$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/821d388f-a517-3721-bd73-97470ca4681b.roa File: 821d388f-a517-3721-bd73-97470ca4681b.roa (raw, json) Hash identifier: dCes1jX6XoHau8TtZiu0NbAYdF61dun3KpC/M5A5WXQ= Subject key identifier: B9:16:E2:E1:AE:AE:1D:27:D9:EB:09:EF:91:5D:F6:1D:8B:9F:93:91 Certificate issuer: /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Certificate serial: 010D0C9F4328584B65CA2CC4F5BA640581040B90 Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/821d388f-a517-3721-bd73-97470ca4681b.roa Signing time: Fri 03 Oct 2025 09:31:42 +0000 ROA not before: Fri 03 Oct 2025 09:31:42 +0000 ROA not after: Thu 01 Jan 2026 10:31:42 +0000 asID: 32002 IP address blocks: 163.123.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:65:ca:2c:c4:f5:ba:64:05:81:04:0b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Validity Not Before: Oct 3 09:31:42 2025 GMT Not After : Jan 1 10:31:42 2026 GMT Subject: CN=9a9cbd40-77a7-48f1-b696-56d3a4f13fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:63:aa:ac:2a:ab:6c:76:28:a9:48:cd:f7: 37:cd:d8:73:86:53:b1:1a:98:5e:a1:6e:bf:db:0c: 04:1a:e0:32:39:40:19:30:7e:91:73:55:71:d3:fd: b6:4c:04:65:1d:bc:38:90:33:c7:03:5f:b3:4c:a6: 20:35:bd:d8:3b:5a:87:06:2a:78:29:b3:98:ba:05: d7:3c:9d:2f:70:8f:bc:7f:c8:7a:f7:3a:47:20:57: 56:64:d6:e9:82:39:3b:d2:cc:9f:3f:7c:6a:31:f9: d2:1c:ad:ac:9b:7c:70:25:7e:cd:cb:30:d7:84:b3: 47:e7:03:e8:bf:a5:3d:9a:b1:c3:c9:79:35:af:7d: da:0b:21:81:c9:c4:e5:ed:ba:e1:78:5a:ca:99:d3: 85:c3:b0:6d:f9:4e:67:1f:81:df:54:b3:24:8b:02: ae:67:b5:db:40:28:f3:32:60:93:4e:86:18:9d:2f: c9:30:d0:b2:e4:66:63:5c:01:b6:78:15:74:2d:b7: 32:9b:89:58:e2:a7:e7:1f:be:b8:ef:83:a9:f1:12: 39:3a:d9:88:60:20:73:5f:12:54:e6:3e:83:b6:4e: cd:ab:a8:3a:6c:78:d4:42:98:bf:d5:c0:d2:f4:9c: e9:8a:85:32:0b:3d:74:8a:06:d0:94:be:b6:a0:58: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:16:E2:E1:AE:AE:1D:27:D9:EB:09:EF:91:5D:F6:1D:8B:9F:93:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/821d388f-a517-3721-bd73-97470ca4681b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl X509v3 Authority Key Identifier: keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer sbgp-ipAddrBlock: critical IPv4: 163.123.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:05:ed:1b:d1:a1:76:d1:f8:62:50:ec:32:79:26:17:f6:0e: 8b:ae:96:0b:fd:09:ea:81:8e:9f:f6:65:3d:ee:b9:b3:bc:c4: 7a:28:59:d2:88:87:41:b8:6d:25:e3:f7:59:34:6d:7a:fd:1e: cc:12:e7:77:af:4b:27:62:ed:37:bb:b3:f5:0b:d3:db:3e:9c: 80:63:27:f6:f3:a7:1f:7e:0d:aa:a7:fd:9d:b1:66:75:1b:15: bd:5f:13:9d:2f:ab:3e:f9:12:af:11:ea:24:7c:a4:3c:3c:7d: 4e:93:12:18:77:8d:08:73:bf:58:44:f9:d3:61:9b:e0:33:8a: b0:0f:3d:be:a6:76:61:3e:ec:78:27:4d:59:c2:8d:95:1a:1f: 46:68:41:b6:59:7b:7c:b8:05:31:5b:bb:45:c5:54:21:a0:28: 8a:a8:2c:c2:d0:49:07:43:dc:ab:d7:5c:85:86:e0:0a:2d:2e: 64:ed:cf:d0:99:c6:91:be:4b:40:72:22:3b:98:25:58:00:ec: ca:00:da:45:81:89:41:bd:83:27:cd:f7:b2:c8:eb:b5:28:ad: 28:ca:88:e4:21:f3:07:5c:80:67:5b:f1:c0:94:bd:15:18:bc: cd:fe:3c:c0:2a:56:27:38:e5:fd:5e:26:08:8a:ac:36:3b:4b: 49:7b:de:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtlyizE9bpkBYEEC5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy M2Q4MB4XDTI1MTAwMzA5MzE0MloXDTI2MDEwMTEwMzE0MlowLzEtMCsGA1UEAxMk OWE5Y2JkNDAtNzdhNy00OGYxLWI2OTYtNTZkM2E0ZjEzZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Njqqwqq2x2KKlIzfc3zdhzhlOxGpheoW6/ 2wwEGuAyOUAZMH6Rc1Vx0/22TARlHbw4kDPHA1+zTKYgNb3YO1qHBip4KbOYugXX PJ0vcI+8f8h69zpHIFdWZNbpgjk70syfP3xqMfnSHK2sm3xwJX7NyzDXhLNH5wPo v6U9mrHDyXk1r33aCyGBycTl7brheFrKmdOFw7Bt+U5nH4HfVLMkiwKuZ7XbQCjz MmCTToYYnS/JMNCy5GZjXAG2eBV0Lbcym4lY4qfnH76474Op8RI5OtmIYCBzXxJU 5j6Dtk7Nq6g6bHjUQpi/1cDS9JzpioUyCz10igbQlL62oFjsawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkW4uGurh0n2esJ75Fd9h2Ln5ORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4 NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvODIxZDM4OGYtYTUxNy0z NzIxLWJkNzMtOTc0NzBjYTQ2ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm Y2EyZTIzZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo3vsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMF7RvRoXbR+GJQ7DJ5Jhf2Douulgv9CeqBjp/2ZT3uubO8xHooWdKI h0G4bSXj91k0bXr9HswS53evSydi7Te7s/UL09s+nIBjJ/bzpx9+Daqn/Z2xZnUb Fb1fE50vqz75Eq8R6iR8pDw8fU6TEhh3jQhzv1hE+dNhm+AzirAPPb6mdmE+7Hgn TVnCjZUaH0ZoQbZZe3y4BTFbu0XFVCGgKIqoLMLQSQdD3KvXXIWG4AotLmTtz9CZ xpG+S0ByIjuYJVgA7MoA2kWBiUG9gyfN97LI67UorSjKiOQh8wdcgGdb8cCUvRUY vM3+PMAqVic45f1eJgiKrDY7S0l73rE= -----END CERTIFICATE-----Generated at Tue Oct 21 05:50:59 2025 by rpki-client