$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa File: 935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa (raw, json) Hash identifier: 6hNgPv1pjiLXqud6YvtaxPZEIXWf1iWf7rB4hOgbtdk= Subject key identifier: 97:EE:E1:C6:6B:92:38:A1:7A:F5:0E:A1:BE:5E:25:17:A5:AC:DC:5C Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584B95A79B71FF61C30603154BA0 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 22504 IP address blocks: 162.118.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9b:71:ff:61:c3:06:03:15:4b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=19be602f-b5dd-4a0d-89ea-2f149b71d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:0d:a7:73:bc:ab:97:a8:3c:75:84:ed:40: d5:9f:13:f8:80:b4:62:7a:81:cc:5b:87:91:fe:77: 93:b7:c9:27:09:c3:80:f9:03:24:64:ca:20:7c:4c: 19:3d:35:e1:90:23:d6:16:77:e1:47:6b:62:88:e7: f8:19:a0:18:b8:db:ee:8e:ab:5f:68:b2:83:67:98: c6:65:87:36:84:51:41:99:29:38:53:b7:41:1d:19: f5:0f:ce:a3:0a:08:cd:63:e9:b7:3b:01:91:d8:18: ec:b0:45:53:45:7b:2e:7f:b2:c9:ac:63:c0:8d:d2: aa:66:c1:ef:d5:34:49:b3:d6:f3:09:d4:a1:01:fa: 6c:21:b8:01:c5:fb:e8:14:b2:ed:1d:63:1a:c6:dc: 7c:4f:80:93:47:39:4e:ba:e5:a0:b0:02:7f:40:7e: 30:42:ea:6d:8d:58:1d:d7:87:ae:99:16:44:d4:43: 5e:c6:0b:92:65:c5:9f:c4:19:2c:c7:bc:45:92:93: 16:23:47:32:92:bc:4d:1e:4a:34:fe:75:9e:12:57: 0c:97:e9:2d:49:20:ed:5f:51:27:8e:a3:ec:d5:9f: 6d:c2:5a:95:05:90:6c:50:4c:6f:f1:2d:32:e9:94: 14:8b:02:3e:34:57:23:d0:46:3a:a6:9a:27:eb:65: bc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EE:E1:C6:6B:92:38:A1:7A:F5:0E:A1:BE:5E:25:17:A5:AC:DC:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/935f237f-3e08-33d2-af1f-4b1efe61d4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:84:1f:ea:7f:cf:dd:15:f7:fd:0e:59:8d:ff:9b:22:36:b0: 89:95:47:78:15:ed:31:d0:7e:d6:12:8b:45:05:ed:38:13:2c: f7:49:24:63:7a:7b:02:19:e5:f4:88:1e:fc:ea:cf:1d:75:0c: ef:84:8b:eb:94:40:ad:61:0f:2f:d6:47:36:38:dc:a5:cf:a3: 09:d3:fe:4d:d1:25:a9:f2:1e:6b:04:b2:02:82:6e:96:46:ae: 35:69:1c:de:92:2f:93:88:89:9f:ad:7f:55:d8:2a:f3:49:3d: ea:d0:a8:2d:37:1e:ec:4d:52:9c:82:e1:7a:bf:9f:aa:7a:85: 82:71:27:f5:4f:43:2a:db:a7:c9:5d:3f:49:fb:87:ef:ac:94: 63:10:f0:70:53:08:01:e2:f1:ec:16:e0:2a:70:ce:f8:d8:70: 71:d5:8e:2c:45:e8:7b:b3:69:97:18:a7:45:93:f1:57:5f:68: f3:e4:fd:ab:ef:b9:ae:c8:9e:a0:25:d0:a0:d8:e0:73:f6:68: f3:60:0f:f5:be:08:1d:43:d5:90:de:a5:a5:ec:97:d3:1a:05: fc:26:c4:9b:07:97:50:ad:11:c9:41:5a:fb:02:91:d2:d8:67: 12:32:6d:af:ca:f5:ac:cd:a5:e0:66:65:6a:11:57:bb:9b:48: fc:96:6d:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5tx/2HDBgMVS6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTliZTYwMmYtYjVkZC00YTBkLTg5ZWEtMmYxNDliNzFkNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoccNp3O8q5eoPHWE7UDVnxP4gLRieoHMW4eR /neTt8knCcOA+QMkZMogfEwZPTXhkCPWFnfhR2tiiOf4GaAYuNvujqtfaLKDZ5jG ZYc2hFFBmSk4U7dBHRn1D86jCgjNY+m3OwGR2BjssEVTRXsuf7LJrGPAjdKqZsHv 1TRJs9bzCdShAfpsIbgBxfvoFLLtHWMaxtx8T4CTRzlOuuWgsAJ/QH4wQuptjVgd 14eumRZE1ENexguSZcWfxBksx7xFkpMWI0cykrxNHko0/nWeElcMl+ktSSDtX1En jqPs1Z9twlqVBZBsUExv8S0y6ZQUiwI+NFcj0EY6ppon62W8xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfu4cZrkjihevUOob5eJRelrNxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvOTM1ZjIzN2YtM2UwOC0z M2QyLWFmMWYtNGIxZWZlNjFkNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeEH+p/z90V9/0OWY3/myI2sImVR3gV7THQftYSi0UF7TgTLPdJJGN6 ewIZ5fSIHvzqzx11DO+Ei+uUQK1hDy/WRzY43KXPownT/k3RJanyHmsEsgKCbpZG rjVpHN6SL5OIiZ+tf1XYKvNJPerQqC03HuxNUpyC4Xq/n6p6hYJxJ/VPQyrbp8ld P0n7h++slGMQ8HBTCAHi8ewW4CpwzvjYcHHVjixF6HuzaZcYp0WT8VdfaPPk/avv ua7InqAl0KDY4HP2aPNgD/W+CB1D1ZDepaXsl9MaBfwmxJsHl1CtEclBWvsCkdLY ZxIyba/K9azNpeBmZWoRV7ubSPyWbZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:20 2025 by rpki-client