmI4Ny0xMWRhLTRiMDUtYjMyMi0yMDcwYzI2MzlmYTcvYTY0MGMzZjktNGNmOC0z ZWU2LWI2OGItZGYwZjk0YjY2NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmY1OGZiODctMTFkYS00YjA1LWIz MjItMjA3MGMyNjM5ZmE3L2ZmNThmYjg3LTExZGEtNGIwNS1iMzIyLTIwNzBjMjYz OWZhNy5jcmwwHwYDVR0jBBgwFoAUAhoKF51JKR+MsGOSwzHe3ezvj54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mZjU4ZmI4Ny0xMWRhLTRiMDUtYjMyMi0yMDcw YzI2MzlmYTcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhlIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAORff7ssMAegb95WgxVbb5WbzItAwWLG3lYq+0VB00kEbSiGH4IpJeX6o hgKtBJGp4goSZ6SZ9YDv5zoscYBmsUoT17RjppCP6a2GFjoXRUI233S1+nT7AW0r vOJlRfB1EZpc4lNnqviWHc6gm5YMxuAnxqoV3kASYwE4G1CQK8JlbaSw/KLj7tOU 5mDUkzipe/ZfqzYwBQz3UTzmuMB5fUMvJ95Nq4VZ/JqfxFD0oBAiEhXU38xNf1gk Py3w2yOj+xQxDEFkWnoc0ziAIW5jnffFSfhu4BaKIG69FadBSYmH9Y7x6hcjJhqp qPObjflmAri6RDQ8PnCbDNsK1w7Z+g== -----END CERTIFICATE-----Generated at Mon Nov 3 08:42:08 2025 by rpki-client