$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa File: f7cef808-77ea-3a63-8140-5f1854878c63.roa (raw, json) Hash identifier: 4JbkaPnlBNrRDIDjTU6H0D6x1n/6TnC2/lp0RvSCAto= Subject key identifier: A6:0C:DB:89:9E:F1:D4:BF:70:7E:6B:3E:61:B7:86:58:E4:DC:91:23 Certificate issuer: /CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Certificate serial: 010D0C9F4328584B8EACD4D6071673F9639A8E00 Authority key identifier: 93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 55251 IP address blocks: 162.211.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d4:d6:07:16:73:f9:63:9a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4817ebb3-a4cc-48a9-bf42-01de55a66def Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=0d22ff19-d10d-4c13-97aa-d3a8b0f5a74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:8f:81:da:d4:ad:23:8f:fb:68:37:05:14: cb:0b:be:6f:81:2e:10:27:5f:b4:88:bb:0b:c1:1c: 72:f9:35:35:4d:e6:52:a6:fb:8d:d2:d6:3b:e1:14: fb:06:72:0c:a6:2a:cf:d4:a8:0d:78:ad:3a:bb:f4: ed:7b:4e:7d:8f:bd:a4:cf:80:2c:26:11:6d:85:27: 21:1e:0a:a5:12:2b:d4:d8:cd:0a:85:2f:6e:9a:00: ca:31:7b:51:60:03:35:cd:dd:96:3b:0b:29:e6:ed: e9:7e:b8:c5:f8:60:91:04:39:97:ca:44:88:b0:7c: f4:72:e7:21:75:ff:a8:fb:cb:6a:99:ee:50:40:ce: fb:39:59:67:59:46:be:1d:f9:ae:ea:36:ef:4f:e2: fa:a3:9b:7d:c8:67:25:da:63:35:60:1d:5a:70:a9: 08:1b:01:08:b9:3d:3b:54:96:74:9c:bb:be:4d:12: 47:1b:43:a1:ee:bb:2b:ad:6b:2b:27:df:37:17:a7: 79:6f:28:80:d1:e4:38:57:88:54:d9:fb:08:e2:9c: ee:90:ad:f6:d6:88:56:4b:a2:0b:ff:25:19:3a:54: 53:d8:c6:7c:d1:8e:cd:ab:57:02:c7:3a:7d:57:fd: a5:dd:5d:ea:66:9c:4a:a2:45:78:3a:f8:11:58:0d: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0C:DB:89:9E:F1:D4:BF:70:7E:6B:3E:61:B7:86:58:E4:DC:91:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/f7cef808-77ea-3a63-8140-5f1854878c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def/4817ebb3-a4cc-48a9-bf42-01de55a66def.crl X509v3 Authority Key Identifier: keyid:93:D8:D7:6A:D4:0D:56:A6:A5:A7:DE:2D:7D:06:EE:D0:86:74:6B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4817ebb3-a4cc-48a9-bf42-01de55a66def.cer sbgp-ipAddrBlock: critical IPv4: 162.211.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:5e:32:c5:96:b5:87:a8:2b:59:53:ce:09:a7:9c:4e:4b:4b: 67:19:a5:ae:6b:7e:4b:76:ba:45:1c:57:04:36:71:00:fb:5c: 37:a5:fd:12:e2:1f:79:38:09:54:87:86:d5:40:9b:c1:95:b0: 02:ae:b0:04:5b:80:73:0a:e6:d2:9b:e7:4c:84:ed:cb:7b:54: 37:6b:b9:ee:1a:1c:f0:9c:4e:f2:cb:00:ff:39:02:42:5b:5b: 1f:e1:65:3a:17:49:61:ac:98:56:be:3c:92:9f:48:01:eb:86: 33:01:1a:a5:c8:fb:93:78:fe:5a:2d:0a:98:f7:dc:7c:78:3b: 38:d5:1e:94:f1:c8:a0:47:79:ef:4d:7d:a8:ab:f0:df:a3:16: a3:54:ab:a1:55:36:60:52:b9:3c:d7:69:81:74:88:35:81:c7: 31:00:6b:2d:e4:ea:0d:22:1c:d8:42:6b:5a:df:00:07:8d:53: f2:a4:6e:bd:dc:f2:98:df:ad:dd:1a:9b:ff:5a:80:3b:a8:9f: 5b:b7:54:40:e0:a0:29:b2:21:ff:0e:4e:55:a1:a4:01:73:57: 99:46:8c:71:ff:57:a4:e4:49:a3:2f:fe:8f:43:c4:20:9c:1b: 25:f6:c6:c3:05:80:45:5a:d6:17:2b:96:e4:5a:a4:74:31:01: 5e:fb:09:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNTWBxZz+WOajgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgxN2ViYjMtYTRjYy00OGE5LWJmNDItMDFkZTU1YTY2 ZGVmMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MGQyMmZmMTktZDEwZC00YzEzLTk3YWEtZDNhOGIwZjVhNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtISPgdrUrSOP+2g3BRTLC75vgS4QJ1+0iLsL wRxy+TU1TeZSpvuN0tY74RT7BnIMpirP1KgNeK06u/Tte059j72kz4AsJhFthSch HgqlEivU2M0KhS9umgDKMXtRYAM1zd2WOwsp5u3pfrjF+GCRBDmXykSIsHz0cuch df+o+8tqme5QQM77OVlnWUa+Hfmu6jbvT+L6o5t9yGcl2mM1YB1acKkIGwEIuT07 VJZ0nLu+TRJHG0Oh7rsrrWsrJ983F6d5byiA0eQ4V4hU2fsI4pzukK321ohWS6IL /yUZOlRT2MZ80Y7Nq1cCxzp9V/2l3V3qZpxKokV4OvgRWA0MGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYM24me8dS/cH5rPmG3hljk3JEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3 ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRlNTVhNjZkZWYvZjdjZWY4MDgtNzdlYS0z YTYzLTgxNDAtNWYxODU0ODc4YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDgxN2ViYjMtYTRjYy00OGE5LWJm NDItMDFkZTU1YTY2ZGVmLzQ4MTdlYmIzLWE0Y2MtNDhhOS1iZjQyLTAxZGU1NWE2 NmRlZi5jcmwwHwYDVR0jBBgwFoAUk9jXatQNVqalp94tfQbu0IZ0a+8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ODE3ZWJiMy1hNGNjLTQ4YTktYmY0Mi0wMWRl NTVhNjZkZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABReMsWWtYeoK1lTzgmnnE5LS2cZpa5rfkt2ukUcVwQ2cQD7XDel/RLi H3k4CVSHhtVAm8GVsAKusARbgHMK5tKb50yE7ct7VDdrue4aHPCcTvLLAP85AkJb Wx/hZToXSWGsmFa+PJKfSAHrhjMBGqXI+5N4/lotCpj33Hx4OzjVHpTxyKBHee9N fair8N+jFqNUq6FVNmBSuTzXaYF0iDWBxzEAay3k6g0iHNhCa1rfAAeNU/Kkbr3c 8pjfrd0am/9agDuon1u3VEDgoCmyIf8OTlWhpAFzV5lGjHH/V6TkSaMv/o9DxCCc GyX2xsMFgEVa1hcrluRapHQxAV77CVQ= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:23 2025 by rpki-client