$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/43c4ee6e-5955-3136-a4f8-880bb53a45f4.roa File: 43c4ee6e-5955-3136-a4f8-880bb53a45f4.roa (raw, json) Hash identifier: bkY2pxv3VF0v/GbgxWStulvkXZvWYNIxAy57Q+k2uvE= Subject key identifier: B4:84:24:18:03:BF:46:3F:2A:A8:D3:31:DF:6A:37:99:26:79:C4:FD Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584B2FC18CEBC049000A190B2300 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/43c4ee6e-5955-3136-a4f8-880bb53a45f4.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 397666 IP address blocks: 162.220.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8c:eb:c0:49:00:0a:19:0b:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=a3fe635e-3371-44d1-bef7-e3b9abb3e975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:7b:2e:56:6b:d1:f8:dd:89:a4:99:d0:6a: 8a:d0:ae:c7:7d:e9:16:f6:5a:ec:3c:0a:83:30:c6: e0:10:64:31:87:8f:9b:cf:07:69:73:92:ce:89:33: 00:73:2d:b3:14:87:2d:e7:72:03:48:d9:d2:41:70: 2f:13:e3:68:c8:f8:c0:65:a9:83:ab:58:7a:10:14: d1:61:43:21:1b:da:3c:29:65:da:c8:49:d3:da:3c: e0:58:c9:00:f3:9d:e9:da:b5:83:cd:84:53:4a:87: d2:cc:a4:97:69:1d:ca:80:fd:52:ab:5b:27:5c:33: fc:76:de:2b:56:c5:cb:f0:61:ab:cb:72:fc:a4:b9: d7:f2:27:f0:ad:67:da:d0:33:33:38:43:d1:87:76: b7:26:c6:8b:17:8c:f7:ca:66:d6:ad:c1:94:81:e8: be:91:d3:09:fd:b3:f9:e6:50:de:2b:67:ba:06:16: f7:c8:4f:3e:56:4d:b6:96:f2:31:b7:ad:4d:d6:53: 51:01:1b:0e:41:f9:b4:b8:1d:b2:55:d5:dc:20:e1: e4:3a:db:5a:d0:d9:71:ce:ca:b0:32:59:27:ec:6a: 80:c2:28:8d:b7:12:12:48:39:6f:51:a1:81:6a:f6: af:67:a2:6a:18:fe:57:a7:ec:a5:0b:dd:02:a6:66: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:84:24:18:03:BF:46:3F:2A:A8:D3:31:DF:6A:37:99:26:79:C4:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/43c4ee6e-5955-3136-a4f8-880bb53a45f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 162.220.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:30:85:84:b5:e0:cc:af:8a:0e:07:96:72:d2:e3:8a:bd:98: 7c:9e:f9:35:4f:89:17:d1:fa:e2:40:d8:aa:71:ea:e1:d4:a0: eb:83:07:a8:3e:0e:36:72:e7:b7:79:d4:b5:77:3d:6c:76:06: 7a:9b:d6:a5:9b:a1:ac:68:c6:e9:f5:10:61:97:8a:16:e4:e4: d0:49:ac:94:6b:0f:7a:42:b0:f6:11:33:31:02:d6:fa:84:fe: 42:db:58:cf:f7:7a:d9:36:fe:67:3f:39:8f:46:5c:22:67:5e: 1d:6d:a7:39:2f:dd:1a:a7:ea:cf:5a:ca:b6:1b:b2:c1:91:48: ba:3e:b1:e4:c9:d5:40:d9:3d:f3:9a:5c:01:b9:d7:06:19:85: 47:c4:4b:db:27:69:98:62:cc:0b:b7:b5:31:fa:ce:7e:30:5e: a3:c3:ca:d6:a3:01:ee:ce:c6:2b:b3:de:58:c0:3f:39:3d:b5: 31:1b:72:95:cd:7f:00:26:46:06:22:51:9d:c9:72:8f:e3:6e: 21:f6:81:94:fb:d3:d3:48:89:79:55:48:77:ba:0d:80:aa:1f: f4:9d:b1:c0:c5:90:67:32:e9:9b:c6:fb:0d:6e:f8:e8:e6:f0: 33:59:b5:bc:c8:ec:a8:e1:a8:2e:1e:d7:19:03:08:25:87:b0: df:db:65:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYzrwEkAChkLIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YTNmZTYzNWUtMzM3MS00NGQxLWJlZjctZTNiOWFiYjNlOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovB7LlZr0fjdiaSZ0GqK0K7HfekW9lrsPAqD MMbgEGQxh4+bzwdpc5LOiTMAcy2zFIct53IDSNnSQXAvE+NoyPjAZamDq1h6EBTR YUMhG9o8KWXayEnT2jzgWMkA853p2rWDzYRTSofSzKSXaR3KgP1Sq1snXDP8dt4r VsXL8GGry3L8pLnX8ifwrWfa0DMzOEPRh3a3JsaLF4z3ymbWrcGUgei+kdMJ/bP5 5lDeK2e6Bhb3yE8+Vk22lvIxt61N1lNRARsOQfm0uB2yVdXcIOHkOtta0Nlxzsqw Mlkn7GqAwiiNtxISSDlvUaGBavavZ6JqGP5Xp+ylC90CpmYcCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSEJBgDv0Y/KqjTMd9qN5kmecT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvNDNjNGVlNmUtNTk1NS0z MTM2LWE0ZjgtODgwYmI1M2E0NWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotwbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4whYS14Myvig4HlnLS44q9mHye+TVPiRfR+uJA2Kpx6uHUoOuDB6g+ DjZy57d51LV3PWx2Bnqb1qWboaxoxun1EGGXihbk5NBJrJRrD3pCsPYRMzEC1vqE /kLbWM/3etk2/mc/OY9GXCJnXh1tpzkv3Rqn6s9ayrYbssGRSLo+seTJ1UDZPfOa XAG51wYZhUfES9snaZhizAu3tTH6zn4wXqPDytajAe7Oxiuz3ljAPzk9tTEbcpXN fwAmRgYiUZ3Jco/jbiH2gZT709NIiXlVSHe6DYCqH/SdscDFkGcy6ZvG+w1u+Ojm 8DNZtbzI7KjhqC4e1xkDCCWHsN/bZeM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:03:04 2025 by rpki-client