$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa File: 94b598ca-650b-3b92-89a3-e0848c0cd981.roa (raw, json) Hash identifier: XIl0FEOprZxFCiJevlfJnI0GtnR229TwnGTTHM9DZ3s= Subject key identifier: 47:64:2E:1E:AB:7D:85:C4:95:B4:8F:A7:45:71:33:7F:EB:C2:A5:DB Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F4328584AD7D120B4D926D83311019400 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 2734 IP address blocks: 162.216.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:20:b4:d9:26:d8:33:11:01:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=a48751e1-2e49-4351-9e6c-dfbf829dd050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:b0:60:89:1b:45:07:bf:cb:7e:15:fc:02: 0a:5c:5a:90:3c:bd:42:f6:7b:90:bb:05:ec:c3:7a: 7c:e0:e7:dc:42:73:72:a4:ea:2e:d1:2c:7f:96:f1: 1b:b9:89:ea:23:5c:a3:6a:17:85:95:af:86:48:12: dc:61:33:ab:1d:c3:94:09:8c:e7:a7:94:2b:35:0a: 2f:73:81:c1:d6:23:21:d7:4f:0a:9e:73:75:bc:f6: 5a:e6:9a:91:92:60:4c:5d:66:54:bb:07:3c:86:fb: 62:fd:3f:4f:a3:8f:0c:28:62:b2:4c:cc:38:73:83: 23:17:bf:75:90:2c:27:da:6f:48:8f:12:20:6c:9b: 5b:d7:ab:cf:e3:45:b2:cb:6d:1b:b0:89:ac:07:64: ba:d7:f4:29:33:56:e4:6d:94:11:34:c8:a1:31:2f: 11:ae:4b:fc:57:e7:7a:30:51:30:54:19:1d:e5:c7: dc:99:d0:43:12:5b:56:19:f1:7f:ed:c4:37:64:cb: 7e:cf:3d:78:1d:81:5f:44:e5:c5:28:f1:7f:4c:8c: 0a:f4:5b:38:d1:9d:9d:a0:06:a6:e2:30:09:5e:6c: cd:16:f7:4d:4d:d2:d1:5e:99:c4:88:3b:90:1f:0d: 28:53:b7:e9:b9:53:5f:cb:d4:0c:f2:45:01:d6:ec: 27:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:64:2E:1E:AB:7D:85:C4:95:B4:8F:A7:45:71:33:7F:EB:C2:A5:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: 162.216.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:08:c2:37:ee:5f:57:b9:01:df:70:d4:4b:01:fe:04:d6:62: 8c:d4:45:b1:03:9d:ba:36:da:8a:0b:b3:9a:d4:f1:fa:f1:4b: fa:0c:d9:25:b2:32:cb:e5:01:71:16:92:3c:f1:48:06:33:9b: 6e:07:99:d5:f4:c9:d8:d6:9e:a7:c3:a8:33:df:ce:63:11:78: c7:e8:6b:12:a3:b4:5c:93:f2:e8:b6:6a:af:d4:47:db:4e:73: 97:5f:33:96:17:2d:99:c5:4c:48:58:1a:96:6b:d1:dd:25:97: 17:6a:f2:af:d7:48:af:20:82:17:0d:81:40:d9:d8:ec:a1:bd: 97:f9:45:7d:c9:17:79:f2:05:cc:ce:03:91:58:f4:c8:5a:c6: f0:9b:18:1c:2c:4c:28:6d:eb:34:fd:92:f8:dd:ba:70:e1:54: fd:65:9e:ae:f1:dd:46:9a:79:7e:0e:47:9c:94:f8:95:4e:b2: 81:5a:8a:d9:70:a1:1a:39:8e:82:38:9a:51:a1:98:86:e1:af: 8b:73:1b:81:4f:9f:fe:02:ce:0f:76:41:8d:1d:be:8e:e2:d7: 8d:f5:3c:c0:a5:4b:cf:ef:cd:cf:f4:65:95:05:4b:e6:b5:5d: 1b:6e:e7:c6:2b:6c:56:25:0a:3c:02:4e:83:e3:59:9c:6c:98: 60:63:a2:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SC02SbYMxEBlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YTQ4NzUxZTEtMmU0OS00MzUxLTllNmMtZGZiZjgyOWRkMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymSwYIkbRQe/y34V/AIKXFqQPL1C9nuQuwXs w3p84OfcQnNypOou0Sx/lvEbuYnqI1yjaheFla+GSBLcYTOrHcOUCYznp5QrNQov c4HB1iMh108KnnN1vPZa5pqRkmBMXWZUuwc8hvti/T9Po48MKGKyTMw4c4MjF791 kCwn2m9IjxIgbJtb16vP40Wyy20bsImsB2S61/QpM1bkbZQRNMihMS8Rrkv8V+d6 MFEwVBkd5cfcmdBDEltWGfF/7cQ3ZMt+zz14HYFfROXFKPF/TIwK9Fs40Z2doAam 4jAJXmzNFvdNTdLRXpnEiDuQHw0oU7fpuVNfy9QM8kUB1uwnoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdkLh6rfYXElbSPp0VxM3/rwqXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvOTRiNTk4Y2EtNjUwYi0z YjkyLTg5YTMtZTA4NDhjMGNkOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMIwjfuX1e5Ad9w1EsB/gTWYozURbEDnbo22ooLs5rU8frxS/oM2SWy MsvlAXEWkjzxSAYzm24HmdX0ydjWnqfDqDPfzmMReMfoaxKjtFyT8ui2aq/UR9tO c5dfM5YXLZnFTEhYGpZr0d0llxdq8q/XSK8gghcNgUDZ2OyhvZf5RX3JF3nyBczO A5FY9MhaxvCbGBwsTCht6zT9kvjdunDhVP1lnq7x3UaaeX4OR5yU+JVOsoFaitlw oRo5joI4mlGhmIbhr4tzG4FPn/4Czg92QY0dvo7i1431PMClS8/vzc/0ZZUFS+a1 XRtu58YrbFYlCjwCToPjWZxsmGBjohE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:28 2025 by rpki-client