$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa File: 471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa (raw, json) Hash identifier: A8qrSy2ltwp8Vg8zXQUIbtBqiZ3iGy1wOIHg0oufDfQ= Subject key identifier: 74:B4:35:77:AD:B2:7F:B0:55:AF:09:D9:D9:0D:3A:A4:CB:37:7D:6D Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584B8EACCA00146221EC66913C80 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7782 IP address blocks: 162.218.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ca:00:14:62:21:ec:66:91:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=baf0090e-2180-4f6b-abf3-1df6e9fc375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:56:91:7f:b4:02:c9:ba:a7:91:38:ee:9e: 7a:d4:5b:ad:af:0b:21:ed:a9:63:84:67:82:5b:c3: 54:1e:33:02:8b:e3:1b:f7:71:20:d0:85:d6:3a:b4: e1:66:60:90:31:03:5f:bf:ce:a4:77:99:7c:96:e6: 6c:8b:c6:19:4f:85:7d:cf:27:6a:f8:16:8a:ab:04: 6b:b7:78:13:8d:01:aa:35:37:91:92:5b:aa:78:d4: dd:ff:30:e1:38:44:16:09:9c:02:22:1e:4d:b6:27: 6a:c2:5c:e6:67:1a:44:fb:0e:58:bd:86:06:62:3a: a9:18:4d:0a:19:68:f1:b6:44:e1:2a:62:86:32:7b: e6:26:e0:a5:42:e0:6d:ef:f4:d9:2a:8e:ac:d1:e4: 7f:78:c5:22:ac:ef:ca:e2:82:aa:40:8d:24:bd:0c: 5d:76:7e:ac:23:10:c7:d3:0f:b4:a3:00:3f:80:b8: 94:87:4a:cf:91:3f:02:9e:57:18:02:2f:e1:e6:fe: 3a:dd:a8:10:75:f1:2c:dd:a6:4a:72:5d:8a:50:16: 2d:e4:c1:5b:9f:d6:53:31:3e:0c:56:cc:b2:5e:47: 81:17:5c:db:b6:30:9c:1f:5c:3b:9e:51:3b:78:49: 16:e8:2b:31:56:f6:a2:7b:cb:bb:d9:48:8f:3e:f2: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B4:35:77:AD:B2:7F:B0:55:AF:09:D9:D9:0D:3A:A4:CB:37:7D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.218.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:08:c5:07:50:37:59:f3:06:06:a5:ad:f3:25:8a:f9:a6:43: 4c:c8:9c:a7:20:9a:18:53:ee:3a:ae:dc:a1:3d:22:3a:5d:69: 18:f4:c8:4e:ae:cc:b4:88:4f:b5:a9:d3:ad:e8:c3:ce:19:d4: d1:fb:7b:d9:99:6d:d9:cc:7a:c5:0e:c2:74:ba:6e:23:6b:c7: 14:4d:fa:47:d6:a2:59:58:a4:36:71:35:fc:f7:bb:0e:9e:a9: 7a:b0:fa:06:1d:bb:66:16:ef:1f:56:2f:c6:3e:76:b0:5e:67: 33:0b:ec:89:e3:cd:2f:32:c8:bd:fd:83:5a:e2:12:99:9d:aa: 11:5a:ea:f3:13:19:36:31:9d:17:87:d2:f4:66:48:74:24:4c: 9f:19:18:24:23:33:43:6f:98:eb:80:cc:57:8a:09:29:98:6b: f2:18:82:3c:8d:68:3a:60:45:37:16:d4:8a:3e:e7:49:70:83: 9d:81:72:16:f8:91:3c:c3:1e:ca:33:dc:55:32:76:22:02:31: 1d:d1:e3:97:61:84:d9:48:d4:8a:80:d5:b4:2f:68:79:bb:89: 05:e4:66:d6:ef:b7:33:c9:cb:87:fd:fc:5d:b5:f7:ef:db:0d: a0:b0:d4:cf:85:6b:68:69:e4:43:64:b7:55:ad:62:1b:53:57: 45:be:e9:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMoAFGIh7GaRPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YmFmMDA5MGUtMjE4MC00ZjZiLWFiZjMtMWRmNmU5ZmMzNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloBWkX+0Asm6p5E47p561Futrwsh7aljhGeC W8NUHjMCi+Mb93Eg0IXWOrThZmCQMQNfv86kd5l8luZsi8YZT4V9zydq+BaKqwRr t3gTjQGqNTeRkluqeNTd/zDhOEQWCZwCIh5NtidqwlzmZxpE+w5YvYYGYjqpGE0K GWjxtkThKmKGMnvmJuClQuBt7/TZKo6s0eR/eMUirO/K4oKqQI0kvQxddn6sIxDH 0w+0owA/gLiUh0rPkT8CnlcYAi/h5v463agQdfEs3aZKcl2KUBYt5MFbn9ZTMT4M VsyyXkeBF1zbtjCcH1w7nlE7eEkW6CsxVvaie8u72UiPPvKDmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS0NXetsn+wVa8J2dkNOqTLN31tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNDcxNTM0YTQtOGU1NC0z ZDU2LWE4ZDgtY2ZjZTNmZmVkNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcIxQdQN1nzBgalrfMlivmmQ0zInKcgmhhT7jqu3KE9IjpdaRj0yE6u zLSIT7Wp063ow84Z1NH7e9mZbdnMesUOwnS6biNrxxRN+kfWollYpDZxNfz3uw6e qXqw+gYdu2YW7x9WL8Y+drBeZzML7InjzS8yyL39g1riEpmdqhFa6vMTGTYxnReH 0vRmSHQkTJ8ZGCQjM0NvmOuAzFeKCSmYa/IYgjyNaDpgRTcW1Io+50lwg52Bchb4 kTzDHsoz3FUydiICMR3R45dhhNlI1IqA1bQvaHm7iQXkZtbvtzPJy4f9/F219+/b DaCw1M+Fa2hp5ENkt1WtYhtTV0W+6fA= -----END CERTIFICATE-----Generated at Mon Oct 20 17:44:19 2025 by rpki-client