$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa File: 3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa (raw, json) Hash identifier: rNS+LY9CuQ/xQ7tgYoE8+Xrg+/vqpkHyEsXdoSUHI/Y= Subject key identifier: 2A:AA:2C:CC:74:AA:46:B9:E1:B5:DB:F2:14:E4:37:26:B5:9D:FA:04 Certificate issuer: /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785 Certificate serial: 010D0C9F4328584B64CE2DB94502996287BAAAC0 Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 38195 IP address blocks: 162.213.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:2d:b9:45:02:99:62:87:ba:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=315c3d28-3482-4e5b-bf43-256e58aec490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:54:5b:0c:bb:e1:f8:58:11:00:3c:17:e1: d5:45:e3:28:4f:db:3e:10:c9:87:cd:8f:39:b7:83: fc:0e:bb:f1:a6:c2:d8:b4:f3:8e:61:5b:d8:5b:e3: f8:58:2f:59:da:d7:a8:6f:ee:21:8f:46:6f:e4:eb: 0a:d8:84:05:16:5e:2d:27:41:de:45:c9:07:7e:5f: a9:c5:e9:9c:be:6a:fe:02:1b:d9:13:7e:c4:43:dc: 35:08:c0:52:1c:a8:2c:f7:ce:ed:8f:73:63:15:1d: 82:9a:3a:16:4a:0b:dc:2c:d2:a8:fb:93:71:ed:a4: de:12:7a:fb:49:0d:4b:14:e5:03:59:25:a1:a9:2c: db:3d:a7:87:5a:e7:aa:3c:68:ce:30:f9:8d:6d:3e: 01:23:3d:b1:7a:cd:44:23:36:71:97:80:94:86:6c: 36:2e:25:f4:6e:d1:96:a1:fe:2d:53:ce:42:55:e4: ff:9f:bc:eb:32:44:32:78:89:6c:c9:12:cc:26:e2: 1e:0a:ef:60:f9:d7:66:22:14:cc:a2:e9:24:7d:2b: b1:61:c6:c2:48:e8:d6:c6:4f:9f:16:25:3c:1a:5a: 01:f4:27:d8:25:ed:c4:df:b6:04:43:a5:98:3d:45: 7d:16:1b:16:24:58:12:1e:e1:42:f0:a7:93:39:65: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AA:2C:CC:74:AA:46:B9:E1:B5:DB:F2:14:E4:37:26:B5:9D:FA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl X509v3 Authority Key Identifier: keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer sbgp-ipAddrBlock: critical IPv4: 162.213.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:29:24:18:60:e7:90:15:f5:02:46:45:f5:b8:b2:ae:99:26: 05:79:2c:b4:2a:d0:f3:76:d0:b3:7a:58:77:b9:c8:54:d6:69: 7d:33:4e:07:bc:9a:96:52:54:74:88:b5:e1:04:f4:2b:b1:90: 0d:f3:11:f7:67:23:08:7c:69:be:40:90:5e:4d:e0:b5:2d:54: 69:73:06:3b:42:77:59:f6:ec:05:48:43:25:0e:91:96:b6:82: c8:5b:a8:fb:b2:e2:e9:ac:22:37:66:7d:82:cf:f3:57:4f:8c: cc:7d:af:6c:01:d5:93:c9:56:19:9b:25:04:41:1e:91:56:64: d4:e7:1b:62:91:a2:b8:c9:18:8c:8e:6d:cf:cd:33:cb:5c:2c: bb:93:c2:09:be:a3:70:db:66:5a:6f:7b:a4:56:ad:aa:e3:ab: f8:97:92:d9:18:9b:11:ec:24:d1:12:aa:93:d3:68:c8:9f:b3: 41:de:3b:a2:e2:e8:a9:7b:93:b3:3a:b7:e4:89:08:17:26:2c: 5f:7c:b7:81:08:84:e1:0e:d5:31:a5:6f:ef:18:e1:54:20:f3: cd:97:78:55:48:af:1d:c7:66:15:32:d0:d3:ea:d9:cf:3c:d7: 4f:58:2f:09:4d:f0:23:f9:e7:0a:99:30:86:f7:3e:59:0c:46: cf:49:48:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzi25RQKZYoe6qsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg1YjA0ZmYtNDBkOS00YmY3LThkMzgtNGRlMGM1NGJi Nzg1MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzE1YzNkMjgtMzQ4Mi00ZTViLWJmNDMtMjU2ZTU4YWVjNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnNUWwy74fhYEQA8F+HVReMoT9s+EMmHzY85 t4P8DrvxpsLYtPOOYVvYW+P4WC9Z2teob+4hj0Zv5OsK2IQFFl4tJ0HeRckHfl+p xemcvmr+AhvZE37EQ9w1CMBSHKgs987tj3NjFR2CmjoWSgvcLNKo+5Nx7aTeEnr7 SQ1LFOUDWSWhqSzbPaeHWueqPGjOMPmNbT4BIz2xes1EIzZxl4CUhmw2LiX0btGW of4tU85CVeT/n7zrMkQyeIlsyRLMJuIeCu9g+ddmIhTMoukkfSuxYcbCSOjWxk+f FiU8GloB9CfYJe3E37YEQ6WYPUV9FhsWJFgSHuFC8KeTOWVQbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqqLMx0qka54bXb8hTkNya1nfoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lODVi MDRmZi00MGQ5LTRiZjctOGQzOC00ZGUwYzU0YmI3ODUvM2U1MTYxYzctMmE1YS0z MWViLWJmMzctZTYxMjZlNTJjZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTg1YjA0ZmYtNDBkOS00YmY3LThk MzgtNGRlMGM1NGJiNzg1L2U4NWIwNGZmLTQwZDktNGJmNy04ZDM4LTRkZTBjNTRi Yjc4NS5jcmwwHwYDVR0jBBgwFoAU1r/j/S2QSWGv4ekJP7iPLOTjBlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lODViMDRmZi00MGQ5LTRiZjctOGQzOC00ZGUw YzU0YmI3ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkpJBhg55AV9QJGRfW4sq6ZJgV5LLQq0PN20LN6WHe5yFTWaX0zTge8 mpZSVHSIteEE9CuxkA3zEfdnIwh8ab5AkF5N4LUtVGlzBjtCd1n27AVIQyUOkZa2 gshbqPuy4umsIjdmfYLP81dPjMx9r2wB1ZPJVhmbJQRBHpFWZNTnG2KRorjJGIyO bc/NM8tcLLuTwgm+o3DbZlpve6RWrarjq/iXktkYmxHsJNESqpPTaMifs0HeO6Li 6Kl7k7M6t+SJCBcmLF98t4EIhOEO1TGlb+8Y4VQg882XeFVIrx3HZhUy0NPq2c88 109YLwlN8CP55wqZMIb3PlkMRs9JSNE= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:09 2025 by rpki-client