$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa File: ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa (raw, json) Hash identifier: ZoyqEv/RjVcSXVU70crnrKv3ovgmD9To22c5T0WeLeM= Subject key identifier: 8C:1C:46:0C:9A:F8:8E:97:42:84:48:A5:6F:3E:33:01:2A:F1:74:5D Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584B8EACC9ED192EEB30C858BB20 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7782 IP address blocks: 162.211.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c9:ed:19:2e:eb:30:c8:58:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=23049754-b191-409c-ad08-a3effaaa191f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:11:b9:03:e4:a2:70:e2:05:36:44:9a:9c:01: cd:ed:90:b9:8d:8f:cf:5d:1d:85:1a:3a:24:61:2b: 95:be:e6:39:c2:13:da:44:96:5d:fa:30:c8:11:2a: 35:d2:95:d1:f6:12:a1:7d:7f:85:d6:d1:aa:82:3f: cc:b2:13:d2:09:70:5f:7f:7f:88:b9:ca:52:69:df: f9:9e:70:c2:81:e9:d9:71:e8:df:c0:de:9d:6d:d9: 27:d5:96:eb:83:a7:5f:88:29:ec:26:a1:10:c6:71: 5f:30:20:70:e7:7a:01:28:2a:e5:27:34:a0:91:4f: b6:3f:f8:62:07:7f:45:6a:d0:92:fc:98:75:0a:d3: ae:57:f4:e4:75:e1:c7:89:da:43:67:57:48:90:f1: ee:23:0a:6d:67:72:00:93:f9:ac:4b:73:9f:c9:d5: 31:d9:d4:16:6e:4c:c2:e4:a1:6a:34:42:00:c5:a4: 74:2f:fd:94:04:ba:52:d4:8a:f9:70:53:8f:97:31: eb:93:74:55:54:a0:3c:3e:0f:89:f9:2d:d7:20:d4: 4a:80:93:92:97:29:04:12:c8:6e:9a:26:58:35:f6: 7c:c1:bf:9e:11:09:bd:7b:5e:ab:15:4a:87:92:29: ad:4a:d4:0f:08:80:e3:b7:0c:56:57:55:d8:35:ed: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1C:46:0C:9A:F8:8E:97:42:84:48:A5:6F:3E:33:01:2A:F1:74:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/ae508c66-19f3-325e-9ac9-2fa714dc9ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 162.211.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:49:41:15:3e:8d:c6:65:6a:e6:c3:03:83:87:d6:b0:c3:61: 64:3f:74:9e:ca:27:cd:df:92:0b:ad:12:9e:f1:94:53:73:b8: 3b:80:de:c0:47:93:90:36:f2:61:6f:ab:01:a0:b4:a0:46:75: b2:8b:1a:7c:54:56:e9:3e:94:04:56:f6:8c:24:de:4f:6e:c7: 8a:69:07:85:ab:e8:d9:0e:4c:d0:c8:88:2a:20:34:73:e5:c4: af:45:b0:3b:3c:db:f7:4f:cb:e0:da:a8:1a:06:ad:3b:38:fb: 34:a0:e1:da:01:48:d7:73:cf:7b:f1:3a:7a:56:d6:a8:bf:5e: b7:3a:3c:93:9e:c0:cb:48:c5:54:18:8d:a9:bf:ff:4d:7a:5c: de:4e:7d:44:79:26:a3:33:10:ad:ce:a1:db:0d:c6:15:51:07: 0d:67:bd:09:c7:76:fe:cd:c0:78:d8:c5:81:03:7a:59:13:89: 34:51:56:b2:f6:4b:21:58:57:83:e8:6d:ef:c6:df:c0:50:83: 94:4f:ea:0a:03:c4:96:78:91:43:2e:24:79:48:7a:10:0b:9f: 0b:54:61:02:60:56:ac:05:a6:90:1b:2a:a7:08:b8:d5:87:af: 9c:f5:5f:dc:51:30:50:db:33:2b:bc:00:38:2f:e9:54:83:74: 64:34:b4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMntGS7rMMhYuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjMwNDk3NTQtYjE5MS00MDljLWFkMDgtYTNlZmZhYWExOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBG5A+SicOIFNkSanAHN7ZC5jY/PXR2FGjok YSuVvuY5whPaRJZd+jDIESo10pXR9hKhfX+F1tGqgj/MshPSCXBff3+IucpSad/5 nnDCgenZcejfwN6dbdkn1Zbrg6dfiCnsJqEQxnFfMCBw53oBKCrlJzSgkU+2P/hi B39FatCS/Jh1CtOuV/TkdeHHidpDZ1dIkPHuIwptZ3IAk/msS3OfydUx2dQWbkzC 5KFqNEIAxaR0L/2UBLpS1Ir5cFOPlzHrk3RVVKA8Pg+J+S3XINRKgJOSlykEEshu miZYNfZ8wb+eEQm9e16rFUqHkimtStQPCIDjtwxWV1XYNe39GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwcRgya+I6XQoRIpW8+MwEq8XRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYWU1MDhjNjYtMTlmMy0z MjVlLTlhYzktMmZhNzE0ZGM5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZJQRU+jcZlaubDA4OH1rDDYWQ/dJ7KJ83fkgutEp7xlFNzuDuA3sBH k5A28mFvqwGgtKBGdbKLGnxUVuk+lARW9owk3k9ux4ppB4Wr6NkOTNDIiCogNHPl xK9FsDs82/dPy+DaqBoGrTs4+zSg4doBSNdzz3vxOnpW1qi/Xrc6PJOewMtIxVQY jam//016XN5OfUR5JqMzEK3OodsNxhVRBw1nvQnHdv7NwHjYxYEDelkTiTRRVrL2 SyFYV4Pobe/G38BQg5RP6goDxJZ4kUMuJHlIehALnwtUYQJgVqwFppAbKqcIuNWH r5z1X9xRMFDbMyu8ADgv6VSDdGQ0tFA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:56 2025 by rpki-client