$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/cd1efd4f-eafb-3b43-ba33-cc5f12dca3b7.roa File: cd1efd4f-eafb-3b43-ba33-cc5f12dca3b7.roa (raw, json) Hash identifier: 5s8zYo2am8knflSkRhy8vAmrs98RgZ/ylHBW1U7hDOg= Subject key identifier: 86:C9:C8:59:81:8E:0E:85:CA:8E:F9:4A:F3:C6:25:AD:C8:7A:46:82 Certificate issuer: /CN=7dd319be-2876-403e-ba86-24d27aaa8fc0 Certificate serial: 010D0C9F4328584B7DECC81A95DF2B10BC471BD8 Authority key identifier: 16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/cd1efd4f-eafb-3b43-ba33-cc5f12dca3b7.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 203107 IP address blocks: 162.217.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c8:1a:95:df:2b:10:bc:47:1b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd319be-2876-403e-ba86-24d27aaa8fc0 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=b0c5809c-980b-4f47-9732-ef4a238e8a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:66:75:fd:b7:14:cc:06:6a:2b:cd:65:1e: 23:02:5c:15:99:a7:ca:33:e1:0b:02:3d:e9:73:76: 67:44:24:af:bb:92:9f:04:e4:11:5d:dd:1d:9e:2b: 21:78:a0:b2:09:01:f3:c7:8a:0f:ab:c5:02:95:fa: 7f:73:9b:73:25:7d:f3:71:79:05:2f:b3:6e:61:0f: e5:35:d4:19:6a:1e:b8:f2:7f:81:0b:81:a1:8e:f0: 28:d4:9e:1f:de:ab:c6:75:cb:09:bf:c7:39:f7:47: 57:25:b0:9b:28:b8:e9:90:d2:6e:24:95:be:e5:55: 5e:ab:28:0d:2b:ff:87:60:83:5d:d5:fa:71:9c:96: 14:0c:53:17:61:f1:d7:38:e9:cf:e7:a1:bc:26:58: 38:ec:1d:88:65:64:43:33:41:dd:12:5b:1e:b5:ff: f4:72:0a:21:be:0a:39:ec:04:96:01:b8:d9:a2:d0: 3b:dd:80:7b:0a:25:a2:f2:a5:c1:39:ca:42:f7:0e: 98:5b:eb:e6:aa:5a:ee:a7:c8:6c:c9:af:9a:23:2f: ac:25:10:0b:13:49:a3:fd:d7:35:5c:67:39:3d:b4: d5:7d:e6:d7:f4:e2:de:0f:3f:41:89:a3:7e:ec:f0: e1:ba:8a:66:76:5e:14:b5:c6:43:36:44:3f:1b:bd: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C9:C8:59:81:8E:0E:85:CA:8E:F9:4A:F3:C6:25:AD:C8:7A:46:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/cd1efd4f-eafb-3b43-ba33-cc5f12dca3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0/7dd319be-2876-403e-ba86-24d27aaa8fc0.crl X509v3 Authority Key Identifier: keyid:16:AA:4C:89:91:D8:F2:EA:74:E2:70:1C:43:61:F4:D9:D9:6A:20:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7dd319be-2876-403e-ba86-24d27aaa8fc0.cer sbgp-ipAddrBlock: critical IPv4: 162.217.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:2b:07:93:3a:b8:34:d1:6c:82:0d:42:45:9e:86:01:f4:78: 3d:ec:97:f1:2b:f1:b3:f4:00:84:68:91:71:e4:12:49:7a:51: 45:fb:ee:40:4b:e0:28:18:d4:ee:6a:73:f7:d3:62:a6:54:a6: 27:2f:f2:be:7c:1b:d4:c1:62:ab:1b:52:5d:40:a7:a5:9a:82: f5:f3:49:23:09:19:65:28:f0:7b:db:d1:77:da:99:7f:28:4b: 48:89:5d:9a:57:56:19:3a:22:e0:5a:96:8b:f9:a5:9e:16:8f: 1f:d3:0c:7a:5b:7f:57:4a:e4:c0:96:dc:02:61:db:54:37:09: 14:3a:74:a0:c7:6a:1d:eb:0f:36:5c:9f:1c:fd:11:f7:ab:47: 22:f3:fd:56:72:c5:4b:cc:81:4a:f1:48:7e:a5:3a:8a:77:bc: a2:f1:14:a9:3c:b8:03:cd:c8:e5:0f:ed:d3:c9:2b:1f:21:cb: fb:52:ce:29:af:b3:a5:f3:00:80:55:2a:bf:b8:8c:75:22:b2: 62:ba:5b:16:86:01:c6:34:ab:3a:fe:23:a7:7f:d9:f1:be:22: ed:01:2c:a4:d1:29:43:eb:3c:94:f3:db:39:41:a9:73:0e:e7: b0:87:63:af:b9:11:d0:c4:91:fa:2f:24:a9:d7:76:c4:74:0c: a5:50:88:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97Mgald8rELxHG9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RkMzE5YmUtMjg3Ni00MDNlLWJhODYtMjRkMjdhYWE4 ZmMwMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YjBjNTgwOWMtOTgwYi00ZjQ3LTk3MzItZWY0YTIzOGU4YTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzZmdf23FMwGaivNZR4jAlwVmafKM+ELAj3p c3ZnRCSvu5KfBOQRXd0dnisheKCyCQHzx4oPq8UClfp/c5tzJX3zcXkFL7NuYQ/l NdQZah648n+BC4GhjvAo1J4f3qvGdcsJv8c590dXJbCbKLjpkNJuJJW+5VVeqygN K/+HYINd1fpxnJYUDFMXYfHXOOnP56G8Jlg47B2IZWRDM0HdElsetf/0cgohvgo5 7ASWAbjZotA73YB7CiWi8qXBOcpC9w6YW+vmqlrup8hsya+aIy+sJRALE0mj/dc1 XGc5PbTVfebX9OLeDz9BiaN+7PDhuopmdl4UtcZDNkQ/G73D0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbJyFmBjg6Fyo75SvPGJa3IekaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ZGQz MTliZS0yODc2LTQwM2UtYmE4Ni0yNGQyN2FhYThmYzAvY2QxZWZkNGYtZWFmYi0z YjQzLWJhMzMtY2M1ZjEyZGNhM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2RkMzE5YmUtMjg3Ni00MDNlLWJh ODYtMjRkMjdhYWE4ZmMwLzdkZDMxOWJlLTI4NzYtNDAzZS1iYTg2LTI0ZDI3YWFh OGZjMC5jcmwwHwYDVR0jBBgwFoAUFqpMiZHY8up04nAcQ2H02dlqIMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83ZGQzMTliZS0yODc2LTQwM2UtYmE4Ni0yNGQy N2FhYThmYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotl0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMrB5M6uDTRbIINQkWehgH0eD3sl/Er8bP0AIRokXHkEkl6UUX77kBL 4CgY1O5qc/fTYqZUpicv8r58G9TBYqsbUl1Ap6WagvXzSSMJGWUo8Hvb0XfamX8o S0iJXZpXVhk6IuBalov5pZ4Wjx/TDHpbf1dK5MCW3AJh21Q3CRQ6dKDHah3rDzZc nxz9EferRyLz/VZyxUvMgUrxSH6lOop3vKLxFKk8uAPNyOUP7dPJKx8hy/tSzimv s6XzAIBVKr+4jHUismK6WxaGAcY0qzr+I6d/2fG+Iu0BLKTRKUPrPJTz2zlBqXMO 57CHY6+5EdDEkfovJKnXdsR0DKVQiCQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:06:55 2025 by rpki-client