$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa File: afde5cdc-3c5d-342d-a648-49b9232529c6.roa (raw, json) Hash identifier: kpRAoB67p9oJUIW78Ryk6NBETYz6pMwLgtMuX1vvp7I= Subject key identifier: AC:C9:A9:AD:73:DB:74:C9:38:12:60:1B:0F:71:77:2B:B2:61:EF:30 Certificate issuer: /CN=748884b0-2456-4700-984f-d893a56dbcdd Certificate serial: 010D0C9F4328584B83820DE9B5A5D0F665900740 Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 393844 IP address blocks: 167.160.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:0d:e9:b5:a5:d0:f6:65:90:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=22a63ff9-1d27-4b3a-8db9-79016229074d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0b:70:48:bd:ea:74:5e:11:31:a9:f1:ee:36: 73:b4:01:47:cb:8c:13:16:71:26:6a:c8:de:ee:38: ac:da:6d:84:d6:ad:c0:14:83:9c:a1:46:8c:e7:0d: 5a:ea:53:e1:90:61:aa:56:d0:22:ba:ac:55:92:d9: 0b:c6:8d:0b:26:54:e3:4a:0c:ad:da:c4:f3:86:1a: 77:04:d0:79:83:78:11:a3:2e:21:a6:55:cf:e5:55: bd:6c:51:29:c3:cd:87:b4:2b:bb:dc:aa:f4:d4:ee: 62:7f:0c:2b:ff:4c:c0:ff:e5:44:e0:62:c7:12:e6: 63:30:9b:6e:b3:66:5b:0a:f8:27:74:8f:3c:5f:6b: 51:d5:32:89:e8:09:54:08:bd:89:7c:09:b9:ad:8c: 61:ae:cd:8a:2b:3d:cb:59:8c:69:fc:53:cc:ca:96: f9:4a:5d:0c:8d:7b:2b:e8:9f:6d:12:d0:ab:c1:48: 33:6f:71:3d:e4:45:2d:e2:df:f1:ca:cd:33:40:95: 8e:b6:e3:a8:9e:5f:b0:4b:40:de:4b:d0:56:02:6b: 8a:33:f1:d2:4d:c6:ef:31:7c:8e:76:0a:ab:6d:2c: e5:0d:6e:c3:1f:3f:33:e9:78:aa:c7:a0:d4:d3:8a: ae:bf:6f:a0:f7:c7:6a:15:2f:db:82:09:ff:4a:44: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C9:A9:AD:73:DB:74:C9:38:12:60:1B:0F:71:77:2B:B2:61:EF:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/afde5cdc-3c5d-342d-a648-49b9232529c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl X509v3 Authority Key Identifier: keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer sbgp-ipAddrBlock: critical IPv4: 167.160.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e2:87:09:86:b7:76:0d:44:ea:a7:56:3c:ef:6b:da:bf:b7: 75:d7:67:db:12:4e:8d:50:b4:df:4e:07:cd:8d:e5:d4:8d:4c: ba:cc:36:59:10:c7:29:06:f3:b3:b8:1f:28:f5:b8:2f:b2:6d: e2:ba:db:63:82:ff:22:cf:d0:23:04:f2:6f:3a:26:f5:21:ac: 69:89:76:1d:b3:4b:7e:f2:6d:ce:9b:bf:98:9d:15:20:6f:1b: 2a:ae:f3:4e:90:4b:94:d3:d8:30:ba:1d:48:4d:85:e0:fa:f5: e9:65:40:ee:b4:e7:1e:cb:8c:9a:59:58:0d:6f:7d:97:df:75: 6e:bb:8e:65:69:87:3e:e9:5d:e6:42:9a:ca:21:01:b9:a8:aa: 1a:b7:e8:84:43:f0:f4:2c:bf:44:c1:cb:53:54:cb:72:71:37: 1f:08:43:b9:fe:ae:0b:4a:c6:da:26:88:11:eb:fe:13:2a:3d: 52:f7:f6:fe:86:c0:d4:57:fe:da:f3:e3:f2:00:6d:a0:09:c5: e8:a1:42:d4:f8:02:79:2a:28:89:b2:a7:ee:bf:31:cc:4e:24: 39:0b:7a:23:bb:6d:9b:34:32:82:b6:bc:05:32:4a:af:6e:78: 67:14:6e:db:ef:38:fd:9a:20:01:3f:61:50:da:21:bc:96:e4: 90:50:90:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDgg3ptaXQ9mWQB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4NGYtZDg5M2E1NmRi Y2RkMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk MjJhNjNmZjktMWQyNy00YjNhLThkYjktNzkwMTYyMjkwNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAtwSL3qdF4RManx7jZztAFHy4wTFnEmasje 7jis2m2E1q3AFIOcoUaM5w1a6lPhkGGqVtAiuqxVktkLxo0LJlTjSgyt2sTzhhp3 BNB5g3gRoy4hplXP5VW9bFEpw82HtCu73Kr01O5ifwwr/0zA/+VE4GLHEuZjMJtu s2ZbCvgndI88X2tR1TKJ6AlUCL2JfAm5rYxhrs2KKz3LWYxp/FPMypb5Sl0MjXsr 6J9tEtCrwUgzb3E95EUt4t/xys0zQJWOtuOonl+wS0DeS9BWAmuKM/HSTcbvMXyO dgqrbSzlDW7DHz8z6Xiqx6DU04quv2+g98dqFS/bggn/SkSGNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzJqa1z23TJOBJgGw9xdyuyYe8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDg4 ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkzYTU2ZGJjZGQvYWZkZTVjZGMtM2M1ZC0z NDJkLWE2NDgtNDliOTIzMjUyOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ4ODg0YjAtMjQ1Ni00NzAwLTk4 NGYtZDg5M2E1NmRiY2RkLzc0ODg4NGIwLTI0NTYtNDcwMC05ODRmLWQ4OTNhNTZk YmNkZC5jcmwwHwYDVR0jBBgwFoAU4rFzysxNL53SxWqp+K4q458SYKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDg4ODRiMC0yNDU2LTQ3MDAtOTg0Zi1kODkz YTU2ZGJjZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFp6DgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLihwmGt3YNROqnVjzva9q/t3XXZ9sSTo1QtN9OB82N5dSNTLrMNlkQ xykG87O4Hyj1uC+ybeK622OC/yLP0CME8m86JvUhrGmJdh2zS37ybc6bv5idFSBv Gyqu806QS5TT2DC6HUhNheD69ellQO605x7LjJpZWA1vfZffdW67jmVphz7pXeZC msohAbmoqhq36IRD8PQsv0TBy1NUy3JxNx8IQ7n+rgtKxtomiBHr/hMqPVL39v6G wNRX/trz4/IAbaAJxeihQtT4AnkqKImyp+6/McxOJDkLeiO7bZs0MoK2vAUySq9u eGcUbtvvOP2aIAE/YVDaIbyW5JBQkJU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:18 2025 by rpki-client