$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa File: 77249fb6-3491-3c4a-b600-9e887b42f36b.roa (raw, json) Hash identifier: i6EChnq84Sxe0cGEW06MFCfRI7/4+D4i0teCTilZZts= Subject key identifier: 6F:2E:A7:39:AD:BE:C6:0D:B8:0B:71:45:05:81:92:12:26:CA:11:94 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584AFC1BF1C2FBBD9D70A6A93260 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 62856 IP address blocks: 162.248.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f1:c2:fb:bd:9d:70:a6:a9:32:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ed63a714-fb8f-4bfe-b043-b6b2153a8b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:57:4a:d4:71:47:59:58:65:1e:5f:c8:d7: ce:ba:15:b6:5f:82:9e:0a:27:a0:4b:24:c2:a3:27: 8b:16:65:15:a9:00:de:4c:27:95:84:83:4c:53:2d: 37:18:69:97:f0:54:ac:5d:40:20:53:fd:9c:19:7c: 1c:8e:7d:7a:1e:40:4e:6a:6e:f8:4e:4a:28:b8:91: 8a:9a:ab:61:82:fa:15:65:e1:64:4f:db:3f:d9:97: 3c:57:a4:8b:97:17:dc:98:74:fc:7f:5d:48:44:01: 5a:7c:85:53:fb:9e:81:82:93:03:b1:f4:02:e2:a6: c0:da:51:33:b9:e3:47:b8:36:90:5a:ae:94:10:0c: f7:22:00:ce:b9:6e:c9:d6:89:c2:6e:31:b0:7f:13: fb:13:3b:b7:63:d7:3a:01:d8:6d:b2:06:b0:ca:39: 7d:bc:49:bb:de:d8:26:38:6c:f9:4e:13:33:9d:18: ea:ee:e0:30:9f:94:c4:a7:b1:f6:1d:05:c4:19:bd: 39:b3:67:6c:55:61:73:3f:3f:62:3b:2a:a9:f3:fa: 34:90:0c:99:8c:28:41:74:5b:70:c6:54:35:b3:9e: 8a:2c:8b:92:15:dd:40:5a:92:09:b6:8c:c6:dd:3a: 56:2c:3d:cc:d4:5d:2f:20:26:e7:14:90:33:ed:8f: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2E:A7:39:AD:BE:C6:0D:B8:0B:71:45:05:81:92:12:26:CA:11:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/77249fb6-3491-3c4a-b600-9e887b42f36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 162.248.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8c:78:c6:81:e9:18:c2:09:2a:4e:3c:cf:3d:0d:2e:bb:df: 00:e5:3b:e3:8e:e0:46:05:ba:01:77:16:43:6d:bf:c1:33:22: 4c:0d:d7:de:da:c2:d0:1d:b6:b9:54:ad:48:50:3c:68:2d:a1: 15:4a:2d:66:82:97:01:ba:9d:ce:5c:20:12:d4:5f:49:fa:c3: 27:16:02:07:f1:22:5c:de:f9:d2:59:94:f1:1f:71:df:f8:6e: 79:31:67:72:56:46:6e:c1:34:9d:a9:85:fc:79:8e:f4:2c:97: b9:38:e2:c3:45:8e:c4:bc:38:58:74:85:ba:c2:70:71:60:a3: e7:33:3f:b6:33:79:bf:6f:35:6f:c2:f9:c4:9b:99:22:b8:16: 25:60:67:85:29:cb:ad:95:ff:bf:65:b0:45:8d:b3:9b:53:b7: 0e:35:bc:cc:aa:a3:b8:f7:bf:75:82:0e:9e:8e:31:40:88:7d: f4:3c:84:e6:01:c7:06:8f:e9:f6:a9:ec:10:75:16:10:82:0f: 6c:2d:d9:dc:3d:62:27:8a:35:b4:05:ff:38:97:36:9f:b1:07: 30:5a:3e:31:f6:62:a0:72:a7:db:d8:d1:ee:c5:4f:25:e7:2a: b8:31:ef:33:a5:ec:34:3a:55:97:33:57:0f:eb:e7:73:66:ca: 8d:4d:8d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/HC+72dcKapMmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWQ2M2E3MTQtZmI4Zi00YmZlLWIwNDMtYjZiMjE1M2E4YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3NXStRxR1lYZR5fyNfOuhW2X4KeCiegSyTC oyeLFmUVqQDeTCeVhINMUy03GGmX8FSsXUAgU/2cGXwcjn16HkBOam74TkoouJGK mqthgvoVZeFkT9s/2Zc8V6SLlxfcmHT8f11IRAFafIVT+56BgpMDsfQC4qbA2lEz ueNHuDaQWq6UEAz3IgDOuW7J1onCbjGwfxP7Ezu3Y9c6Adhtsgawyjl9vEm73tgm OGz5ThMznRjq7uAwn5TEp7H2HQXEGb05s2dsVWFzPz9iOyqp8/o0kAyZjChBdFtw xlQ1s56KLIuSFd1AWpIJtozG3TpWLD3M1F0vICbnFJAz7Y8fnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8upzmtvsYNuAtxRQWBkhImyhGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNzcyNDlmYjYtMzQ5MS0z YzRhLWI2MDAtOWU4ODdiNDJmMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovi4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+MeMaB6RjCCSpOPM89DS673wDlO+OO4EYFugF3FkNtv8EzIkwN197a wtAdtrlUrUhQPGgtoRVKLWaClwG6nc5cIBLUX0n6wycWAgfxIlze+dJZlPEfcd/4 bnkxZ3JWRm7BNJ2phfx5jvQsl7k44sNFjsS8OFh0hbrCcHFgo+czP7Yzeb9vNW/C +cSbmSK4FiVgZ4Upy62V/79lsEWNs5tTtw41vMyqo7j3v3WCDp6OMUCIffQ8hOYB xwaP6fap7BB1FhCCD2wt2dw9YieKNbQF/ziXNp+xBzBaPjH2YqByp9vY0e7FTyXn Krgx7zOl7DQ6VZczVw/r53Nmyo1NjRs= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:56 2025 by rpki-client