$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa File: 04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa (raw, json) Hash identifier: BUDtc8bvUgxRk5ng2aGBdwsQL4Y94ewA6qUzH47aZ8U= Subject key identifier: 3C:B1:E5:85:E4:4E:F6:6B:6E:EA:2A:38:E4:AF:9F:D9:15:44:4E:0C Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584B8D4778AFD5F9493F14C1F600 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 395301 IP address blocks: 162.120.64.0/24 maxlen: 24 162.120.65.0/24 maxlen: 24 162.120.66.0/24 maxlen: 24 162.120.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:78:af:d5:f9:49:3f:14:c1:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=ce85b34d-c1cd-4f2e-ad4c-ddda974e185d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:70:42:4c:95:cb:9d:d5:99:97:75:99:d1: 33:40:ac:52:e2:41:13:75:46:0d:fa:e8:df:ef:c1: 9f:78:ec:e9:20:9e:d7:1e:c4:02:06:87:08:1e:2f: d9:51:55:a0:eb:dc:4c:2b:ed:f7:10:b4:07:8e:09: c1:4e:4b:c0:1d:bd:e2:fb:27:97:37:65:67:eb:45: 34:f3:f0:b7:a3:0e:70:38:c1:ca:84:30:c0:5d:fc: a8:db:a3:70:04:d2:0e:49:cf:b1:76:19:b7:a8:aa: 46:44:6d:96:fd:65:e2:d1:c9:86:cf:28:2e:1d:38: ca:ea:35:1b:29:b2:55:bf:d0:43:2e:9c:9a:5f:6b: 1d:65:2f:f3:8d:9d:80:85:3a:ce:43:2e:4a:8c:fa: c8:e3:9e:d4:a9:f4:07:6b:88:49:58:c9:48:c4:ba: fe:34:26:7a:85:07:64:a7:2c:0d:33:77:dc:c1:a0: be:48:df:77:19:e9:fc:0c:a9:9f:fa:a3:8e:53:27: 8c:8e:65:af:74:6a:91:0c:1b:11:37:5a:d2:0c:0d: 28:04:6e:1a:f1:d9:1c:d8:08:91:28:82:89:77:54: 2f:ff:89:ef:a8:d8:43:e5:0a:8b:cf:bf:2f:b2:1c: 31:25:2f:14:65:c8:10:24:db:4b:2f:8d:94:eb:82: db:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B1:E5:85:E4:4E:F6:6B:6E:EA:2A:38:E4:AF:9F:D9:15:44:4E:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/04ff5347-ecb0-3e2b-96ac-a6a1254ef420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 162.120.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2c:46:61:9b:ba:4c:ba:3b:c0:f2:17:29:48:6a:9a:b1:69: 4c:41:a9:99:8e:40:8f:4e:d6:46:99:77:19:07:40:a4:01:e8: b1:f8:e3:35:a0:35:ca:26:29:24:b5:85:13:74:81:4b:f6:7d: 55:78:45:da:57:7d:91:5a:0c:2d:4b:c6:59:a9:2a:ee:4d:52: 9e:ed:1b:6a:26:29:c5:3e:39:ad:07:2c:65:e7:aa:fa:87:50: 84:45:bd:9a:9c:f2:f6:9d:38:eb:25:48:7f:85:16:07:d2:1a: de:52:cb:76:e8:5a:dd:bb:f5:82:5c:3e:12:a0:20:93:6b:4b: 52:eb:f3:6d:02:08:b4:32:f3:ae:22:e9:1d:8c:70:de:de:db: af:6b:ed:b5:7b:fe:9b:1c:13:ee:5b:9d:23:b9:f3:79:ed:b9: e1:f9:87:fa:cd:33:1a:0b:d2:e9:b3:7a:d6:19:81:57:e1:11: 0e:0c:ba:2c:dd:c3:62:97:8e:98:2b:31:d1:24:4f:81:8f:c5: 0b:a6:d0:a0:07:3a:4c:f2:c9:46:f2:ee:39:65:9c:a7:32:1e: 8a:85:8c:1c:0a:cf:0e:43:02:f9:c6:0b:a6:07:09:1e:08:2f: 47:e4:36:65:4b:d2:79:17:d2:36:a3:08:5e:79:50:7b:54:c6: d8:b0:b4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR3iv1flJPxTB9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk Y2U4NWIzNGQtYzFjZC00ZjJlLWFkNGMtZGRkYTk3NGUxODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxShwQkyVy53VmZd1mdEzQKxS4kETdUYN+ujf 78GfeOzpIJ7XHsQCBocIHi/ZUVWg69xMK+33ELQHjgnBTkvAHb3i+yeXN2Vn60U0 8/C3ow5wOMHKhDDAXfyo26NwBNIOSc+xdhm3qKpGRG2W/WXi0cmGzyguHTjK6jUb KbJVv9BDLpyaX2sdZS/zjZ2AhTrOQy5KjPrI457UqfQHa4hJWMlIxLr+NCZ6hQdk pywNM3fcwaC+SN93Gen8DKmf+qOOUyeMjmWvdGqRDBsRN1rSDA0oBG4a8dkc2AiR KIKJd1Qv/4nvqNhD5QqLz78vshwxJS8UZcgQJNtLL42U64LbaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyx5YXkTvZrbuoqOOSvn9kVRE4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvMDRmZjUzNDctZWNiMC0z ZTJiLTk2YWMtYTZhMTI1NGVmNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8sRmGbuky6O8DyFylIapqxaUxBqZmOQI9O1kaZdxkHQKQB6LH44zWg NcomKSS1hRN0gUv2fVV4RdpXfZFaDC1LxlmpKu5NUp7tG2omKcU+Oa0HLGXnqvqH UIRFvZqc8vadOOslSH+FFgfSGt5Sy3boWt279YJcPhKgIJNrS1Lr820CCLQy864i 6R2McN7e269r7bV7/pscE+5bnSO583ntueH5h/rNMxoL0umzetYZgVfhEQ4Muizd w2KXjpgrMdEkT4GPxQum0KAHOkzyyUby7jllnKcyHoqFjBwKzw5DAvnGC6YHCR4I L0fkNmVL0nkX0jajCF55UHtUxtiwtIE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:52 2025 by rpki-client