$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa File: 4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa (raw, json) Hash identifier: QOfnjkwQGFQiYB+p4D7X/AbgY3nRsCHWGEX1TE7kDqg= Subject key identifier: 28:2A:62:94:E7:FD:6A:60:AC:60:84:A0:A5:13:52:76:ED:93:1E:99 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE2242A47296AB3821CC100 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 40948 IP address blocks: 162.210.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:24:2a:47:29:6a:b3:82:1c:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=d90435cb-3812-45c9-bd51-591b414b3577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:2d:b6:31:58:ce:7b:60:3c:d2:b6:99:b9: 7f:2a:e0:b6:85:63:25:7f:ae:48:d2:cf:aa:90:43: fb:10:d7:98:cf:5c:fb:4f:01:ac:ab:95:63:1a:ac: b0:7f:97:9b:b9:f9:ac:ef:6e:a5:df:7e:ca:19:dd: 32:5a:12:77:04:4c:87:a2:11:72:1b:c0:31:55:40: e1:40:6f:26:16:92:e4:eb:71:39:a2:3d:85:a1:7e: aa:5e:57:81:e7:1a:b9:43:9e:d5:ec:26:73:9b:ac: 89:3c:44:c7:b4:ea:44:1d:5b:0f:fc:0c:2c:3f:c9: 4a:2e:ae:cd:1d:6e:f4:33:f9:60:55:06:d6:86:4a: 83:4e:d7:56:d2:21:d2:1d:0a:6f:aa:3c:31:46:6a: 6b:0f:7f:11:25:06:39:59:0d:59:db:eb:55:5a:a8: f1:c4:11:a4:56:50:ba:4e:7e:36:91:79:49:32:e0: ff:20:70:bd:8a:db:d8:6f:25:4f:ad:27:83:45:36: 3c:29:e5:ca:54:76:a2:de:1e:98:b7:d9:b7:d8:2c: 7c:d2:e8:39:7a:07:fd:2b:d4:b7:03:81:53:07:e0: 31:40:ed:8a:5d:14:1f:d8:a1:9e:0d:b5:fd:16:e6: 94:e7:35:d2:84:6c:33:d7:6f:b2:db:4d:b9:0d:6c: 39:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2A:62:94:E7:FD:6A:60:AC:60:84:A0:A5:13:52:76:ED:93:1E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/4ea04189-4ae3-3ef2-9a84-c224ec9a1c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 162.210.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:44:10:4f:98:ef:0c:4a:9c:ea:c8:1f:18:fb:99:b4:5e:be: 1b:ee:21:ef:cb:cf:18:4b:02:9c:c9:2f:79:c6:14:0d:0e:a4: 59:93:36:3e:c6:da:7e:4c:71:94:bf:e9:49:6c:92:5a:81:54: 23:c7:ca:db:01:9a:87:33:3f:e1:ac:28:fc:3d:49:61:0c:c1: 13:a2:59:c5:58:23:0f:a7:95:2c:91:0d:69:fa:72:7d:6a:9a: d3:00:98:4c:1d:1d:1a:2a:c1:ed:fa:65:f3:ff:05:63:37:49: 3f:af:c4:ef:42:f9:ba:cd:a5:3f:77:1c:08:73:9c:52:67:81: a1:57:c3:ef:a5:d0:8c:23:88:17:d4:56:ba:b6:0c:f4:00:0a: c2:17:49:4e:8d:55:8c:7f:cb:94:83:fd:b5:21:49:45:16:9b: d1:49:ee:8e:df:fa:48:e2:73:08:b9:28:83:92:86:cb:59:21: 80:51:d0:db:51:d3:0f:a7:8a:b2:5a:b0:c8:50:ca:bb:92:4a: 74:02:ff:bc:d3:6c:af:f0:e8:f1:60:0a:95:5d:eb:97:2d:78: 6e:72:ec:73:03:3b:6d:4a:3d:05:30:24:2c:a7:f1:8d:a4:78: f8:0c:8c:81:10:27:af:65:b8:22:7e:a9:98:9f:9d:fe:69:cf: 03:aa:38:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iQqRylqs4IcwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZDkwNDM1Y2ItMzgxMi00NWM5LWJkNTEtNTkxYjQxNGIzNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH4ttjFYzntgPNK2mbl/KuC2hWMlf65I0s+q kEP7ENeYz1z7TwGsq5VjGqywf5ebufms726l337KGd0yWhJ3BEyHohFyG8AxVUDh QG8mFpLk63E5oj2FoX6qXleB5xq5Q57V7CZzm6yJPETHtOpEHVsP/AwsP8lKLq7N HW70M/lgVQbWhkqDTtdW0iHSHQpvqjwxRmprD38RJQY5WQ1Z2+tVWqjxxBGkVlC6 Tn42kXlJMuD/IHC9itvYbyVPrSeDRTY8KeXKVHai3h6Yt9m32Cx80ug5egf9K9S3 A4FTB+AxQO2KXRQf2KGeDbX9FuaU5zXShGwz12+y2025DWw51QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgqYpTn/WpgrGCEoKUTUnbtkx6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvNGVhMDQxODktNGFlMy0z ZWYyLTlhODQtYzIyNGVjOWExYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9EEE+Y7wxKnOrIHxj7mbRevhvuIe/LzxhLApzJL3nGFA0OpFmTNj7G 2n5McZS/6UlsklqBVCPHytsBmoczP+GsKPw9SWEMwROiWcVYIw+nlSyRDWn6cn1q mtMAmEwdHRoqwe36ZfP/BWM3ST+vxO9C+brNpT93HAhznFJngaFXw++l0IwjiBfU Vrq2DPQACsIXSU6NVYx/y5SD/bUhSUUWm9FJ7o7f+kjicwi5KIOShstZIYBR0NtR 0w+nirJasMhQyruSSnQC/7zTbK/w6PFgCpVd65cteG5y7HMDO21KPQUwJCyn8Y2k ePgMjIEQJ69luCJ+qZifnf5pzwOqOA0= -----END CERTIFICATE-----Generated at Tue Oct 21 02:32:21 2025 by rpki-client