$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa File: 97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa (raw, json) Hash identifier: 03b9VqLVfvvvLsMuYyVAra4gm66UVoullaCx67590f4= Subject key identifier: 66:44:63:52:67:E3:8A:1C:B7:41:F2:74:CA:D2:DE:45:75:F2:AC:D4 Certificate issuer: /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae Certificate serial: 010D0C9F4328584B8EACDC52E11FC712730DC580 Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 40555 IP address blocks: 162.211.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:dc:52:e1:1f:c7:12:73:0d:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=4d4a0598-9326-483d-bcd0-dbd7f6accbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:84:77:b8:55:c0:3a:a1:1e:f5:d7:fa:90: 0c:80:4f:84:7f:eb:45:46:25:d6:f3:d1:29:3f:41: 03:3e:12:b6:c0:2e:fe:f5:1b:88:a1:77:75:7d:60: 1d:a7:bf:65:33:78:a8:9c:39:2e:b3:52:dc:16:66: a9:53:55:06:66:16:59:b5:73:00:8d:d3:16:72:df: 11:95:14:b0:fe:ce:a3:fc:88:54:2f:17:27:c2:89: 78:7e:81:a0:4a:8b:33:bb:23:92:db:4a:55:63:6e: 35:90:71:3a:47:05:9a:6b:bf:1f:31:f8:59:ce:38: 2c:8e:85:dd:61:3c:9f:84:35:ec:94:16:ee:e9:64: 5e:35:e7:ac:c0:8f:2c:a8:a8:c4:36:fd:0e:65:7b: f0:ae:6c:36:a1:5b:0d:e1:80:5a:b1:02:05:d8:00: bb:71:36:49:34:a0:33:ad:bb:a1:ec:98:c7:62:9d: e3:63:64:86:63:db:bf:af:77:cc:3f:f0:52:0d:0b: fc:78:a9:57:c8:cf:d0:f3:07:e0:bd:d3:20:08:a5: 62:b3:7a:ed:a4:b1:12:46:da:48:ee:31:b7:99:fc: c2:b8:3f:3a:67:f4:41:64:41:38:2e:15:8b:50:95: b5:4f:3a:c3:4d:b3:ff:fb:5a:19:6b:a6:95:7a:c2: 0c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:44:63:52:67:E3:8A:1C:B7:41:F2:74:CA:D2:DE:45:75:F2:AC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/97d144eb-65b8-31c9-8faf-e281e65dfb2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl X509v3 Authority Key Identifier: keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer sbgp-ipAddrBlock: critical IPv4: 162.211.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5a:70:79:65:e9:00:8f:6c:49:36:1a:bf:1c:f8:7e:d5:a2: 07:88:57:0b:e2:d6:74:8c:4a:e0:6c:67:13:e2:0b:3d:7b:67: 09:ad:ba:ec:35:02:0c:ea:03:5d:91:d9:95:07:bb:1c:61:3b: ca:b6:14:a8:85:83:7d:ee:65:f4:7d:d7:dd:91:8e:7e:40:ea: 5a:be:43:31:fc:e7:d2:7d:0e:f3:1a:e1:18:8b:87:c3:f8:62: 48:7f:c8:7d:c5:14:9e:a0:59:2b:2f:07:e6:ac:5f:0a:4b:69: 2a:86:35:df:dc:30:3a:dd:71:03:07:28:df:49:cb:e3:63:70: a5:3a:9d:3a:da:a8:e4:97:d7:c9:60:13:f8:b9:b0:a8:9f:d3: 0a:f6:fa:09:48:7f:a3:1b:63:5d:46:4c:61:6e:ea:e0:56:e1: 54:2c:14:ff:da:2c:da:57:2e:c4:ed:ec:6d:93:96:d7:57:e5: b6:82:7d:a1:e9:0c:5a:53:5b:d0:4a:ce:b0:59:59:c9:4c:3f: 4e:3d:1f:7e:2c:d7:fc:bc:27:98:11:f8:98:ed:a5:a6:17:c8: 82:ae:4d:05:27:d9:e4:9b:8f:8d:21:39:89:e3:de:b0:59:34: c2:41:4b:4f:df:6d:c8:de:70:45:98:65:3f:ed:dc:55:76:f1: 1f:91:af:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNxS4R/HEnMNxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNjODcyZGItYjcxMy00MzlhLWI5ZWYtYzk3Y2ZmMGNi ZmFlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NGQ0YTA1OTgtOTMyNi00ODNkLWJjZDAtZGJkN2Y2YWNjYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLWEd7hVwDqhHvXX+pAMgE+Ef+tFRiXW89Ep P0EDPhK2wC7+9RuIoXd1fWAdp79lM3ionDkus1LcFmapU1UGZhZZtXMAjdMWct8R lRSw/s6j/IhULxcnwol4foGgSoszuyOS20pVY241kHE6RwWaa78fMfhZzjgsjoXd YTyfhDXslBbu6WReNeeswI8sqKjENv0OZXvwrmw2oVsN4YBasQIF2AC7cTZJNKAz rbuh7JjHYp3jY2SGY9u/r3fMP/BSDQv8eKlXyM/Q8wfgvdMgCKVis3rtpLESRtpI 7jG3mfzCuD86Z/RBZEE4LhWLUJW1TzrDTbP/+1oZa6aVesIMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZEY1Jn44oct0HydMrS3kV18qzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Y2M4 NzJkYi1iNzEzLTQzOWEtYjllZi1jOTdjZmYwY2JmYWUvOTdkMTQ0ZWItNjViOC0z MWM5LThmYWYtZTI4MWU2NWRmYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWNjODcyZGItYjcxMy00MzlhLWI5 ZWYtYzk3Y2ZmMGNiZmFlLzljYzg3MmRiLWI3MTMtNDM5YS1iOWVmLWM5N2NmZjBj YmZhZS5jcmwwHwYDVR0jBBgwFoAUN3M2EnpRuuetmhRlonQD9z+WwgYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85Y2M4NzJkYi1iNzEzLTQzOWEtYjllZi1jOTdj ZmYwY2JmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZacHll6QCPbEk2Gr8c+H7VogeIVwvi1nSMSuBsZxPiCz17Zwmtuuw1 AgzqA12R2ZUHuxxhO8q2FKiFg33uZfR9192Rjn5A6lq+QzH859J9DvMa4RiLh8P4 Ykh/yH3FFJ6gWSsvB+asXwpLaSqGNd/cMDrdcQMHKN9Jy+NjcKU6nTraqOSX18lg E/i5sKif0wr2+glIf6MbY11GTGFu6uBW4VQsFP/aLNpXLsTt7G2TltdX5baCfaHp DFpTW9BKzrBZWclMP049H34s1/y8J5gR+JjtpaYXyIKuTQUn2eSbj40hOYnj3rBZ NMJBS0/fbcjecEWYZT/t3FV28R+Rr6Q= -----END CERTIFICATE-----Generated at Tue Oct 21 17:59:00 2025 by rpki-client