$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa File: 300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (raw, json) Hash identifier: Nb26YBMdRQasVIIgOaLXbXoyvUsfpOk9v1OP8TYxHpQ= Subject key identifier: B9:CB:E7:EA:8B:74:55:80:46:0F:5A:63:B7:C4:BA:20:04:0C:E5:B0 Certificate issuer: /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Certificate serial: 010D0C9F4328584B79BCB8583F4665C27AA2B580 Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 2728 IP address blocks: 162.255.88.0/21 maxlen: 24 199.185.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b8:58:3f:46:65:c2:7a:a2:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=c5bcf11d-4a96-460f-8b93-b4c5800bc7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fd:97:5e:75:9e:db:d9:d8:c9:38:e4:e5:b6: c8:33:72:1b:72:13:67:50:a3:01:29:28:e2:c6:2a: b9:3c:65:b2:43:4e:7c:85:8d:9b:49:c6:44:d0:e2: 25:d5:82:e0:d2:8e:89:37:b9:47:e4:a6:03:c7:70: e7:32:39:da:52:e2:d4:63:a9:fd:c7:f4:5a:10:a1: 78:a1:de:6f:13:d0:7f:2f:2a:f4:53:8f:97:6d:e7: 6f:62:ac:54:3a:a6:84:4d:a3:ca:df:66:fb:d1:7a: e9:6c:a6:90:b3:4e:f7:a1:76:ac:bf:5e:3b:52:3b: 75:f4:0d:48:38:78:0d:ed:80:25:df:3d:2a:7e:f6: 58:5a:eb:84:fc:1a:cb:70:7e:ac:5f:31:c0:38:77: e0:83:51:4f:ce:b5:67:cd:03:23:4a:0f:09:cd:89: 0c:17:4e:15:df:5b:c8:9c:b3:67:a9:8c:74:cc:57: 4c:2a:0a:f3:73:a4:e7:73:dd:f7:47:49:db:c5:a8: b3:12:b4:a0:c2:bc:91:7a:0b:56:52:8b:07:d9:18: 62:bf:ac:10:a5:ad:1e:9a:1b:e7:f6:10:76:bf:a8: cf:31:e0:4f:a9:c1:42:dc:b7:6b:d0:27:2c:1f:30: 39:62:56:0c:78:91:88:17:6e:62:99:01:9e:5c:df: da:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CB:E7:EA:8B:74:55:80:46:0F:5A:63:B7:C4:BA:20:04:0C:E5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl X509v3 Authority Key Identifier: keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer sbgp-ipAddrBlock: critical IPv4: 162.255.88.0/21 199.185.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b2:46:12:95:d7:04:c7:69:37:c7:83:d0:df:bf:90:60:ac: 40:5d:41:fc:e5:3a:8b:51:d6:24:4f:7b:35:b4:b5:36:a8:47: 61:9b:63:9c:7f:29:7f:ac:56:05:bd:5d:45:a4:b1:85:8f:51: 9a:eb:7a:46:80:75:d7:c5:67:80:53:c5:ff:b8:e6:a1:47:4b: a3:6e:3c:08:69:4b:c1:fb:c1:08:08:33:c9:79:b2:9b:00:f2: 84:dd:bb:98:2d:94:fa:c3:f6:a8:9c:1c:15:87:8e:3e:7f:25: ae:95:1e:43:9a:96:4c:ae:22:de:c1:ff:c1:ad:d0:80:e3:33: 32:ea:97:a2:a0:e0:9c:b6:ae:a4:f7:1c:e2:55:57:dd:8e:37: 5f:09:98:97:42:75:f2:98:8b:3d:3b:36:60:4c:e9:25:99:61: f2:6e:f9:ef:48:b8:af:2d:77:e8:20:11:4c:62:96:b2:d2:83: 63:a7:15:0c:dc:5c:31:48:f2:eb:1b:fa:26:a6:9e:d8:33:61: f1:57:f6:94:96:5c:6f:72:f0:6d:73:23:8f:84:d4:9d:e3:92: 9c:ae:f1:6b:1b:f2:de:bc:76:ef:58:c8:1e:44:63:e1:4f:70: fa:8d:1b:19:4a:86:dc:60:12:a4:7b:2a:e6:02:31:68:3c:1e: 93:b2:f6:85 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt5vLhYP0ZlwnqitYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1 YjBhMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YzViY2YxMWQtNGE5Ni00NjBmLThiOTMtYjRjNTgwMGJjN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/2XXnWe29nYyTjk5bbIM3IbchNnUKMBKSji xiq5PGWyQ058hY2bScZE0OIl1YLg0o6JN7lH5KYDx3DnMjnaUuLUY6n9x/RaEKF4 od5vE9B/Lyr0U4+XbedvYqxUOqaETaPK32b70XrpbKaQs073oXasv147Ujt19A1I OHgN7YAl3z0qfvZYWuuE/BrLcH6sXzHAOHfgg1FPzrVnzQMjSg8JzYkMF04V31vI nLNnqYx0zFdMKgrzc6Tnc933R0nbxaizErSgwryRegtWUosH2Rhiv6wQpa0emhvn 9hB2v6jPMeBPqcFC3Ldr0CcsHzA5YlYMeJGIF25imQGeXN/aBQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLnL5+qLdFWARg9aY7fEuiAEDOWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvMzAwYTVhNGQtNWQwZC0z ZTIyLWE5YTEtZTI1OTFhOGUzNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3 NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0 Mzk3NzViMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDov9YAwQB x7muMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEGyRhKV1wTHaTfHg9Dfv5BgrEBdQfzlOotR1iRPezW0tTao R2GbY5x/KX+sVgW9XUWksYWPUZrrekaAddfFZ4BTxf+45qFHS6NuPAhpS8H7wQgI M8l5spsA8oTdu5gtlPrD9qicHBWHjj5/Ja6VHkOalkyuIt7B/8Gt0IDjMzLql6Kg 4Jy2rqT3HOJVV92ON18JmJdCdfKYiz07NmBM6SWZYfJu+e9IuK8td+ggEUxilrLS g2OnFQzcXDFI8usb+iamntgzYfFX9pSWXG9y8G1zI4+E1J3jkpyu8Wsb8t68du9Y yB5EY+FPcPqNGxlKhtxgEqR7KuYCMWg8HpOy9oU= -----END CERTIFICATE-----Generated at Tue Oct 21 00:39:26 2025 by rpki-client