$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b267e2b1-17be-364c-b4dc-85094d9fce80.roa File: b267e2b1-17be-364c-b4dc-85094d9fce80.roa (raw, json) Hash identifier: aone8DZq3fx1mm7bcJ/PRlAcTUEXwJYw+x27U8Sb2t8= Subject key identifier: DB:10:44:24:BB:BC:69:4A:1D:60:B9:BC:8C:23:C6:66:4F:1D:21:6E Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584B6A61E98DED677E95DEC013E0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b267e2b1-17be-364c-b4dc-85094d9fce80.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 55293 IP address blocks: 162.249.0.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e9:8d:ed:67:7e:95:de:c0:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=d9e36538-f744-4a04-a2f3-443256bbede2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ea:b3:44:0a:d5:f9:f6:6d:95:d4:f3:af:34: d7:ca:7a:8d:bc:af:d6:dd:a3:4f:21:72:a9:7d:24: c2:7d:ff:0a:a1:05:e0:3c:d5:ff:fc:7a:0e:be:6b: 36:81:87:4a:6f:6c:83:d6:54:8d:40:a9:8a:38:be: 15:b9:dd:5b:1a:59:b7:f5:86:e2:3a:2f:f6:56:c7: 61:33:5a:a7:f0:d3:3d:52:82:68:92:4d:a5:e3:3e: 6f:ad:d3:4e:87:18:51:c6:7d:ff:c8:98:a0:73:2c: e0:15:6c:21:9b:72:3e:ef:9e:44:ec:53:b6:0a:61: d4:31:ac:d3:17:57:e7:53:ba:f9:6a:d7:ee:cf:57: 7a:51:52:af:39:90:ce:d7:c8:fe:39:9c:80:2d:47: 53:85:36:2a:9f:4f:00:73:09:69:1e:0f:c2:5a:ca: 68:bc:8d:60:2b:0a:78:7d:c9:75:15:57:c3:aa:49: 6a:84:b0:0b:4c:06:9e:58:a3:1d:34:7f:43:ce:7d: 81:ca:63:b4:50:ce:59:87:14:5b:74:62:9e:c4:a6: ca:4a:2c:3d:0c:a1:e5:16:d8:13:c1:fc:d2:33:21: f5:fc:9a:c3:ba:02:5a:3c:c2:7d:44:fa:ba:39:5c: 54:cc:29:8d:51:b6:d8:cd:0c:40:f6:bd:27:cf:d3: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:10:44:24:BB:BC:69:4A:1D:60:B9:BC:8C:23:C6:66:4F:1D:21:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b267e2b1-17be-364c-b4dc-85094d9fce80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 162.249.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:42:4e:aa:96:70:27:f1:2a:4a:34:85:c8:92:52:d3:71:fc: 65:01:62:db:f5:e9:b0:97:8c:70:76:b9:86:2e:03:02:a4:49: 48:a2:f0:67:93:c9:1d:e0:bb:f0:00:e8:a9:20:ce:a1:a0:b2: 27:6f:17:20:93:dd:fd:8d:5a:d9:c2:bb:9d:ca:0f:1b:45:14: 33:5c:b1:61:39:e4:ea:ff:89:29:13:bc:bd:b8:74:31:4a:d0: 3f:8b:69:3d:8e:38:47:fc:ed:56:41:b2:88:84:62:22:b0:c4: 96:bd:93:f2:da:e4:1b:03:4c:ce:5a:61:fb:cc:52:4e:4a:b7: 8d:7d:bc:af:3f:6f:e3:e1:bd:05:5b:59:7d:ff:5c:68:d8:b2: c2:ef:76:c2:14:af:c7:ba:7e:20:fc:fd:5f:75:f6:08:57:1a: 5c:f4:00:07:21:dd:4d:ba:41:82:70:2c:ae:e9:ba:f6:4b:96: 1b:7b:89:f2:5a:dd:b5:91:b6:a7:e4:e9:de:db:c3:e2:b8:7a: 75:6f:41:3f:2a:aa:a8:70:47:a7:50:46:f2:c3:6b:43:93:a1: de:af:dd:5a:ba:e2:10:98:1d:71:0c:82:8d:cb:d3:5a:c0:7b: 10:92:81:80:2b:9c:79:e8:34:f7:00:25:09:75:36:f6:05:70: 7d:fe:e3:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYemN7Wd+ld7AE+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZDllMzY1MzgtZjc0NC00YTA0LWEyZjMtNDQzMjU2YmJlZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOqzRArV+fZtldTzrzTXynqNvK/W3aNPIXKp fSTCff8KoQXgPNX//HoOvms2gYdKb2yD1lSNQKmKOL4Vud1bGlm39YbiOi/2Vsdh M1qn8NM9UoJokk2l4z5vrdNOhxhRxn3/yJigcyzgFWwhm3I+755E7FO2CmHUMazT F1fnU7r5atfuz1d6UVKvOZDO18j+OZyALUdThTYqn08AcwlpHg/CWspovI1gKwp4 fcl1FVfDqklqhLALTAaeWKMdNH9Dzn2BymO0UM5ZhxRbdGKexKbKSiw9DKHlFtgT wfzSMyH1/JrDugJaPMJ9RPq6OVxUzCmNUbbYzQxA9r0nz9NrvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsQRCS7vGlKHWC5vIwjxmZPHSFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYjI2N2UyYjEtMTdiZS0z NjRjLWI0ZGMtODUwOTRkOWZjZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhCTqqWcCfxKko0hciSUtNx/GUBYtv16bCXjHB2uYYuAwKkSUii8GeT yR3gu/AA6KkgzqGgsidvFyCT3f2NWtnCu53KDxtFFDNcsWE55Or/iSkTvL24dDFK 0D+LaT2OOEf87VZBsoiEYiKwxJa9k/La5BsDTM5aYfvMUk5Kt419vK8/b+PhvQVb WX3/XGjYssLvdsIUr8e6fiD8/V919ghXGlz0AAch3U26QYJwLK7puvZLlht7ifJa 3bWRtqfk6d7bw+K4enVvQT8qqqhwR6dQRvLDa0OTod6v3Vq64hCYHXEMgo3L01rA exCSgYArnHnoNPcAJQl1NvYFcH3+40s= -----END CERTIFICATE-----Generated at Sun Oct 19 17:52:18 2025 by rpki-client