$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/8d7330a4-9f86-363a-8af9-b0a4a087c358.roa File: 8d7330a4-9f86-363a-8af9-b0a4a087c358.roa (raw, json) Hash identifier: IN/Nz30UtHPDjnIfEIoPTbEfozYr9PnwDUjPWZ1HA1E= Subject key identifier: 74:03:31:89:E3:F7:2A:7F:26:AA:51:2A:52:B9:76:86:56:E1:E6:DF Certificate issuer: /CN=bfbc72b9-37fe-4bab-9a0e-58161c6541c4 Certificate serial: 010D0C9F4328584B434C6D13E3CF75F6C34E6740 Authority key identifier: 93:4F:9C:EB:E8:4F:E0:9F:E5:6E:87:8E:CF:23:03:47:43:DA:72:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/8d7330a4-9f86-363a-8af9-b0a4a087c358.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 395717 IP address blocks: 27.131.252.0/24 maxlen: 24 27.131.253.0/24 maxlen: 24 27.131.254.0/24 maxlen: 24 27.131.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6d:13:e3:cf:75:f6:c3:4e:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfbc72b9-37fe-4bab-9a0e-58161c6541c4 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=b7c50171-1cb9-4506-9879-3b8f305b2de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:6b:f8:10:d0:26:d8:9d:e3:46:39:cf:bd: 86:a3:74:26:3c:e5:1d:fb:78:27:2b:31:7d:eb:af: e1:3b:81:08:26:c1:dd:d1:44:f4:4d:bb:de:b8:61: 24:1b:34:26:04:c5:79:d7:4a:c4:cd:69:96:63:4b: f8:e8:8a:4f:62:22:7b:e2:69:10:13:60:ee:6b:05: 02:90:99:dd:cf:94:ec:e9:89:7e:2b:14:dc:70:b7: b6:bb:91:85:94:c4:00:ea:9b:f3:cc:bd:eb:20:73: 51:9b:f7:d3:56:a1:53:0a:7e:96:12:32:56:9c:8f: 1c:b3:fe:f0:42:57:50:c7:e3:a8:02:90:29:6c:79: e4:be:1d:ac:4a:cf:92:75:1d:74:fa:fa:b2:ad:0c: 3a:94:7e:75:03:e3:92:3f:04:e1:9f:58:8f:95:e9: 7f:56:07:b4:c5:e9:16:b0:1a:bd:1b:c8:23:2e:69: e4:c4:1d:cd:d2:c4:4e:a4:83:74:e5:35:a8:a4:0e: b9:a6:5e:2b:77:04:a5:c8:72:ba:a6:e4:96:7f:ec: e4:f7:fe:d4:cf:f9:5e:04:0f:83:0e:38:d6:27:ab: 2f:6b:49:97:14:23:2a:10:5e:58:eb:67:73:06:0c: fe:66:83:96:6c:4b:d0:ee:40:ba:4e:20:f6:63:92: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:03:31:89:E3:F7:2A:7F:26:AA:51:2A:52:B9:76:86:56:E1:E6:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/8d7330a4-9f86-363a-8af9-b0a4a087c358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.crl X509v3 Authority Key Identifier: keyid:93:4F:9C:EB:E8:4F:E0:9F:E5:6E:87:8E:CF:23:03:47:43:DA:72:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.cer sbgp-ipAddrBlock: critical IPv4: 27.131.