$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa File: 1eef2e2c-6325-3083-a2ca-8378929a914b.roa (raw, json) Hash identifier: lfunrPlYKkpiLyug1Emhv9fnA8By9IDI5zfrP8GYk0g= Subject key identifier: 5D:30:47:4C:96:54:75:0D:B0:8F:C6:28:12:83:5A:A7:32:01:42:D2 Certificate issuer: /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Certificate serial: 010D0C9F4328584B8BE2273F0D12A8C4F5F3B680 Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 26512 IP address blocks: 162.221.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:27:3f:0d:12:a8:c4:f5:f3:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=bcff6637-d6c4-4a40-8d15-0e43dacfd04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8a:d5:a0:da:06:86:b2:2f:80:19:e2:c7:9a: 5d:1d:e3:1d:6c:23:76:8f:3e:50:c3:0b:07:96:9f: 90:aa:12:80:a4:73:f6:b8:32:24:76:0e:db:3e:d7: 32:27:05:f9:26:89:3e:39:20:31:92:ad:81:e7:04: ae:0b:14:59:35:ac:9e:1a:88:7b:16:c2:a9:98:4b: b1:94:16:0f:e1:d7:ad:31:19:e0:08:29:82:b4:da: c9:0b:dd:74:bf:ff:2b:99:10:63:bb:f3:5a:06:bf: ec:b9:a0:27:43:7d:13:1d:bb:96:e2:6d:3f:02:82: 0e:8e:43:3b:e8:d1:ed:63:69:05:47:d5:48:2a:57: 2b:3e:55:3f:5a:e5:9e:99:d1:2f:d3:a4:8d:06:62: 41:20:2a:f9:79:ae:9e:af:0f:13:1e:b0:b6:80:fd: e7:7f:7a:76:74:ba:71:74:96:34:25:d1:cd:7a:72: 5a:c4:41:f0:15:d0:6f:cd:1d:4d:19:07:fa:79:99: fd:5d:12:3c:a3:c5:34:dc:ba:88:cc:0a:77:e6:74: 41:47:15:40:54:b1:ce:42:02:5f:4d:9a:27:c8:47: fe:08:fa:6c:9e:ee:15:58:91:11:5d:c9:81:bf:15: e3:c3:c8:ad:27:88:2c:ea:2d:87:ca:29:10:f5:8c: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:47:4C:96:54:75:0D:B0:8F:C6:28:12:83:5A:A7:32:01:42:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl X509v3 Authority Key Identifier: keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer sbgp-ipAddrBlock: critical IPv4: 162.221.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2b:7c:42:ab:f1:b4:e7:b3:76:55:e3:35:c5:d1:41:c0:bb: 86:8c:96:57:f8:ab:97:8a:c2:62:01:8c:5e:84:90:64:fb:75: 98:ae:2b:8c:25:48:fd:1c:8d:3b:e4:f7:51:98:de:e2:df:02: 56:3c:8e:c4:5c:8a:41:71:be:c9:3c:c3:17:5e:1d:b7:7d:78: 22:05:26:7e:69:ea:c5:a0:ac:75:65:09:43:88:08:31:cd:c4: bc:55:69:97:8c:bc:18:7d:39:47:d2:ca:82:dd:a6:8a:2f:4c: 88:0e:e5:09:37:34:3e:c7:2b:f1:b9:03:70:90:80:5d:95:dc: d3:78:c6:2f:6b:df:95:7a:15:ae:a0:36:8b:d8:63:ae:7d:93: 79:ff:69:de:83:5b:92:8c:cd:d2:9b:e3:85:cc:a8:6c:16:ae: 6f:8f:a6:79:5f:99:8d:93:16:1e:c3:8b:08:b5:c9:34:f7:01: 00:53:35:76:4d:49:62:a2:04:d2:15:3f:4d:ba:30:67:04:f7: f5:03:5e:a5:ff:16:a8:4d:19:39:92:45:b3:0c:c6:0c:46:3e: e1:7b:0c:53:39:7d:4c:f9:94:a8:ac:ab:61:1e:ec:ea:e1:b0: 16:b6:a7:c7:74:b4:2b:ec:cc:ee:1a:71:bb:a4:8e:0c:84:41: b3:f2:10:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4ic/DRKoxPXztoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3 YTZkMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YmNmZjY2MzctZDZjNC00YTQwLThkMTUtMGU0M2RhY2ZkMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgorVoNoGhrIvgBnix5pdHeMdbCN2jz5QwwsH lp+QqhKApHP2uDIkdg7bPtcyJwX5Jok+OSAxkq2B5wSuCxRZNayeGoh7FsKpmEux lBYP4detMRngCCmCtNrJC910v/8rmRBju/NaBr/suaAnQ30THbuW4m0/AoIOjkM7 6NHtY2kFR9VIKlcrPlU/WuWemdEv06SNBmJBICr5ea6erw8THrC2gP3nf3p2dLpx dJY0JdHNenJaxEHwFdBvzR1NGQf6eZn9XRI8o8U03LqIzAp35nRBRxVAVLHOQgJf TZonyEf+CPpsnu4VWJERXcmBvxXjw8itJ4gs6i2HyikQ9YxUeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0wR0yWVHUNsI/GKBKDWqcyAULSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvMWVlZjJlMmMtNjMyNS0z MDgzLWEyY2EtODM3ODkyOWE5MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3 MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot0ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYrfEKr8bTns3ZV4zXF0UHAu4aMllf4q5eKwmIBjF6EkGT7dZiuK4wl SP0cjTvk91GY3uLfAlY8jsRcikFxvsk8wxdeHbd9eCIFJn5p6sWgrHVlCUOICDHN xLxVaZeMvBh9OUfSyoLdpoovTIgO5Qk3ND7HK/G5A3CQgF2V3NN4xi9r35V6Fa6g NovYY659k3n/ad6DW5KMzdKb44XMqGwWrm+PpnlfmY2TFh7Diwi1yTT3AQBTNXZN SWKiBNIVP026MGcE9/UDXqX/FqhNGTmSRbMMxgxGPuF7DFM5fUz5lKisq2Ee7Orh sBa2p8d0tCvszO4acbukjgyEQbPyEBI= -----END CERTIFICATE-----Generated at Wed Oct 22 04:58:19 2025 by rpki-client