$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/a8138ed5-fb20-3544-8780-12a79489a1f9.roa File: a8138ed5-fb20-3544-8780-12a79489a1f9.roa (raw, json) Hash identifier: AN2uq4dhJ+U1ngQPUATRvewK9hrat7xLaCqnlIIwqgc= Subject key identifier: 3D:99:91:73:BF:7A:60:74:9F:78:39:EE:3E:A0:F9:F2:27:B3:65:95 Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584B8BE2136B5643623E06F18100 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/a8138ed5-fb20-3544-8780-12a79489a1f9.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 62490 IP address blocks: 162.217.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:13:6b:56:43:62:3e:06:f1:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=b92c95c8-2b9d-4d07-bb17-8ee39a1640c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:c1:10:1e:21:bf:ea:66:70:7a:13:a0:35: 9a:ee:dc:db:b9:a6:6b:70:9f:7c:db:66:41:b8:ba: 84:29:f8:2e:25:e0:ca:4e:a3:9a:8d:65:5b:df:81: 77:8c:cf:48:65:88:40:eb:5a:38:b6:71:f3:67:d8: 03:51:ba:24:8f:b4:0c:93:88:b0:9c:52:6d:2b:3c: 99:33:24:8c:c4:09:3b:da:81:c2:9a:92:71:0b:5c: 5e:b1:87:4d:e7:c6:cb:0f:c6:ea:2e:5d:47:d9:87: 66:d4:10:14:40:be:a2:26:bf:5d:95:8d:5c:86:60: 4e:4f:08:01:d0:c4:81:94:b6:d9:77:6d:cf:87:93: 0d:f6:21:4c:02:0b:5b:cc:00:52:7d:d5:c2:69:3c: bd:8d:88:07:c5:5a:ee:ee:fc:be:2f:22:46:2d:c9: 36:e9:66:3a:6a:fe:0e:fa:22:78:ad:2f:2e:f5:97: 68:d2:6d:59:53:55:13:f1:75:4c:d1:04:dd:87:80: 38:00:bd:e9:b3:94:75:1e:5c:5e:3e:ef:a0:e0:67: 2c:ac:a0:1e:eb:53:6e:d0:99:0a:68:1a:25:8d:dc: ca:18:36:c0:7a:33:ff:b6:12:10:84:53:92:4a:f1: 0b:d9:4c:5f:6a:79:8c:1e:85:de:c0:b7:72:8a:d5: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:91:73:BF:7A:60:74:9F:78:39:EE:3E:A0:F9:F2:27:B3:65:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/a8138ed5-fb20-3544-8780-12a79489a1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 162.217.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:cc:93:d5:f2:1a:1a:3b:59:46:28:48:db:34:ab:d9:0f:4e: 1d:e1:8c:66:a7:5c:97:01:48:d0:04:6b:ee:c5:58:40:29:37: 66:a4:cb:73:09:61:68:11:52:49:35:d2:5b:92:96:3e:f7:41: 4a:60:bd:ec:2d:7c:4e:b7:c3:9a:83:76:98:c3:73:80:a2:c5: ad:52:a4:c0:98:1c:1f:8a:48:8b:95:e0:76:b6:1b:c0:29:4c: 50:34:15:61:b1:ed:e3:96:fd:18:2d:4f:37:7e:98:d9:51:8e: 62:03:8b:d5:eb:5f:64:8c:28:04:fa:44:18:77:94:6f:8b:35: df:60:07:e4:db:bf:b0:07:80:51:4b:b2:49:ee:cd:ff:94:49: e0:96:60:8b:8f:36:c6:3a:7d:82:c1:dd:8b:d7:59:0c:f9:10: 7a:6c:9f:85:ba:c8:41:2d:eb:7f:95:ea:fb:ff:3f:46:7f:55: c5:7d:6e:17:af:a5:63:a8:62:9e:e9:71:9a:f7:7c:89:2d:a1: 68:23:ac:60:94:01:7f:48:2b:61:29:64:77:d0:aa:2a:99:35: ab:03:3c:d2:bc:0d:55:47:c3:8d:af:07:42:2f:3b:a3:8e:36: fe:a3:0c:87:7f:20:12:0e:b5:c6:b5:cc:9d:1f:43:1d:55:e8: f2:1f:dc:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hNrVkNiPgbxgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YjkyYzk1YzgtMmI5ZC00ZDA3LWJiMTctOGVlMzlhMTY0MGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZzBEB4hv+pmcHoToDWa7tzbuaZrcJ9822ZB uLqEKfguJeDKTqOajWVb34F3jM9IZYhA61o4tnHzZ9gDUbokj7QMk4iwnFJtKzyZ MySMxAk72oHCmpJxC1xesYdN58bLD8bqLl1H2Ydm1BAUQL6iJr9dlY1chmBOTwgB 0MSBlLbZd23Ph5MN9iFMAgtbzABSfdXCaTy9jYgHxVru7vy+LyJGLck26WY6av4O +iJ4rS8u9Zdo0m1ZU1UT8XVM0QTdh4A4AL3ps5R1HlxePu+g4GcsrKAe61Nu0JkK aBoljdzKGDbAejP/thIQhFOSSvEL2UxfanmMHoXewLdyitUp6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2ZkXO/emB0n3g57j6g+fIns2WVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvYTgxMzhlZDUtZmIyMC0z NTQ0LTg3ODAtMTJhNzk0ODlhMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotlGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrMk9XyGho7WUYoSNs0q9kPTh3hjGanXJcBSNAEa+7FWEApN2aky3MJ YWgRUkk10luSlj73QUpgvewtfE63w5qDdpjDc4Cixa1SpMCYHB+KSIuV4Ha2G8Ap TFA0FWGx7eOW/RgtTzd+mNlRjmIDi9XrX2SMKAT6RBh3lG+LNd9gB+Tbv7AHgFFL sknuzf+USeCWYIuPNsY6fYLB3YvXWQz5EHpsn4W6yEEt63+V6vv/P0Z/VcV9bhev pWOoYp7pcZr3fIktoWgjrGCUAX9IK2EpZHfQqiqZNasDPNK8DVVHw42vB0IvO6OO Nv6jDId/IBIOtca1zJ0fQx1V6PIf3CU= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:42 2025 by rpki-client