$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3a67fe-ff08-3f43-80de-0f96d848768e.roa File: 8a3a67fe-ff08-3f43-80de-0f96d848768e.roa (raw, json) Hash identifier: GLQWBqkhuKHNUCt5sfD9+Gn9XEB6tfzUbPjjlprY/1w= Subject key identifier: 95:CD:AC:CC:BA:F8:E2:0B:5B:49:8B:42:AC:68:78:F7:62:BB:63:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB903E82BC67675E82CFF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3a67fe-ff08-3f43-80de-0f96d848768e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7725 IP address blocks: 162.148.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:03:e8:2b:c6:76:75:e8:2c:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=05f020a9-79b8-4119-8e0d-e372e7794185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:43:c9:67:8d:ed:32:b3:ff:14:1c:2d:6f: e6:29:c9:b3:58:50:8a:e0:0c:1c:ba:6b:3e:27:d2: 4d:21:d9:bb:6d:19:cb:cf:c6:0e:99:a3:f0:f9:c5: 9b:4a:77:8f:bd:eb:37:34:14:60:44:9b:51:2b:fe: 46:53:2c:59:18:38:1a:d9:85:90:14:fd:ca:6e:26: e2:94:c4:2d:18:c7:62:95:54:7e:b5:a1:bc:cf:e4: 2f:8b:c6:10:9a:b7:cb:c1:b4:2d:f9:10:48:6d:66: dc:51:00:fb:e2:6c:01:3b:1b:30:ad:fa:74:a6:dd: 90:6b:f8:d5:f1:7a:cc:2d:6c:28:95:2c:51:d4:0f: 6b:c5:73:6c:d7:8d:be:94:47:0e:d6:9f:6b:2b:66: d2:2a:7d:7c:52:8c:c2:aa:a9:ff:75:38:55:cf:ab: a5:bc:bf:c6:ae:64:8e:9f:a1:3f:cb:d7:e2:6f:c7: 94:9d:6b:af:0e:b2:70:73:ac:cb:9b:31:9a:fe:97: b0:d2:c8:d5:64:54:45:b1:75:82:a6:da:7a:9e:22: 05:66:e5:f5:5f:2f:45:c3:de:1a:75:da:3d:3c:42: 95:fa:ce:b6:2a:40:f7:06:7e:d5:89:fc:d8:9c:51: f2:54:28:27:7e:92:5e:ba:f4:22:af:b3:12:2a:c7: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CD:AC:CC:BA:F8:E2:0B:5B:49:8B:42:AC:68:78:F7:62:BB:63:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a3a67fe-ff08-3f43-80de-0f96d848768e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 162.148.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:19:72:95:03:ac:40:25:af:af:03:20:a4:13:c7:9d:65:41: dc:11:c1:5b:f6:97:6f:5b:c7:c6:b1:83:20:30:09:da:fe:75: 6a:f4:5a:b0:c3:b3:40:15:1e:c8:76:b0:3d:23:d3:09:cb:dc: 26:ac:19:dc:cb:5d:ad:c5:e0:61:1d:0b:af:0d:90:3a:29:27: eb:9a:6e:c9:9c:e3:d6:aa:df:86:47:9f:01:79:20:46:32:12: 56:61:7e:47:37:02:83:23:bc:26:40:b8:d0:9f:6a:6c:54:0c: 18:fa:2b:8d:de:35:da:e8:ba:f2:67:d7:f7:f5:a6:ea:76:58: 6b:31:52:6d:c3:ff:ad:49:31:1c:2d:8e:aa:33:3a:b0:01:2b: cf:28:54:5d:1c:a1:db:07:02:a7:d1:ce:2f:a8:cb:c5:40:91: df:d8:b7:e3:23:c6:32:12:3e:dc:11:64:86:1c:73:24:c9:08: 6c:0b:0c:17:8c:5f:32:c7:44:41:c3:73:c2:00:d6:a9:7c:4d: 5e:41:b7:3a:06:dd:40:24:67:98:12:6e:39:43:88:64:c8:d6: ca:b7:53:44:9d:21:f5:a9:2e:ea:26:5d:2b:61:e2:93:e6:c3: 2c:43:03:98:2c:b0:a4:9e:79:4e:50:77:fb:6a:05:86:1e:de: 77:8f:11:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uQPoK8Z2degs/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDVmMDIwYTktNzliOC00MTE5LThlMGQtZTM3MmU3Nzk0MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip1DyWeN7TKz/xQcLW/mKcmzWFCK4Awcums+ J9JNIdm7bRnLz8YOmaPw+cWbSnePves3NBRgRJtRK/5GUyxZGDga2YWQFP3Kbibi lMQtGMdilVR+taG8z+Qvi8YQmrfLwbQt+RBIbWbcUQD74mwBOxswrfp0pt2Qa/jV 8XrMLWwolSxR1A9rxXNs142+lEcO1p9rK2bSKn18UozCqqn/dThVz6ulvL/GrmSO n6E/y9fib8eUnWuvDrJwc6zLmzGa/pew0sjVZFRFsXWCptp6niIFZuX1Xy9Fw94a ddo9PEKV+s62KkD3Bn7VifzYnFHyVCgnfpJeuvQir7MSKse9bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXNrMy6+OILW0mLQqxoePdiu2N4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGEzYTY3ZmUtZmYwOC0z ZjQzLTgwZGUtMGY5NmQ4NDg3NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCopQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0ZcpUDrEAlr68DIKQTx51lQdwRwVv2l29bx8axgyAwCdr+dWr0WrDD s0AVHsh2sD0j0wnL3CasGdzLXa3F4GEdC68NkDopJ+uabsmc49aq34ZHnwF5IEYy ElZhfkc3AoMjvCZAuNCfamxUDBj6K43eNdrouvJn1/f1pup2WGsxUm3D/61JMRwt jqozOrABK88oVF0codsHAqfRzi+oy8VAkd/Yt+MjxjISPtwRZIYccyTJCGwLDBeM XzLHREHDc8IA1ql8TV5BtzoG3UAkZ5gSbjlDiGTI1sq3U0SdIfWpLuomXSth4pPm wyxDA5gssKSeeU5Qd/tqBYYe3nePEb8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:52 2025 by rpki-client