$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa File: 87e248c3-d420-3fbb-ad5d-a3530f238550.roa (raw, json) Hash identifier: WJSh1C1GCzcbTM2tmNk3Ef247nEggS4gD1nD/Qby+0Q= Subject key identifier: 48:AE:1F:6F:D6:3C:3F:B2:5A:55:4B:E9:32:93:71:96:AD:6A:B9:DA Certificate issuer: /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Certificate serial: 010D0C9F4328584B92DCE84C8DD7DC517CE30700 Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 17216 IP address blocks: 162.254.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e8:4c:8d:d7:dc:51:7c:e3:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=c295fca6-db2d-413b-9db8-a97d9b47a939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:29:a0:13:c7:b8:79:c8:de:a6:8b:d6:86: 9e:31:e6:bb:56:68:5a:e2:47:46:3b:19:09:7b:73: 90:77:98:ea:28:73:e5:b8:47:e7:d4:15:d4:76:df: fa:95:c4:2e:3e:a8:13:8c:ee:be:78:6b:70:4c:5f: 7a:5a:25:dd:45:f6:7d:dc:8c:01:7a:2f:65:04:7a: 0f:ad:3c:2f:a1:dc:a2:4d:6a:77:e3:44:b8:52:5e: a8:e3:7c:68:ac:de:fc:0d:8e:d7:bf:4e:4c:86:7e: bb:fe:3d:df:e5:13:ec:ef:94:35:0e:3e:9b:a4:3e: 1f:39:dd:04:41:91:67:3b:43:5c:81:2a:f5:3b:d5: 71:0e:cb:2b:48:df:a2:bb:f0:51:08:3f:5c:aa:a9: ee:59:76:1d:36:ec:b9:3b:41:ee:62:a0:67:95:86: 29:25:cb:60:72:33:5d:af:fc:f8:16:2d:0a:23:86: 45:b5:6c:4c:98:c3:c8:80:00:f8:2b:19:52:91:70: bf:d7:40:f5:65:e1:52:a1:9d:85:c0:e8:e2:79:dd: d8:d6:c7:e9:9d:72:55:88:cb:df:07:8a:58:04:ba: 80:b8:11:cb:39:48:fd:1c:38:05:e7:0f:3d:df:ee: fe:e0:e5:ce:0f:93:ee:04:7d:41:ef:aa:39:a0:19: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:1F:6F:D6:3C:3F:B2:5A:55:4B:E9:32:93:71:96:AD:6A:B9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/87e248c3-d420-3fbb-ad5d-a3530f238550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl X509v3 Authority Key Identifier: keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer sbgp-ipAddrBlock: critical IPv4: 162.254.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:3c:fe:4a:1b:d9:ff:e0:3b:e1:36:56:55:8c:08:13:2c:4e: 60:4d:79:6a:c1:ae:06:bc:89:54:ff:6b:5e:79:4c:b6:81:24: 1b:34:15:8e:0c:ff:74:e4:b4:de:a0:da:ae:25:ec:f5:0a:95: eb:88:53:2f:80:b9:9a:3b:3c:63:bb:e2:45:00:e4:fa:e1:a3: 9a:2a:68:ee:8c:7f:0b:a5:fd:4f:28:40:94:3f:da:02:c7:20: 58:5f:4a:29:f3:ef:69:22:7e:6c:28:49:a4:c2:06:4c:d2:ff: 16:37:0a:5f:01:24:23:32:3d:9b:be:a1:e1:a5:65:7d:27:f8: ad:fa:b8:6f:98:a0:70:81:fc:97:c5:f2:e6:b0:78:99:dc:41: 09:f2:d5:c5:f3:56:7e:81:85:7f:15:e4:df:b8:3f:82:88:8e: a5:b8:17:b4:87:a5:5b:cd:fa:86:a1:87:bd:0f:d8:4f:bd:05: f8:7c:5c:6a:72:9b:8e:17:c4:03:1d:de:43:a5:64:10:48:cd: 5c:91:89:4d:63:f2:cd:3f:a9:75:2f:7b:89:0a:8e:15:14:24: 7e:12:26:92:17:56:8c:8e:07:e4:99:d8:cc:dd:a6:68:25:4b: db:ae:01:81:76:90:bf:56:dc:80:37:a0:9c:9a:90:4f:a4:88: a5:72:ce:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3OhMjdfcUXzjBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiYjk3NzUtOTYzMS00YmU0LWE5YzYtMTFiOGRkZmU2 MjQ3MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YzI5NWZjYTYtZGIyZC00MTNiLTlkYjgtYTk3ZDliNDdhOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJUpoBPHuHnI3qaL1oaeMea7Vmha4kdGOxkJ e3OQd5jqKHPluEfn1BXUdt/6lcQuPqgTjO6+eGtwTF96WiXdRfZ93IwBei9lBHoP rTwvodyiTWp340S4Ul6o43xorN78DY7Xv05Mhn67/j3f5RPs75Q1Dj6bpD4fOd0E QZFnO0NcgSr1O9VxDssrSN+iu/BRCD9cqqnuWXYdNuy5O0HuYqBnlYYpJctgcjNd r/z4Fi0KI4ZFtWxMmMPIgAD4KxlSkXC/10D1ZeFSoZ2FwOjied3Y1sfpnXJViMvf B4pYBLqAuBHLOUj9HDgF5w893+7+4OXOD5PuBH1B76o5oBlMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiuH2/WPD+yWlVL6TKTcZatarnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2Ji OTc3NS05NjMxLTRiZTQtYTljNi0xMWI4ZGRmZTYyNDcvODdlMjQ4YzMtZDQyMC0z ZmJiLWFkNWQtYTM1MzBmMjM4NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTdiYjk3NzUtOTYzMS00YmU0LWE5 YzYtMTFiOGRkZmU2MjQ3L2U3YmI5Nzc1LTk2MzEtNGJlNC1hOWM2LTExYjhkZGZl NjI0Ny5jcmwwHwYDVR0jBBgwFoAUQs7CZnUe84HwJTWBQIOwBNdo65kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lN2JiOTc3NS05NjMxLTRiZTQtYTljNi0xMWI4 ZGRmZTYyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD48/kob2f/gO+E2VlWMCBMsTmBNeWrBrga8iVT/a155TLaBJBs0FY4M /3TktN6g2q4l7PUKleuIUy+AuZo7PGO74kUA5Prho5oqaO6Mfwul/U8oQJQ/2gLH IFhfSinz72kifmwoSaTCBkzS/xY3Cl8BJCMyPZu+oeGlZX0n+K36uG+YoHCB/JfF 8uaweJncQQny1cXzVn6BhX8V5N+4P4KIjqW4F7SHpVvN+oahh70P2E+9Bfh8XGpy m44XxAMd3kOlZBBIzVyRiU1j8s0/qXUve4kKjhUUJH4SJpIXVoyOB+SZ2Mzdpmgl S9uuAYF2kL9W3IA3oJyakE+kiKVyzos= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:44 2025 by rpki-client