$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa File: a257f246-17a5-3501-b8c6-4b74e9394e23.roa (raw, json) Hash identifier: Xn8QL0ahV3GmS2eW+gy9S9gV9W5aqaW5IJnD0w88shU= Subject key identifier: EA:20:BB:97:2A:41:F7:00:AF:1F:77:70:10:34:36:A0:E9:B3:8E:B6 Certificate issuer: /CN=34247a70-c93d-4065-9548-762da5a386ba Certificate serial: 010D0C9F4328584B76F25BE828BBDBF07902A400 Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 54665 IP address blocks: 72.162.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5b:e8:28:bb:db:f0:79:02:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ce0ad24c-dbed-464f-ac7d-ce4425385873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:67:81:c8:80:cd:08:aa:26:0d:78:71:d3: 84:8a:5f:64:6f:ef:bb:af:63:29:1d:ad:7e:0a:45: a9:13:78:32:e4:3a:78:87:ab:aa:16:1a:ac:28:5a: 99:05:22:d1:c8:37:b2:03:4a:83:9f:94:4b:5e:17: 1b:3b:c6:90:ec:21:a3:93:bb:c0:3f:1e:1b:60:a5: 32:d8:11:12:12:4a:f3:27:64:b5:b2:16:a4:db:50: 39:28:fd:e5:5b:0e:a9:85:1d:40:c4:a5:c3:df:aa: 80:c0:df:4e:fa:d3:ec:85:67:af:7d:5f:b7:cd:3a: ee:79:d4:15:ac:7b:35:f4:54:f9:c5:9d:e4:51:40: 59:a2:52:7d:f2:66:d5:0a:c1:45:96:55:e0:09:df: 91:64:fd:a9:fe:8c:c4:46:5a:5f:55:e1:61:4f:69: be:11:3f:9d:7b:f6:5a:72:f5:4d:89:de:19:86:bb: 9d:7e:da:88:ea:81:8e:dc:ab:c3:8d:29:67:56:32: 66:05:48:1f:9b:49:b8:f4:f5:ae:19:02:fc:cc:2b: 3c:6a:dd:fa:14:8b:31:68:40:b5:1d:7a:79:69:ea: df:de:9f:8c:72:ea:52:6f:a4:e0:66:e3:97:0b:b0: ef:bb:48:73:1e:b3:13:af:f9:87:1d:34:df:2d:5b: 73:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:20:BB:97:2A:41:F7:00:AF:1F:77:70:10:34:36:A0:E9:B3:8E:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/a257f246-17a5-3501-b8c6-4b74e9394e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl X509v3 Authority Key Identifier: keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer sbgp-ipAddrBlock: critical IPv4: 72.162.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d2:69:d6:09:c8:1b:e3:f1:b7:64:8d:5d:8d:4d:9c:81:e6: c5:6b:27:aa:1c:e8:5d:98:bf:2e:81:aa:a3:d8:f7:d2:18:39: c2:11:d8:65:24:31:43:2c:65:4c:a3:36:fb:47:24:f1:3a:42: aa:64:11:b7:8b:b7:31:cd:7a:cd:22:25:fa:d9:79:b5:8c:98: e1:1d:bb:49:fd:d6:ae:94:c7:5d:d6:a2:3e:2e:37:ad:78:49: d6:f0:c5:07:3b:ed:09:72:f3:e7:27:f4:1f:d0:1a:14:7f:a1: 77:69:fd:b9:22:c3:39:1d:8d:c6:28:cf:98:bb:68:ba:c1:d0: c4:76:d8:ac:16:78:32:7f:03:6f:69:11:79:d4:de:e9:c1:be: 5d:66:63:7a:a8:bc:09:2a:49:9b:b8:64:70:49:c8:0a:e0:a8: 59:20:df:55:18:c0:55:c4:02:2b:dd:bd:97:66:3f:7b:c7:d8: a0:49:94:52:ed:dd:b5:0b:03:69:74:ad:f8:35:a1:2a:0f:bd: b6:e0:d2:a5:0a:b6:5f:ae:31:64:dd:5b:37:ed:58:b6:ad:dc: a5:6e:6d:f6:3f:93:b0:07:d0:ea:72:88:4c:4a:d2:aa:1b:df: 1f:e2:71:97:29:65:c3:eb:d2:c2:4e:d5:cb:db:91:98:ef:0e: 3e:bd:fb:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lvoKLvb8HkCpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyNDdhNzAtYzkzZC00MDY1LTk1NDgtNzYyZGE1YTM4 NmJhMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Y2UwYWQyNGMtZGJlZC00NjRmLWFjN2QtY2U0NDI1Mzg1ODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QxngciAzQiqJg14cdOEil9kb++7r2MpHa1+ CkWpE3gy5Dp4h6uqFhqsKFqZBSLRyDeyA0qDn5RLXhcbO8aQ7CGjk7vAPx4bYKUy 2BESEkrzJ2S1shak21A5KP3lWw6phR1AxKXD36qAwN9O+tPshWevfV+3zTruedQV rHs19FT5xZ3kUUBZolJ98mbVCsFFllXgCd+RZP2p/ozERlpfVeFhT2m+ET+de/Za cvVNid4ZhrudftqI6oGO3KvDjSlnVjJmBUgfm0m49PWuGQL8zCs8at36FIsxaEC1 HXp5aerf3p+McupSb6TgZuOXC7Dvu0hzHrMTr/mHHTTfLVtzGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOogu5cqQfcArx93cBA0NqDps462MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0 N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVhMzg2YmEvYTI1N2YyNDYtMTdhNS0z NTAxLWI4YzYtNGI3NGU5Mzk0ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzQyNDdhNzAtYzkzZC00MDY1LTk1 NDgtNzYyZGE1YTM4NmJhLzM0MjQ3YTcwLWM5M2QtNDA2NS05NTQ4LTc2MmRhNWEz ODZiYS5jcmwwHwYDVR0jBBgwFoAUpsEb1rclWtCkwZuf94Ui0ZNhSYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJk YTVhMzg2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSKIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLSadYJyBvj8bdkjV2NTZyB5sVrJ6oc6F2Yvy6BqqPY99IYOcIR2GUk MUMsZUyjNvtHJPE6QqpkEbeLtzHNes0iJfrZebWMmOEdu0n91q6Ux13Woj4uN614 SdbwxQc77Qly8+cn9B/QGhR/oXdp/bkiwzkdjcYoz5i7aLrB0MR22KwWeDJ/A29p EXnU3unBvl1mY3qovAkqSZu4ZHBJyArgqFkg31UYwFXEAivdvZdmP3vH2KBJlFLt 3bULA2l0rfg1oSoPvbbg0qUKtl+uMWTdWzftWLat3KVubfY/k7AH0OpyiExK0qob 3x/icZcpZcPr0sJO1cvbkZjvDj69+0E= -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:01 2025 by rpki-client