$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa File: 4e55439e-b78a-365f-8c84-5ae476680d04.roa (raw, json) Hash identifier: Gg8thL/OhVm9Q1WcuX56ogFoajymWP8XA6iTVy8vPl8= Subject key identifier: 2C:7B:42:05:00:A8:9B:A8:52:0C:97:C3:A6:77:21:3D:ED:92:D0:1D Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584AF7EBDDEBF9EB3C5516A7B080 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 26548 IP address blocks: 162.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:dd:eb:f9:eb:3c:55:16:a7:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=50dc2bc9-9dda-4c00-868a-65e12836910f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:8b:bb:7a:0c:dd:7e:78:d0:20:c7:dd:79: 8b:f8:f9:77:75:18:80:20:b0:e1:1c:0c:d3:7d:c5: 2e:08:0f:ae:6b:2a:1e:bf:bf:78:57:08:88:69:94: f1:54:17:24:cf:33:90:36:6a:23:e1:d6:b1:82:75: 7d:f5:d2:09:ab:a8:7c:6f:68:91:c9:a6:2c:67:08: 76:dc:44:cb:25:10:ca:2c:eb:28:99:ab:26:b7:4b: 3a:84:31:f4:dc:59:62:70:26:a0:ca:65:7d:9b:03: b5:3b:b2:dd:04:bd:55:21:5d:48:71:63:3e:a4:e5: fc:b5:0d:4e:ce:24:df:cc:ce:14:f1:07:db:9f:38: 38:6d:03:b2:f0:7f:9d:c2:7f:52:b7:6b:e7:df:16: 10:6a:c8:76:fe:81:94:98:df:29:80:88:5a:7b:81: e1:6a:a5:ca:f5:43:c2:09:d9:33:93:59:04:ee:b4: 43:8b:32:c5:18:cd:d8:eb:85:03:cb:05:90:04:e3: fc:5c:02:07:5d:97:f4:95:bb:ee:90:40:c1:7a:aa: 30:a7:20:52:bb:c3:c5:7b:a1:ba:ba:4c:8f:ee:21: 3f:c5:2b:32:e9:19:c0:85:a3:fb:8b:98:73:ac:e3: c4:15:1d:2f:f8:63:11:03:f1:43:34:45:a8:58:12: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7B:42:05:00:A8:9B:A8:52:0C:97:C3:A6:77:21:3D:ED:92:D0:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 162.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d9:9b:8d:1f:ee:4c:da:72:61:cb:32:a7:66:4c:ad:ec:45: 67:31:e6:84:c8:43:2e:37:e0:77:3c:bc:3b:d9:30:12:7a:4d: cc:ff:be:b3:3c:15:70:48:a3:70:9f:8b:c6:00:a0:da:44:3b: 06:fd:f7:84:91:cd:ff:5b:a4:1c:49:1a:a6:3e:40:a0:a3:df: cb:dd:6c:ca:ed:fc:91:41:2d:06:74:6f:7c:39:99:80:2c:c9: 60:02:b8:7b:e8:a5:dc:81:c2:f4:c9:44:30:63:2d:3d:65:c0: b9:24:40:44:3f:81:7a:70:89:e1:f2:03:fd:96:b8:46:92:0c: 07:b6:4b:1b:1a:94:ed:42:a8:32:72:aa:eb:53:01:82:66:16: cd:08:ae:5f:2c:1c:a2:94:37:e3:7e:ad:17:24:ca:3d:17:ef: b3:60:c7:71:12:9e:b0:6d:ca:40:32:05:af:e9:4a:4d:46:fe: 6c:64:2b:50:9b:6c:b7:de:80:f2:6b:22:96:8c:a6:e3:d2:80: 3c:ff:a1:47:91:a3:40:08:15:c4:42:d1:25:66:20:c4:25:7e: 86:a6:3d:5b:c1:ce:5e:34:94:7e:3c:44:bb:03:99:da:b8:9c: 13:af:03:84:a7:5d:fa:7e:2a:32:09:cb:3d:ef:97:f0:e7:de: c7:28:c1:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr3693r+es8VRansIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NTBkYzJiYzktOWRkYS00YzAwLTg2OGEtNjVlMTI4MzY5MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI+Lu3oM3X540CDH3XmL+Pl3dRiAILDhHAzT fcUuCA+uayoev794VwiIaZTxVBckzzOQNmoj4daxgnV99dIJq6h8b2iRyaYsZwh2 3ETLJRDKLOsomasmt0s6hDH03FlicCagymV9mwO1O7LdBL1VIV1IcWM+pOX8tQ1O ziTfzM4U8Qfbnzg4bQOy8H+dwn9St2vn3xYQash2/oGUmN8pgIhae4HhaqXK9UPC Cdkzk1kE7rRDizLFGM3Y64UDywWQBOP8XAIHXZf0lbvukEDBeqowpyBSu8PFe6G6 ukyP7iE/xSsy6RnAhaP7i5hzrOPEFR0v+GMRA/FDNEWoWBI2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCx7QgUAqJuoUgyXw6Z3IT3tktAdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNGU1NTQzOWUtYjc4YS0z NjVmLThjODQtNWFlNDc2NjgwZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDZm40f7kzacmHLMqdmTK3sRWcx5oTIQy434Hc8vDvZMBJ6Tcz/vrM8 FXBIo3Cfi8YAoNpEOwb994SRzf9bpBxJGqY+QKCj38vdbMrt/JFBLQZ0b3w5mYAs yWACuHvopdyBwvTJRDBjLT1lwLkkQEQ/gXpwieHyA/2WuEaSDAe2SxsalO1CqDJy qutTAYJmFs0Irl8sHKKUN+N+rRckyj0X77Ngx3ESnrBtykAyBa/pSk1G/mxkK1Cb bLfegPJrIpaMpuPSgDz/oUeRo0AIFcRC0SVmIMQlfoamPVvBzl40lH48RLsDmdq4 nBOvA4SnXfp+KjIJyz3vl/Dn3scowfs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:35 2025 by rpki-client