$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa File: 1fda95ac-3843-3be1-be0c-4e0693659ba3.roa (raw, json) Hash identifier: qDMpldU5Ici95PzTSK+frRWeACbgYCX2mYnYK2e3pjo= Subject key identifier: E1:25:20:BE:8D:88:E4:09:30:5A:19:F1:73:AF:FE:FA:72:47:FB:35 Certificate issuer: /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb Certificate serial: 010D0C9F4328584B92DCF3249F034568EF4D3698 Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 32338 IP address blocks: 162.251.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f3:24:9f:03:45:68:ef:4d:36:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=a12be98d-08e4-4b54-b9a3-b4cf9fb30275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:91:f9:7e:c5:61:de:97:99:4f:6e:d4:22: ae:45:d2:92:de:b9:e5:64:37:7d:46:db:21:11:80: 8c:1b:04:0f:bb:f9:e5:42:f7:63:73:fd:28:d5:c0: ec:5d:fa:e3:49:6a:f7:d8:ac:c3:4e:1a:58:1f:f1: 0f:3b:88:78:c9:f0:5f:08:c9:18:68:49:c2:af:a2: 4a:f8:f6:0b:c0:67:49:bb:11:08:3e:67:a3:9e:ba: a6:cd:33:15:ff:92:26:e1:10:2b:c2:d1:42:59:92: 8e:f4:fa:2a:b1:a7:42:a1:56:a6:bc:2a:64:d2:38: be:19:8e:0b:da:ab:24:a4:8d:a3:1d:29:4d:0c:73: 14:f4:c8:3a:82:70:61:63:75:1c:43:bd:b1:a6:9b: 8a:f2:f6:92:d0:29:a4:cc:8c:a3:77:e4:d8:18:c2: a0:63:ef:e2:fc:82:5d:bb:86:72:10:77:28:b3:4b: 69:ed:cc:2d:86:da:27:d7:a0:79:74:8c:c5:db:bc: 4e:48:d2:b8:8c:18:39:5b:e2:9d:7c:10:0d:d0:36: a7:8b:d8:99:22:9a:4e:4c:eb:f5:79:f8:cf:ba:d9: 64:b9:35:62:dd:91:8c:15:83:87:a3:e3:fe:f2:4f: 07:68:15:ac:6d:5f:96:a4:c8:1d:83:d4:b8:f9:cb: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:25:20:BE:8D:88:E4:09:30:5A:19:F1:73:AF:FE:FA:72:47:FB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl X509v3 Authority Key Identifier: keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer sbgp-ipAddrBlock: critical IPv4: 162.251.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3c:ab:ca:a4:b7:6d:93:ab:f0:09:bd:b4:cd:2d:3a:d4:14: 92:19:a2:e7:8a:98:cc:71:b1:b1:5d:5a:45:ae:cd:ba:3c:86: 60:bb:d5:73:f3:a6:8f:f6:81:3b:3d:8c:20:a1:8c:2c:8e:11: ad:f1:6f:4b:6e:40:aa:8c:19:dd:ae:63:9e:79:68:d5:19:15: 71:e3:b9:19:50:94:14:b5:f2:d0:59:b6:b7:ce:2f:e5:82:71: 16:04:ca:cd:f7:2a:49:bb:01:c4:1b:0d:64:2b:0f:ba:a5:75: 9d:6e:2e:de:71:97:a5:28:90:d8:90:c0:1d:ca:03:76:1c:32: d0:4b:ec:02:38:bd:c3:be:6c:72:fb:f4:64:b4:db:bc:1f:02: e0:64:22:54:41:7e:27:eb:13:b1:64:e1:b6:52:63:11:c6:ed: 31:08:2c:a4:db:f6:96:96:f2:2c:1d:a6:2b:d1:f4:03:37:84: df:1e:15:02:86:7d:ee:20:a7:3c:09:fc:25:4b:d5:ca:85:dc: c2:0f:ce:bc:39:01:aa:e2:8f:60:f6:ea:60:ec:85:31:9f:68: fa:19:7c:1e:cd:55:aa:12:4d:aa:e2:b3:7b:76:16:d0:c3:8e: 57:f1:d5:0e:f3:1f:71:0a:a1:d1:90:0d:86:3b:35:d2:44:eb: 2c:c4:72:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PMknwNFaO9NNpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2OWE0NDEtNzZiNy00YjIwLWE0MTEtN2E2MThiZDYx YmNiMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YTEyYmU5OGQtMDhlNC00YjU0LWI5YTMtYjRjZjlmYjMwMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTOR+X7FYd6XmU9u1CKuRdKS3rnlZDd9Rtsh EYCMGwQPu/nlQvdjc/0o1cDsXfrjSWr32KzDThpYH/EPO4h4yfBfCMkYaEnCr6JK +PYLwGdJuxEIPmejnrqmzTMV/5Im4RArwtFCWZKO9PoqsadCoVamvCpk0ji+GY4L 2qskpI2jHSlNDHMU9Mg6gnBhY3UcQ72xppuK8vaS0CmkzIyjd+TYGMKgY+/i/IJd u4ZyEHcos0tp7cwthton16B5dIzF27xOSNK4jBg5W+KdfBAN0Dani9iZIppOTOv1 efjPutlkuTVi3ZGMFYOHo+P+8k8HaBWsbV+WpMgdg9S4+culFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOElIL6NiOQJMFoZ8XOv/vpyR/s1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYjY5 YTQ0MS03NmI3LTRiMjAtYTQxMS03YTYxOGJkNjFiY2IvMWZkYTk1YWMtMzg0My0z YmUxLWJlMGMtNGUwNjkzNjU5YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmI2OWE0NDEtNzZiNy00YjIwLWE0 MTEtN2E2MThiZDYxYmNiL2JiNjlhNDQxLTc2YjctNGIyMC1hNDExLTdhNjE4YmQ2 MWJjYi5jcmwwHwYDVR0jBBgwFoAUCUbQpzHIEhtfZmBTS5AMvV2dFSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYjY5YTQ0MS03NmI3LTRiMjAtYTQxMS03YTYx OGJkNjFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI8q8qkt22Tq/AJvbTNLTrUFJIZoueKmMxxsbFdWkWuzbo8hmC71XPz po/2gTs9jCChjCyOEa3xb0tuQKqMGd2uY555aNUZFXHjuRlQlBS18tBZtrfOL+WC cRYEys33Kkm7AcQbDWQrD7qldZ1uLt5xl6UokNiQwB3KA3YcMtBL7AI4vcO+bHL7 9GS027wfAuBkIlRBfifrE7Fk4bZSYxHG7TEILKTb9paW8iwdpivR9AM3hN8eFQKG fe4gpzwJ/CVL1cqF3MIPzrw5Aarij2D26mDshTGfaPoZfB7NVaoSTaris3t2FtDD jlfx1Q7zH3EKodGQDYY7NdJE6yzEcns= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:06 2025 by rpki-client