$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96225c4-577d-362f-996e-c6ddfab1c84e.roa File: c96225c4-577d-362f-996e-c6ddfab1c84e.roa (raw, json) Hash identifier: 0uFHCRMek+zWkBRjFeJ8aZRdGHk6Ejw1I0+SEe4PrbY= Subject key identifier: 72:05:2C:69:96:89:B0:32:A8:80:44:29:A9:2D:C9:03:B1:27:72:E1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CE2A5078A58A5B9EDEFD3C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96225c4-577d-362f-996e-c6ddfab1c84e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 162.222.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2a:50:78:a5:8a:5b:9e:de:fd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c48e4cfd-63ba-447f-bcd1-3a2a55d0532d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:28:1c:2c:2e:c5:95:34:e1:2f:3e:94:6d: 1f:f3:bc:a0:89:0f:f1:b8:dc:75:b4:fd:cd:f7:6d: 20:f0:22:7c:e7:be:14:f1:3b:e8:0e:7a:da:85:7f: 45:d1:e7:27:98:c9:1c:81:3b:04:48:aa:4c:fb:a2: a6:4a:b8:c9:67:7f:f5:34:cf:c5:c2:83:48:86:3a: 2e:38:2b:e8:75:63:7b:3f:18:0c:c2:c8:80:e9:3f: 54:a2:f3:c2:11:5d:a7:04:d2:0f:d2:4a:4b:28:1f: 74:f6:46:46:7a:50:37:28:49:50:6a:ef:55:12:d5: 4e:67:de:5d:f2:53:b3:fc:11:57:61:90:93:67:a0: 38:6c:28:91:6d:30:8c:35:78:a5:ee:d7:6d:9f:f1: fa:4c:6a:62:b0:f6:9b:5c:d4:cf:78:76:76:55:89: fe:22:e5:df:a4:58:ba:e9:9c:12:d2:cf:5f:05:94: 13:63:11:61:b1:86:5d:18:e3:ea:fd:88:be:82:23: a9:6f:56:f8:39:3b:8a:48:f6:37:52:e9:9f:a2:9f: f9:ba:93:3b:99:ef:4d:13:f8:13:2d:23:45:39:d1: d5:44:8e:fe:bf:6a:2e:5c:d0:49:cd:8a:e0:33:41: b7:10:4e:d8:3b:a9:c9:58:09:6d:40:e7:92:b0:97: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:05:2C:69:96:89:B0:32:A8:80:44:29:A9:2D:C9:03:B1:27:72:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96225c4-577d-362f-996e-c6ddfab1c84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 162.222.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:96:11:94:73:6f:31:08:f1:7a:de:38:5e:68:b0:9c:ad:94: 00:4b:4f:e8:61:5d:27:fb:64:f7:2a:81:59:4f:a8:f3:dc:fc: dd:e3:c2:de:2a:74:7e:4c:44:f4:6a:19:78:8d:33:f6:cb:cc: dc:4b:4f:a8:f4:74:85:9d:f6:e1:81:7e:02:50:6b:a3:59:a0: a0:82:41:d6:77:b7:5f:e1:62:9c:13:e9:7b:5e:9c:8d:a7:75: 49:6d:a3:c7:84:1f:55:51:a6:b5:ac:e6:21:df:91:5e:07:5e: b7:c7:c2:e2:ea:05:ab:41:e6:05:62:ff:e6:55:10:f0:03:46: 62:a4:99:64:d0:34:0c:5b:33:b4:37:80:90:f1:47:a8:d5:52: 4e:ca:d5:73:26:a4:c8:f6:7c:6d:ff:01:40:ca:ba:c0:e4:f9: dc:b8:8c:12:ba:04:20:d0:cc:04:d4:30:cb:ca:ce:7b:1a:34: 2e:92:36:6f:98:6a:05:3b:9a:d4:20:e4:d5:bd:58:eb:94:f9: b6:7d:0b:d2:f7:9e:22:80:46:e1:75:5b:0b:8e:2c:ab:ce:0a: d6:81:1b:27:3c:19:6d:52:3d:6e:a5:a8:4b:a2:b3:a7:a0:80: 7b:b7:37:77:ab:d7:8e:fc:e5:07:f4:a4:a4:52:69:92:19:aa: 08:21:7e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzipQeKWKW57e/TwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzQ4ZTRjZmQtNjNiYS00NDdmLWJjZDEtM2EyYTU1ZDA1MzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEAoHCwuxZU04S8+lG0f87ygiQ/xuNx1tP3N 920g8CJ8574U8TvoDnrahX9F0ecnmMkcgTsESKpM+6KmSrjJZ3/1NM/FwoNIhjou OCvodWN7PxgMwsiA6T9UovPCEV2nBNIP0kpLKB909kZGelA3KElQau9VEtVOZ95d 8lOz/BFXYZCTZ6A4bCiRbTCMNXil7tdtn/H6TGpisPabXNTPeHZ2VYn+IuXfpFi6 6ZwS0s9fBZQTYxFhsYZdGOPq/Yi+giOpb1b4OTuKSPY3Uumfop/5upM7me9NE/gT LSNFOdHVRI7+v2ouXNBJzYrgM0G3EE7YO6nJWAltQOeSsJewqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIFLGmWibAyqIBEKaktyQOxJ3LhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzk2MjI1YzQtNTc3ZC0z NjJmLTk5NmUtYzZkZGZhYjFjODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyWEZRzbzEI8XreOF5osJytlABLT+hhXSf7ZPcqgVlPqPPc/N3jwt4q dH5MRPRqGXiNM/bLzNxLT6j0dIWd9uGBfgJQa6NZoKCCQdZ3t1/hYpwT6XtenI2n dUlto8eEH1VRprWs5iHfkV4HXrfHwuLqBatB5gVi/+ZVEPADRmKkmWTQNAxbM7Q3 gJDxR6jVUk7K1XMmpMj2fG3/AUDKusDk+dy4jBK6BCDQzATUMMvKznsaNC6SNm+Y agU7mtQg5NW9WOuU+bZ9C9L3niKARuF1WwuOLKvOCtaBGyc8GW1SPW6lqEuis6eg gHu3N3er14785Qf0pKRSaZIZqgghfmA= -----END CERTIFICATE-----Generated at Mon Oct 20 01:58:42 2025 by rpki-client