$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa File: 428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa (raw, json) Hash identifier: OvIZbKFaAeq/prE21N2h9DXFJ88T0iIQQ9Tpf25qKNg= Subject key identifier: 76:F3:27:F9:4D:D4:84:21:6B:77:BE:62:76:2C:20:07:7E:56:B4:90 Certificate issuer: /CN=5410af3b-1667-4dd4-9260-1835889ae3a3 Certificate serial: 010D0C9F4328584B89176883340A05912C18A280 Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 162.247.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:68:83:34:0a:05:91:2c:18:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=c408bfa5-db89-4632-9ae5-415594e0f6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:13:8e:8a:fb:1f:de:82:dc:fc:88:f9:4e: 8c:0b:66:07:7b:88:52:06:b1:6e:8c:25:f2:34:f8: 55:da:5b:8d:a0:92:3b:c0:99:9e:46:5b:df:6a:4c: 95:4d:1c:4f:a2:1e:5b:08:61:3e:ae:f3:f6:f8:b1: 1c:bf:96:a2:2f:d5:ee:6c:0e:8a:09:5f:ed:31:1f: 4f:dd:5e:cb:df:31:9a:7c:c5:06:1e:2e:ce:7c:95: 31:f6:c5:e2:f5:2b:bb:97:05:c2:5b:89:4b:f8:97: 37:ff:a2:21:06:8d:7b:21:e8:27:36:d0:3f:62:2c: c5:db:e1:51:53:a6:c5:e5:62:2c:49:d1:48:e1:15: a9:88:fe:b5:4e:5a:8d:25:de:e5:bc:de:21:5b:83: 53:6a:5f:93:96:85:f8:03:f9:41:9a:25:1c:18:e0: c3:69:f2:c7:79:47:24:97:4e:72:5f:6d:86:05:c7: e2:af:9c:20:d7:26:17:be:13:8a:ac:16:db:a0:bc: 69:ef:dc:30:21:1a:d5:0c:4a:52:1a:c6:56:e2:42: b1:fb:f2:53:b3:65:3d:e5:c1:58:56:64:1a:64:f9: 1d:aa:ec:43:84:79:a5:b9:f8:66:64:4d:80:43:03: c8:75:41:7e:19:92:96:f2:44:b5:6c:0c:14:ff:5c: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F3:27:F9:4D:D4:84:21:6B:77:BE:62:76:2C:20:07:7E:56:B4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl X509v3 Authority Key Identifier: keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer sbgp-ipAddrBlock: critical IPv4: 162.247.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:58:c8:2b:44:87:cb:2c:1b:48:a2:61:f8:83:08:94:1b:f6: 2d:e8:42:ea:6c:b6:1a:5d:9d:9d:b3:a6:87:3e:9f:bc:9a:b1: b7:28:6b:f9:22:57:22:32:21:dd:db:6f:6c:23:33:cf:8c:f4: 30:05:83:89:a2:18:d7:c8:4d:1a:51:05:af:7c:02:88:87:10: 19:a6:6f:9a:f5:af:b8:ab:4b:fa:ff:5a:f9:5d:95:62:c5:8d: 10:66:2f:83:be:ec:47:e4:48:97:7e:e0:42:ce:e7:d7:69:59: a8:a0:24:d2:e5:f5:73:f1:49:18:84:db:ef:3c:5c:23:c7:5d: 94:59:77:0f:bf:79:9a:fd:11:22:19:06:64:db:6c:fb:71:7b: 13:8d:64:15:8e:9b:49:67:fa:43:72:6e:94:6a:69:23:ac:90: 04:59:18:e4:8e:34:5a:0f:fa:b7:65:64:30:07:be:f0:e1:38: ea:42:9f:b9:85:d3:35:8e:47:56:2f:5e:64:85:92:74:8a:c8: 0b:fe:d3:41:ca:2d:c6:44:67:16:3a:f3:e1:17:4d:7d:9a:1e: 73:52:ec:3b:1f:62:06:29:66:22:b6:a0:90:d9:ef:1b:30:36: 77:58:59:25:0e:43:34:d0:02:19:86:a3:d8:89:31:77:88:05: 97:f8:47:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF2iDNAoFkSwYooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQxMGFmM2ItMTY2Ny00ZGQ0LTkyNjAtMTgzNTg4OWFl M2EzMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YzQwOGJmYTUtZGI4OS00NjMyLTlhZTUtNDE1NTk0ZTBmNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MgTjor7H96C3PyI+U6MC2YHe4hSBrFujCXy NPhV2luNoJI7wJmeRlvfakyVTRxPoh5bCGE+rvP2+LEcv5aiL9XubA6KCV/tMR9P 3V7L3zGafMUGHi7OfJUx9sXi9Su7lwXCW4lL+Jc3/6IhBo17IegnNtA/YizF2+FR U6bF5WIsSdFI4RWpiP61TlqNJd7lvN4hW4NTal+TloX4A/lBmiUcGODDafLHeUck l05yX22GBcfir5wg1yYXvhOKrBbboLxp79wwIRrVDEpSGsZW4kKx+/JTs2U95cFY VmQaZPkdquxDhHmlufhmZE2AQwPIdUF+GZKW8kS1bAwU/1xECwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbzJ/lN1IQha3e+YnYsIAd+VrSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEw YWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1ODg5YWUzYTMvNDI4ZDdmYmEtMGE3NS0z OWNjLTlkZDMtNWIyNmE0MjMyZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTQxMGFmM2ItMTY2Ny00ZGQ0LTky NjAtMTgzNTg4OWFlM2EzLzU0MTBhZjNiLTE2NjctNGRkNC05MjYwLTE4MzU4ODlh ZTNhMy5jcmwwHwYDVR0jBBgwFoAUuH92s/HalR9pb+ww8Pv6JRZIwWYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEwYWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1 ODg5YWUzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovelMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpYyCtEh8ssG0iiYfiDCJQb9i3oQupsthpdnZ2zpoc+n7yasbcoa/ki VyIyId3bb2wjM8+M9DAFg4miGNfITRpRBa98AoiHEBmmb5r1r7irS/r/WvldlWLF jRBmL4O+7EfkSJd+4ELO59dpWaigJNLl9XPxSRiE2+88XCPHXZRZdw+/eZr9ESIZ BmTbbPtxexONZBWOm0ln+kNybpRqaSOskARZGOSONFoP+rdlZDAHvvDhOOpCn7mF 0zWOR1YvXmSFknSKyAv+00HKLcZEZxY68+EXTX2aHnNS7DsfYgYpZiK2oJDZ7xsw NndYWSUOQzTQAhmGo9iJMXeIBZf4R5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:28 2025 by rpki-client