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f8:7f:55:26:a7:d0:d7:ea:a6:40:8a:e7:e6:09:22:27:82: 9c:ba:bb:97:68:44:e6:27:77:9d:e3:0a:a9:e9:7c:56:31:1f: 85:55:c9:dd:56:a6:e1:6f:2b:d2:61:86:b2:c6:65:73:d2:f3: 31:b3:72:32:ad:8e:71:41:a1:e8:a1:20:68:c4:cc:42:89:2e: a7:fc:3a:04:38:ee:90:a8:22:77:19:d8:80:e0:7f:67:96:fc: a1:6d:4b:7a:21:79:e1:5c:44:87:88:08:1d:6a:a4:e8:d5:c0: 70:b4:de:59:b2:73:06:31:65:25:ad:73:fe:36:26:28:1c:db: 1c:35:84:bf:e2:68:3b:03:f9:fc:d5:a2:5b:38:43:62:e8:1e: 9a:39:f7:de:1b:d2:07:c2:82:99:d4:d3:0b:b3:4f:31:32:e1: b7:05:15:b8:5d:31:ee:96:5f:4c:52:28:9a:58:43:f6:0c:dc: d7:c8:40:34:ed:ee:fb:39:ee:0d:c2:ca:70:0e:25:8f:03:db: c7:ad:11:99:84:59:66:e1:aa:c4:71:ad:ea:83:f8:7c:fc:14: 77:d8:16:c1:3b:77:f9:29:52:0c:da:5e:8a:97:e9:bd:11:3b: f7:fd:07:99:0b:ea:21:85:d8:f2:bf:65:7c:5f:48:12:04:ad: 7a:4b:fb:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTG0T48919sNOZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZiYzcyYjktMzdmZS00YmFiLTlhMGUtNTgxNjFjNjU0 MWM0MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YjdjNTAxNzEtMWNiOS00NTA2LTk4NzktM2I4ZjMwNWIyZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttRr+BDQJtid40Y5z72Go3QmPOUd+3gnKzF9 66/hO4EIJsHd0UT0TbveuGEkGzQmBMV510rEzWmWY0v46IpPYiJ74mkQE2DuawUC kJndz5Ts6Yl+KxTccLe2u5GFlMQA6pvzzL3rIHNRm/fTVqFTCn6WEjJWnI8cs/7w QldQx+OoApApbHnkvh2sSs+SdR10+vqyrQw6lH51A+OSPwThn1iPlel/Vge0xekW sBq9G8gjLmnkxB3N0sROpIN05TWopA65pl4rdwSlyHK6puSWf+zk9/7Uz/leBA+D DjjWJ6sva0mXFCMqEF5Y62dzBgz+ZoOWbEvQ7kC6TiD2Y5KbFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQDMYnj9yp/JqpRKlK5doZW4ebfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZmJj NzJiOS0zN2ZlLTRiYWItOWEwZS01ODE2MWM2NTQxYzQvOGQ3MzMwYTQtOWY4Ni0z NjNhLThhZjktYjBhNGEwODdjMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmZiYzcyYjktMzdmZS00YmFiLTlh MGUtNTgxNjFjNjU0MWM0L2JmYmM3MmI5LTM3ZmUtNGJhYi05YTBlLTU4MTYxYzY1 NDFjNC5jcmwwHwYDVR0jBBgwFoAUk0+c6+hP4J/lboeOzyMDR0PacqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZmJjNzJiOS0zN2ZlLTRiYWItOWEwZS01ODE2 MWM2NTQxYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCG4P8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL4f1Ump9DX6qZAiufmCSIngpy6u5doROYnd53jCqnpfFYxH4VVyd1W puFvK9JhhrLGZXPS8zGzcjKtjnFBoeihIGjEzEKJLqf8OgQ47pCoIncZ2IDgf2eW /KFtS3oheeFcRIeICB1qpOjVwHC03lmycwYxZSWtc/42Jigc2xw1hL/iaDsD+fzV ols4Q2LoHpo5994b0gfCgpnU0wuzTzEy4bcFFbhdMe6WX0xSKJpYQ/YM3NfIQDTt 7vs57g3CynAOJY8D28etEZmEWWbhqsRxreqD+Hz8FHfYFsE7d/kpUgzaXoqX6b0R O/f9B5kL6iGF2PK/ZXxfSBIErXpL+0Q= -----END CERTIFICATE-----Generated at Tue Oct 14 04:18:46 2025 by rpki-client