$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa File: 3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa (raw, json) Hash identifier: 7Ve6skTHu2OSH72Gqqyu/63iLPA1e2OBfS11HlcUVCw= Subject key identifier: 7A:F3:5B:43:E5:86:B1:49:46:80:C8:27:3D:6C:B1:A2:B4:06:D5:27 Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F4328584B87B2408D9A7124A686960BC0 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 36549 IP address blocks: 162.249.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:40:8d:9a:71:24:a6:86:96:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=a83aab36-56f7-475f-9a96-2a602ebdfed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:de:24:f3:8c:35:b5:49:90:41:74:90:4e: b1:33:a8:3a:0e:bb:e7:f6:c8:2e:80:06:52:cd:6b: a0:a9:7e:8f:56:54:b1:5c:10:fc:f7:0f:c5:be:09: ae:d7:ae:2a:b3:7c:4f:18:43:80:0a:f0:d0:f3:77: 40:d1:4a:54:f0:fd:62:9d:50:23:96:46:16:bd:7c: 27:4c:05:40:0e:02:e5:0c:a8:ad:69:9c:6a:5d:9d: 6d:5a:dc:13:00:c4:44:34:1a:b2:d9:9e:73:b2:1b: 7a:80:58:35:bb:05:da:13:d1:14:10:5f:e9:9a:15: 6d:1e:74:70:20:86:fb:eb:70:1d:42:52:1a:cd:ba: 0c:72:95:17:73:2f:9e:a5:21:a6:4c:33:01:0d:13: 56:98:9f:32:4a:58:87:7d:db:23:89:c0:ef:85:30: a1:03:72:92:40:03:ef:50:0f:70:86:fb:fa:21:e0: 88:48:04:0e:4a:60:e6:5b:7f:4a:8d:b0:fe:53:be: aa:db:8a:96:4b:e8:cc:81:2f:0a:0e:a0:c8:b8:98: 78:e4:d5:96:da:b2:e7:e6:c7:4e:7c:31:94:d2:16: 63:84:dc:38:14:44:5d:01:11:67:0e:c5:69:27:aa: f4:45:d4:d9:3d:74:e9:d1:4e:94:8e:2f:de:70:69: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F3:5B:43:E5:86:B1:49:46:80:C8:27:3D:6C:B1:A2:B4:06:D5:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv4: 162.249.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:56:72:97:02:5e:c3:27:0c:eb:11:a3:c0:7b:06:c7:b5:0d: 25:ce:10:f7:c2:50:ae:41:1d:12:e0:15:14:85:0e:6e:81:13: 4a:15:f9:5e:56:a0:75:a1:44:4f:a8:41:55:77:0c:c2:aa:21: 3f:7f:bf:c7:29:f9:e7:4a:bb:f1:f2:ba:39:13:f8:45:e7:aa: 4d:f0:88:bb:ed:77:d4:d5:a0:5e:ca:0b:94:f7:d1:75:d0:10: a6:a5:57:ff:71:fb:9f:4e:32:7b:2f:39:ee:de:3f:31:e4:25: 9b:83:5f:16:7b:f6:ee:47:ce:dc:c1:bf:38:fc:98:2f:b4:e6: 2d:b3:ea:68:44:12:16:aa:34:42:3a:2b:f5:e4:74:5d:5b:ea: 20:60:f0:be:a4:7b:33:50:89:a2:5f:75:8a:ae:22:3b:f1:c0: 54:b1:f4:77:68:a8:6b:1a:95:be:24:a8:00:d4:2c:8f:58:44: 08:e7:95:5b:80:f3:fc:d2:92:d3:12:6e:4b:58:0d:8d:06:7d: ac:b5:d6:19:26:9b:9b:0e:79:ac:35:80:93:22:b8:23:df:6f: 93:d4:54:ec:d3:33:49:5c:40:30:0d:92:0a:ab:5a:7b:df:66: 65:4f:11:fe:72:00:58:35:8b:12:38:59:32:00:98:36:3a:03: f7:51:23:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHskCNmnEkpoaWC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YTgzYWFiMzYtNTZmNy00NzVmLTlhOTYtMmE2MDJlYmRmZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy/eJPOMNbVJkEF0kE6xM6g6Drvn9sgugAZS zWugqX6PVlSxXBD89w/Fvgmu164qs3xPGEOACvDQ83dA0UpU8P1inVAjlkYWvXwn TAVADgLlDKitaZxqXZ1tWtwTAMRENBqy2Z5zsht6gFg1uwXaE9EUEF/pmhVtHnRw IIb763AdQlIazboMcpUXcy+epSGmTDMBDRNWmJ8ySliHfdsjicDvhTChA3KSQAPv UA9whvv6IeCISAQOSmDmW39KjbD+U76q24qWS+jMgS8KDqDIuJh45NWW2rLn5sdO fDGU0hZjhNw4FERdARFnDsVpJ6r0RdTZPXTp0U6Uji/ecGl/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrzW0PlhrFJRoDIJz1ssaK0BtUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvM2E0ODg4MzItNDJkNC0z YmM0LWE2MWYtYjdiZDhlMGFiM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5WcpcCXsMnDOsRo8B7Bse1DSXOEPfCUK5BHRLgFRSFDm6BE0oV+V5W oHWhRE+oQVV3DMKqIT9/v8cp+edKu/HyujkT+EXnqk3wiLvtd9TVoF7KC5T30XXQ EKalV/9x+59OMnsvOe7ePzHkJZuDXxZ79u5HztzBvzj8mC+05i2z6mhEEhaqNEI6 K/XkdF1b6iBg8L6kezNQiaJfdYquIjvxwFSx9HdoqGsalb4kqADULI9YRAjnlVuA 8/zSktMSbktYDY0Gfay11hkmm5sOeaw1gJMiuCPfb5PUVOzTM0lcQDANkgqrWnvf ZmVPEf5yAFg1ixI4WTIAmDY6A/dRI2g= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:56 2025 by rpki-client