$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa File: 9deb75fd-d40d-3461-bd99-01696f038720.roa (raw, json) Hash identifier: yv15CmreRiGkR6xt+U/f0G3+NRUuezJ2O3mcXbxPiQg= Subject key identifier: E1:DC:7B:63:5F:14:20:96:CA:9C:3A:85:01:F9:46:9E:0A:68:CB:F6 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584B4617087335DC4EAA96DC0100 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 34689 IP address blocks: 162.254.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:08:73:35:dc:4e:aa:96:dc:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=0c5b5643-9864-4045-ad4e-136855038ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:96:f8:23:91:d4:27:f5:f9:7e:7e:22:d4: 3a:20:3e:5b:24:27:7a:d1:31:2a:c5:5b:04:cd:e9: 16:71:a9:78:7f:1d:2b:2f:3a:4c:b3:7d:fa:df:a2: 18:99:d6:24:77:b2:71:75:12:11:99:f0:3d:83:92: 97:a1:2c:71:fb:2c:23:28:e5:0e:aa:db:ca:a2:5b: ad:50:ea:8e:1b:c6:86:7c:4c:9d:9d:58:6b:bb:17: 1d:da:0e:4b:d3:bb:e1:f0:dc:4a:c8:48:b5:2a:fb: c7:78:1e:02:f6:c9:92:0d:43:52:5c:37:2c:48:60: 52:41:29:04:3e:43:2f:8b:3d:8b:df:bb:d8:e3:ca: c2:06:1e:52:33:ba:08:7a:60:a5:35:1b:04:10:0d: dd:5a:18:29:c8:3c:3d:44:00:36:6f:b3:92:5a:1b: 31:54:a0:3a:d4:cc:1f:c6:b4:09:23:38:ed:a4:c2: 9a:26:52:ba:af:cb:87:3c:a7:9d:c9:53:ac:d8:56: ca:bc:cb:80:27:bd:46:89:1c:fe:8e:72:79:30:fd: 5f:b4:c4:8d:bc:ec:89:d5:a4:f5:bf:fe:e5:34:54: 46:4f:05:f8:f8:05:d5:b9:42:aa:60:c4:86:9b:1c: 76:38:8f:a3:c7:39:43:47:f1:cf:43:9c:76:f1:fe: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DC:7B:63:5F:14:20:96:CA:9C:3A:85:01:F9:46:9E:0A:68:CB:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/9deb75fd-d40d-3461-bd99-01696f038720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c6:af:84:38:2d:9f:ab:b9:a1:ac:7d:87:0b:4c:de:64:ad: f3:6e:a1:f0:25:01:85:7b:a4:05:0d:fc:8a:26:6e:06:4a:f0: 44:e5:a8:da:d9:bb:ab:e5:2c:cd:6c:07:dc:68:a4:dd:85:37: cc:6d:4e:76:3b:42:2a:fe:c2:b2:ea:12:94:49:7c:58:d4:a6: f1:fa:2c:2a:05:5a:e1:ca:33:e1:4a:1d:1b:91:2b:d6:96:98: df:50:da:29:09:b2:ad:90:a2:0b:46:d7:80:0f:be:0c:7d:7f: e7:94:e5:1c:37:c3:92:c1:76:ce:41:71:f8:85:3c:45:5c:32: 1e:50:54:0e:5c:4f:5a:6d:14:fa:c3:24:c7:f1:ac:19:81:61: 1f:72:c7:0a:18:bb:d4:ec:00:62:fb:b6:48:a3:b2:6b:21:b8: 72:c4:c2:12:b8:66:27:96:5b:e4:9f:b0:d5:63:df:fc:a2:f4: 08:11:ce:d8:8b:96:b5:0a:55:21:df:89:3c:10:2b:bd:03:44: 2f:a9:0f:85:da:5b:69:ff:63:04:8b:ec:3d:aa:34:e8:e8:c5: 44:3e:f6:bd:58:6c:ac:2c:bc:b4:15:96:7e:3a:a6:b7:33:ee: fb:3d:05:1f:4c:5e:11:29:ba:67:7b:da:28:23:88:33:db:85: 25:fc:83:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwhzNdxOqpbcAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MGM1YjU2NDMtOTg2NC00MDQ1LWFkNGUtMTM2ODU1MDM4YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi6W+COR1Cf1+X5+ItQ6ID5bJCd60TEqxVsE zekWcal4fx0rLzpMs33636IYmdYkd7JxdRIRmfA9g5KXoSxx+ywjKOUOqtvKolut UOqOG8aGfEydnVhruxcd2g5L07vh8NxKyEi1KvvHeB4C9smSDUNSXDcsSGBSQSkE PkMviz2L37vY48rCBh5SM7oIemClNRsEEA3dWhgpyDw9RAA2b7OSWhsxVKA61Mwf xrQJIzjtpMKaJlK6r8uHPKedyVOs2FbKvMuAJ71GiRz+jnJ5MP1ftMSNvOyJ1aT1 v/7lNFRGTwX4+AXVuUKqYMSGmxx2OI+jxzlDR/HPQ5x28f5TGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHce2NfFCCWypw6hQH5Rp4KaMv2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvOWRlYjc1ZmQtZDQwZC0z NDYxLWJkOTktMDE2OTZmMDM4NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3Gr4Q4LZ+ruaGsfYcLTN5krfNuofAlAYV7pAUN/IombgZK8ETlqNrZ u6vlLM1sB9xopN2FN8xtTnY7Qir+wrLqEpRJfFjUpvH6LCoFWuHKM+FKHRuRK9aW mN9Q2ikJsq2QogtG14APvgx9f+eU5Rw3w5LBds5BcfiFPEVcMh5QVA5cT1ptFPrD JMfxrBmBYR9yxwoYu9TsAGL7tkijsmshuHLEwhK4ZieWW+SfsNVj3/yi9AgRztiL lrUKVSHfiTwQK70DRC+pD4XaW2n/YwSL7D2qNOjoxUQ+9r1YbKwsvLQVln46prcz 7vs9BR9MXhEpumd72igjiDPbhSX8g5w= -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:29 2025 by rpki-client