$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa File: bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa (raw, json) Hash identifier: gNN66Z83WMBAdHornUDbt1WGQH830sZIq+nLkAjEZgM= Subject key identifier: B0:72:62:A1:CA:B5:E5:5D:D5:A8:59:BD:56:F5:C7:22:90:58:93:A3 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584B7DECA133A5B1715049E26CB0 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 393336 IP address blocks: 162.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a1:33:a5:b1:71:50:49:e2:6c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=ac822c0b-09dc-41a1-99bf-0af8ead5f98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:cf:a6:92:df:ca:24:af:36:94:41:6a:54: db:66:e7:c0:92:d7:b0:d8:c8:48:89:21:b9:80:3b: 6a:46:13:6e:24:cb:ee:49:19:8f:fa:0a:84:fc:d7: 85:4f:3e:c0:9a:e5:aa:50:26:24:d2:4c:29:6b:06: e3:59:cc:12:58:6c:63:d5:77:b1:e1:20:c7:54:be: 9b:9d:13:24:4f:85:45:d3:05:78:c1:06:0e:48:33: 24:48:91:29:a7:4b:92:a8:92:de:33:f6:7f:0b:28: b8:51:a6:58:da:ae:b8:87:0f:dd:9b:f1:fb:45:df: f3:e4:ab:a9:9e:c1:06:64:ed:a7:17:6b:3b:9c:48: 59:da:51:c2:f8:74:cb:3f:b1:9c:8b:07:dd:41:0a: 6c:34:09:b8:94:8f:b0:d8:d6:32:0c:52:91:ae:eb: 50:2f:85:ff:c3:4d:23:c7:f9:9e:53:10:a7:4d:23: 15:bc:db:e5:81:ba:67:20:eb:90:81:74:d9:03:0e: 36:29:50:77:0d:03:fb:7d:95:96:bf:df:72:6d:a4: 98:56:78:43:b9:f0:cf:ae:de:26:0a:e8:f5:4d:cb: d3:a4:08:d2:5f:ac:86:98:c4:b3:1e:33:a6:e1:74: 0f:38:0e:99:09:ee:07:17:7d:36:52:d5:a1:96:10: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:72:62:A1:CA:B5:E5:5D:D5:A8:59:BD:56:F5:C7:22:90:58:93:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/bfacf16e-6c2a-3068-b775-9b4b72f767bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 162.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5c:a4:48:79:0c:a9:3d:e8:57:4d:71:44:40:7e:1c:fd:99: be:46:77:0f:8f:75:be:74:ce:54:c8:7f:d6:fa:b2:81:44:8e: 24:06:95:b6:e5:59:f3:a6:8e:86:c6:f7:6b:e1:54:b2:ac:9b: 8b:c6:fd:29:4b:1a:e7:57:ca:73:e1:16:ae:27:a9:7d:0c:86: 23:fa:5b:a5:55:6e:db:20:e0:d7:d5:df:f1:8c:47:46:a5:da: 06:fd:c2:51:98:81:23:ee:fa:9b:c2:98:b7:61:a1:86:22:f5: 83:5b:28:a3:2c:59:30:c8:4c:cc:8d:ea:eb:63:d9:10:21:95: 61:a5:88:e2:36:46:f5:98:28:dd:b8:33:d2:79:ab:28:87:32: 80:bb:67:a4:bc:34:4a:9e:92:f9:37:8b:c1:e8:81:62:f6:eb: 8b:ec:1d:0f:e9:60:f8:61:b2:cb:73:e8:75:3f:44:b2:a6:ad: d5:b1:e6:ef:de:95:b6:51:db:6e:54:51:b2:f4:e3:df:1d:a3: e4:cd:72:3b:16:df:56:d4:7d:51:54:14:97:17:2b:92:bd:4b: 49:c3:52:bd:a0:d8:7c:85:05:89:17:9a:0a:5b:e2:06:54:08: f8:1e:05:9d:54:14:fb:72:9e:b2:cd:c2:d4:eb:18:83:fa:e6: bf:80:8d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KEzpbFxUEnibLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YWM4MjJjMGItMDlkYy00MWExLTk5YmYtMGFmOGVhZDVmOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMzPppLfyiSvNpRBalTbZufAktew2MhIiSG5 gDtqRhNuJMvuSRmP+gqE/NeFTz7AmuWqUCYk0kwpawbjWcwSWGxj1Xex4SDHVL6b nRMkT4VF0wV4wQYOSDMkSJEpp0uSqJLeM/Z/Cyi4UaZY2q64hw/dm/H7Rd/z5Kup nsEGZO2nF2s7nEhZ2lHC+HTLP7GciwfdQQpsNAm4lI+w2NYyDFKRrutQL4X/w00j x/meUxCnTSMVvNvlgbpnIOuQgXTZAw42KVB3DQP7fZWWv99ybaSYVnhDufDPrt4m Cuj1TcvTpAjSX6yGmMSzHjOm4XQPOA6ZCe4HF302UtWhlhCfJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLByYqHKteVd1ahZvVb1xyKQWJOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvYmZhY2YxNmUtNmMyYS0z MDY4LWI3NzUtOWI0YjcyZjc2N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1cpEh5DKk96FdNcURAfhz9mb5Gdw+Pdb50zlTIf9b6soFEjiQGlbbl WfOmjobG92vhVLKsm4vG/SlLGudXynPhFq4nqX0MhiP6W6VVbtsg4NfV3/GMR0al 2gb9wlGYgSPu+pvCmLdhoYYi9YNbKKMsWTDITMyN6utj2RAhlWGliOI2RvWYKN24 M9J5qyiHMoC7Z6S8NEqekvk3i8HogWL264vsHQ/pYPhhsstz6HU/RLKmrdWx5u/e lbZR225UUbL0498do+TNcjsW31bUfVFUFJcXK5K9S0nDUr2g2HyFBYkXmgpb4gZU CPgeBZ1UFPtynrLNwtTrGIP65r+AjVE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:06 2025 by rpki-client