$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa File: 5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa (raw, json) Hash identifier: tsBvNdk7g6DLAJcujQx3RWoxt+0zkRfif6FMt0UeI8M= Subject key identifier: 10:D5:F8:EE:37:68:36:D4:3A:CA:B6:F3:B0:D2:6B:72:E5:01:2C:36 Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F4328584B80B753A755F3B03A2B52CE00 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 16654 IP address blocks: 162.219.204.0/22 maxlen: 24 208.64.76.0/22 maxlen: 24 208.85.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:53:a7:55:f3:b0:3a:2b:52:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=f58fc551-67d9-47ae-88b8-ce3646e2f55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:46:9e:28:7f:2d:b3:29:78:3b:57:a1:e9: f1:da:af:1b:89:25:9a:98:bf:a3:88:7e:bf:ab:05: cc:3f:d2:6c:ec:58:a1:5d:6c:7c:6f:6e:68:1f:9f: 02:e1:03:97:14:5e:23:94:5e:af:c7:0d:ca:6d:34: c5:c3:83:3a:0f:ee:91:b4:20:d7:dc:17:4d:2a:32: 53:31:ff:ae:f2:10:71:78:f0:08:95:62:62:dd:3a: a3:7d:d0:12:fd:e0:ba:2f:4e:23:3f:30:e1:cb:bd: 9a:24:2a:44:46:f7:79:c5:bd:6a:fe:d2:48:38:a5: e6:63:89:5f:51:b2:5e:97:26:e8:4d:67:9e:dc:3e: ea:b0:92:8e:22:b1:6f:19:0e:22:66:e2:b4:ff:36: 1a:97:1d:52:1b:31:1d:7c:97:03:3e:0d:18:31:ad: 87:4c:15:d0:a6:3c:67:ea:d8:2e:67:9a:75:a3:68: 82:ec:39:08:47:23:e2:c8:01:d0:eb:90:27:80:b3: bc:a2:93:ab:7e:cc:72:61:85:6b:40:a5:3b:18:2e: 60:01:8e:c3:e2:a9:30:2e:cf:5e:6b:35:6b:82:b0: 5b:f7:e1:8d:4f:4e:7f:71:d6:b4:22:1c:d6:c1:d1: a8:e6:a5:7e:07:a7:3d:2f:9c:72:76:10:73:5d:5b: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D5:F8:EE:37:68:36:D4:3A:CA:B6:F3:B0:D2:6B:72:E5:01:2C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv4: 162.219.204.0/22 208.64.76.0/22 208.85.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:db:3d:37:bb:da:bc:5f:dd:48:44:df:f1:2f:66:99:bd:90: c7:f0:28:bb:da:17:2f:cd:62:a3:08:02:b3:69:49:25:1d:10: 34:ca:e7:44:d4:cc:48:62:da:68:17:2e:72:9b:55:8a:ef:80: cc:53:3c:c4:3d:1b:82:44:29:14:64:ad:48:3a:40:b5:2c:e5: ca:f2:1c:ec:d5:94:43:30:66:6b:7a:ed:4b:2b:68:d3:60:42: 9c:c5:fc:37:64:3b:2b:72:d3:c8:f9:04:7a:50:57:24:fb:8c: 41:a8:0c:5e:53:05:53:89:85:aa:c8:13:66:83:b0:a6:ec:db: 3f:69:aa:14:3f:99:76:08:6f:83:a3:e9:17:65:43:0d:2a:3e: 42:a5:23:da:57:dc:23:e8:7d:92:f7:cb:75:0c:3e:5d:e0:2b: a8:b5:b1:1f:93:af:f2:7a:1c:cc:30:d0:26:1d:54:42:f9:ff: 12:b6:27:a6:7e:7c:33:0c:f5:a9:eb:a7:92:e2:25:33:3a:52: cf:a4:31:80:a2:97:26:6b:7c:7f:68:f8:e4:ff:39:3a:8d:c5: 2c:aa:66:6b:5f:7b:2d:2d:cc:44:5a:9c:bc:fb:d7:e1:a4:50: 9a:4b:28:77:57:b5:ee:75:a8:fd:d8:2b:a7:d8:f1:e9:8f:d6: be:6f:04:52 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuAt1OnVfOwOitSzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZjU4ZmM1NTEtNjdkOS00N2FlLTg4YjgtY2UzNjQ2ZTJmNTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmlGnih/LbMpeDtXoenx2q8biSWamL+jiH6/ qwXMP9Js7FihXWx8b25oH58C4QOXFF4jlF6vxw3KbTTFw4M6D+6RtCDX3BdNKjJT Mf+u8hBxePAIlWJi3TqjfdAS/eC6L04jPzDhy72aJCpERvd5xb1q/tJIOKXmY4lf UbJelyboTWee3D7qsJKOIrFvGQ4iZuK0/zYalx1SGzEdfJcDPg0YMa2HTBXQpjxn 6tguZ5p1o2iC7DkIRyPiyAHQ65AngLO8opOrfsxyYYVrQKU7GC5gAY7D4qkwLs9e azVrgrBb9+GNT05/cda0IhzWwdGo5qV+B6c9L5xydhBzXVs9AQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBDV+O43aDbUOsq287DSa3LlASw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvNWFiNDRiNjktMTc1OC0z MzRlLThlNmYtOWQwOGUwYzE0MWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCotvMAwQC 0EBMAwQD0FWwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHrbPTe72rxf3UhE3/EvZpm9kMfwKLvaFy/NYqMI ArNpSSUdEDTK50TUzEhi2mgXLnKbVYrvgMxTPMQ9G4JEKRRkrUg6QLUs5cryHOzV lEMwZmt67UsraNNgQpzF/DdkOyty08j5BHpQVyT7jEGoDF5TBVOJharIE2aDsKbs 2z9pqhQ/mXYIb4Oj6RdlQw0qPkKlI9pX3CPofZL3y3UMPl3gK6i1sR+Tr/J6HMww 0CYdVEL5/xK2J6Z+fDMM9anrp5LiJTM6Us+kMYCilyZrfH9o+OT/OTqNxSyqZmtf ey0tzERanLz71+GkUJpLKHdXte51qP3YK6fY8emP1r5vBFI= -----END CERTIFICATE-----Generated at Tue Oct 21 13:23:06 2025 by rpki-client