$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/b6c83c5d-996f-3027-b27f-293ced5d93f1.roa File: b6c83c5d-996f-3027-b27f-293ced5d93f1.roa (raw, json) Hash identifier: z4xE69h7RPHnzJX5BQVm6luWVdtMbBEbSuZuzEXZM2Q= Subject key identifier: 9C:35:FC:B1:B0:15:C3:13:D8:E6:C5:9A:2D:4D:05:A5:2A:FC:20:2B Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584B8A7CC59B25B1CEA2C5D0C280 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/b6c83c5d-996f-3027-b27f-293ced5d93f1.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 18914 IP address blocks: 162.219.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:c5:9b:25:b1:ce:a2:c5:d0:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=6bc72936-d7b3-45da-b33a-2480fc06bad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:d0:dd:53:9d:c9:ae:18:ac:61:43:a0:62: be:f5:60:87:9e:45:b9:de:89:bd:3f:24:06:18:bb: ff:83:f3:59:df:96:17:11:e5:70:f2:91:9f:d2:45: f5:11:4a:dd:bc:f0:b4:41:a0:c0:75:82:e5:eb:fa: d2:96:e6:1f:56:7f:2d:57:af:d2:84:8c:50:04:b2: c4:9b:8b:c7:59:de:51:db:aa:ed:b3:1c:3d:c9:56: c5:c3:5e:6b:18:d0:3d:d0:65:2b:13:b3:ef:f4:17: 79:65:20:43:da:9b:ff:5f:d3:d4:b0:c3:37:3c:f5: cb:ac:7b:1e:df:a0:4d:e9:de:6e:c4:09:72:95:99: dc:c7:70:90:e0:e5:54:b4:6c:53:14:6d:74:05:35: 1f:d6:f5:37:19:65:4a:20:80:e4:3c:e8:8e:2f:3a: 2a:1d:3e:af:f4:08:00:c8:bc:e3:0e:04:4c:d6:86: 8d:c3:f4:c9:67:50:7e:94:65:a7:4e:d1:2f:95:e6: 83:5f:c5:a5:bd:a2:2b:1c:f3:79:d1:59:b3:0c:6b: e9:d2:6b:d9:3f:74:5f:5f:45:d8:16:75:f7:ad:d4: 02:1b:73:a1:8d:02:a1:02:bb:4f:0b:30:85:3a:58: c0:57:52:d8:c4:d5:da:56:6c:97:9b:0f:4c:a9:17: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:35:FC:B1:B0:15:C3:13:D8:E6:C5:9A:2D:4D:05:A5:2A:FC:20:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/b6c83c5d-996f-3027-b27f-293ced5d93f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 162.219.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:88:c5:5a:04:6f:9c:01:b4:fa:b8:14:7f:71:5f:4e:66:46: 26:50:95:9f:f4:a9:13:af:a9:27:81:f9:05:16:be:b1:80:a9: d9:07:1e:cb:d3:f3:51:10:3f:71:03:82:cb:41:23:99:4b:a1: 39:cb:b0:62:63:4c:4d:63:07:b7:7f:28:92:c0:dd:25:fc:1d: 6e:e7:41:1c:2a:47:18:8e:2e:d2:4a:12:37:9f:10:8f:b6:59: fe:4f:42:bf:24:79:a9:b4:98:5c:85:fc:00:ee:87:19:30:d9: c4:fb:82:bf:1e:20:65:0e:2a:17:4a:c6:88:a9:54:81:09:e2: 55:c9:0c:82:29:e1:74:cb:8f:f5:72:17:2c:f6:a0:c4:92:c5: 88:85:9f:b7:55:dc:49:f0:3d:70:9d:f3:de:81:6d:2c:a9:36: 8f:73:3a:cd:4f:26:06:52:25:da:e0:8f:e8:ff:ad:1f:c1:89: a3:a6:4a:9e:b0:da:23:b5:32:16:e3:d7:e4:8e:e5:42:07:f5: 21:9b:3c:80:1c:8b:ff:46:4c:93:20:d5:09:33:09:57:91:80: 13:cc:6d:33:95:cc:64:c5:2d:0a:27:6d:81:23:b7:39:d2:63: ad:fe:01:44:8e:cb:ae:3d:5c:70:0f:48:78:93:62:d1:f6:97: 89:2c:5e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuKfMWbJbHOosXQwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk NmJjNzI5MzYtZDdiMy00NWRhLWIzM2EtMjQ4MGZjMDZiYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnDQ3VOdya4YrGFDoGK+9WCHnkW53om9PyQG GLv/g/NZ35YXEeVw8pGf0kX1EUrdvPC0QaDAdYLl6/rSluYfVn8tV6/ShIxQBLLE m4vHWd5R26rtsxw9yVbFw15rGNA90GUrE7Pv9Bd5ZSBD2pv/X9PUsMM3PPXLrHse 36BN6d5uxAlylZncx3CQ4OVUtGxTFG10BTUf1vU3GWVKIIDkPOiOLzoqHT6v9AgA yLzjDgRM1oaNw/TJZ1B+lGWnTtEvleaDX8WlvaIrHPN50VmzDGvp0mvZP3RfX0XY FnX3rdQCG3OhjQKhArtPCzCFOljAV1LYxNXaVmyXmw9MqReqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw1/LGwFcMT2ObFmi1NBaUq/CArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvYjZjODNjNWQtOTk2Zi0z MDI3LWIyN2YtMjkzY2VkNWQ5M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWIxVoEb5wBtPq4FH9xX05mRiZQlZ/0qROvqSeB+QUWvrGAqdkHHsvT 81EQP3EDgstBI5lLoTnLsGJjTE1jB7d/KJLA3SX8HW7nQRwqRxiOLtJKEjefEI+2 Wf5PQr8keam0mFyF/ADuhxkw2cT7gr8eIGUOKhdKxoipVIEJ4lXJDIIp4XTLj/Vy Fyz2oMSSxYiFn7dV3EnwPXCd896BbSypNo9zOs1PJgZSJdrgj+j/rR/BiaOmSp6w 2iO1Mhbj1+SO5UIH9SGbPIAci/9GTJMg1QkzCVeRgBPMbTOVzGTFLQonbYEjtznS Y63+AUSOy649XHAPSHiTYtH2l4ksXok= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:39 2025 by rpki-client