$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa File: e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa (raw, json) Hash identifier: RUU2D3AWAfVo3NLG2XTj+j+k+ygm+mChCBe1beDMPuI= Subject key identifier: CA:7E:EA:6A:51:50:86:D2:08:A6:8D:2E:F1:C7:72:10:75:9B:4D:5F Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584B3556F255C147B47BA3D2FA80 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 34689 IP address blocks: 162.254.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f2:55:c1:47:b4:7b:a3:d2:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=8abee4e2-c2ac-4e6b-96e1-d60ccfa4d228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:33:eb:7f:2d:a5:7d:b5:06:51:99:e9:30: 36:4e:8a:fc:82:f0:3d:5c:80:1f:4c:f7:27:a6:78: 64:20:06:79:ae:25:d0:22:76:2c:a0:e9:0d:84:35: a9:dc:1f:18:10:4a:a9:f0:33:19:14:79:b1:d3:01: 99:6a:2a:c6:05:60:c8:ca:8c:53:65:c2:0e:7c:aa: bd:8a:44:38:13:78:79:ec:02:a9:34:ac:e4:ce:c8: 0a:e6:d1:53:73:31:ef:a4:de:99:d7:4a:4e:96:39: c7:70:fd:5a:d3:be:ef:da:51:17:68:9d:c0:ac:a1: 9f:db:23:c2:fc:c6:f3:dd:93:a1:2a:2d:27:74:cf: b7:03:65:59:49:0b:6a:a2:ce:09:32:29:14:c0:bf: c7:bb:79:0a:34:06:40:42:66:05:6b:96:c6:51:8f: f3:17:62:7d:3f:a0:7c:b8:a5:8a:12:6d:03:d1:d0: 52:fc:80:72:b7:77:64:6c:06:88:3d:e4:3b:0b:a9: 56:ef:74:dd:9b:2e:ac:a7:91:97:17:43:e1:92:ab: af:b4:a1:14:7f:cb:34:95:04:dc:40:ae:98:05:2d: 4f:e0:8b:1c:4e:93:86:a2:10:31:66:22:7c:c2:4d: 54:f6:50:07:39:e0:86:d0:4b:6d:11:54:fc:f1:d2: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:EA:6A:51:50:86:D2:08:A6:8D:2E:F1:C7:72:10:75:9B:4D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a4:cb:ae:cf:57:99:a6:71:ca:d9:14:4d:15:4b:b1:c6:b4: 3f:e7:bf:f7:da:48:d3:8b:6a:5e:cc:12:fc:76:e6:43:87:09: 80:86:c9:75:b8:7f:3f:e0:04:94:01:ad:65:37:c7:3c:b0:43: 89:2e:93:4e:db:cd:62:ff:60:29:6a:08:90:ce:4f:d9:1d:3a: 5f:7a:b2:0a:8e:2d:b1:6f:26:7a:23:df:84:30:e8:2c:59:0f: c2:a6:e0:fa:ea:6e:8a:c0:60:9b:8e:de:b5:2f:76:dd:90:69: 39:17:56:f9:62:96:7a:d7:4c:f0:d2:3e:3a:e3:88:54:d6:00: bc:20:c0:ee:81:21:ec:71:b9:b0:3f:63:db:b3:52:a2:7e:63: 5e:30:74:63:94:d3:50:0e:64:6a:b7:c1:df:81:43:e9:f1:fa: 2a:24:c6:4c:7c:89:62:7c:95:16:80:6c:aa:a4:35:b8:d7:7e: 5f:32:e1:15:6f:6d:1f:db:e1:bc:2c:2d:8c:cc:2f:2d:bf:73: f2:e9:f3:58:87:bd:8f:91:a8:60:d8:3f:26:5b:ff:ea:da:f1: 73:b1:ea:bd:d9:02:71:b5:72:74:49:eb:9c:3f:27:fa:95:b1: e1:9f:91:d8:ab:0c:17:24:3d:46:e2:38:d7:09:10:a1:d8:7a: 26:18:69:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvJVwUe0e6PS+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OGFiZWU0ZTItYzJhYy00ZTZiLTk2ZTEtZDYwY2NmYTRkMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4sz638tpX21BlGZ6TA2Tor8gvA9XIAfTPcn pnhkIAZ5riXQInYsoOkNhDWp3B8YEEqp8DMZFHmx0wGZairGBWDIyoxTZcIOfKq9 ikQ4E3h57AKpNKzkzsgK5tFTczHvpN6Z10pOljnHcP1a077v2lEXaJ3ArKGf2yPC /Mbz3ZOhKi0ndM+3A2VZSQtqos4JMikUwL/Hu3kKNAZAQmYFa5bGUY/zF2J9P6B8 uKWKEm0D0dBS/IByt3dkbAaIPeQ7C6lW73Tdmy6sp5GXF0PhkquvtKEUf8s0lQTc QK6YBS1P4IscTpOGohAxZiJ8wk1U9lAHOeCG0EttEVT88dIBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp+6mpRUIbSCKaNLvHHchB1m01fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZThkMzliYmUtY2Y1Mi0z ZTJkLTkxYzAtMmIzYjQwNDIwODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOky67PV5mmccrZFE0VS7HGtD/nv/faSNOLal7MEvx25kOHCYCGyXW4 fz/gBJQBrWU3xzywQ4kuk07bzWL/YClqCJDOT9kdOl96sgqOLbFvJnoj34Qw6CxZ D8Km4PrqborAYJuO3rUvdt2QaTkXVvlilnrXTPDSPjrjiFTWALwgwO6BIexxubA/ Y9uzUqJ+Y14wdGOU01AOZGq3wd+BQ+nx+iokxkx8iWJ8lRaAbKqkNbjXfl8y4RVv bR/b4bwsLYzMLy2/c/Lp81iHvY+RqGDYPyZb/+ra8XOx6r3ZAnG1cnRJ65w/J/qV seGfkdirDBckPUbiONcJEKHYeiYYabc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:32:31 2025 by rpki-client