$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa File: 3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa (raw, json) Hash identifier: 8369u4wUA3DD7cOiTwVoUld7naUdCzEVC3bex1abJBw= Subject key identifier: 89:9D:B1:0A:C6:94:7F:52:69:27:0E:16:CF:B3:8D:52:F2:D7:C8:63 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584B8EACC43EA800F17DAD92D180 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46408 IP address blocks: 162.212.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c4:3e:a8:00:f1:7d:ad:92:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=e8252c28-c5c7-4fa1-9a04-658af4f5b008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:cf:ab:ab:ab:94:a7:0f:12:45:86:5e:fb: 49:d7:63:e1:0d:98:28:90:3c:27:d9:35:b5:29:a6: 87:e1:f7:41:23:5c:14:22:50:de:3d:a1:55:9a:45: a3:38:20:40:bb:03:99:65:bd:9e:73:1a:46:a0:13: bf:11:84:55:51:7d:c1:5e:ea:e0:51:6b:0c:3b:e5: f9:95:57:da:b3:dd:f3:c3:30:e6:7f:c9:be:8c:66: f7:6f:0c:79:d9:f1:fd:95:d2:3f:58:ed:1d:a3:03: 27:25:bf:92:8c:ba:8c:82:f4:a8:35:56:18:48:bc: 0b:1f:86:82:70:9b:10:99:6c:84:b9:d2:29:c9:69: ba:45:c4:0a:9e:2f:70:71:6f:17:04:ea:33:7c:bd: 6c:d0:06:dc:e8:ec:68:35:6e:53:42:a9:3b:a4:9a: ab:95:2a:32:4a:8d:19:38:a8:a8:b3:75:3a:85:d9: 3b:99:03:48:ae:3e:fb:b2:d3:61:74:bf:c4:93:f5: 33:96:bf:1f:36:28:c8:30:25:c1:60:aa:8c:88:93: a3:5d:eb:ff:f4:84:4f:82:e5:b4:bd:08:2a:1d:7c: 8d:b6:49:b0:b3:78:9f:9d:b0:ef:0f:36:82:f1:89: e7:42:20:d5:4c:ac:da:b4:c6:21:97:53:b7:50:15: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9D:B1:0A:C6:94:7F:52:69:27:0E:16:CF:B3:8D:52:F2:D7:C8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/3a1d0e27-1ad5-3056-ad96-acee49936fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 162.212.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:88:eb:eb:07:e8:2c:54:cd:03:0d:1c:84:5a:90:44:85:e4: d0:f9:6b:17:b8:be:ef:ab:da:5d:a1:e1:f9:d4:65:64:72:29: 83:bf:8f:28:8e:0f:11:69:a1:bb:d2:a1:93:77:cf:4e:58:90: b9:ce:2c:4d:90:3c:5a:06:e1:c1:15:39:8c:e6:4e:64:48:6a: 6c:e4:60:4e:b6:89:be:9f:68:58:76:93:57:43:19:3f:72:23: 69:2b:f1:f2:46:70:0e:c9:79:bf:f0:15:d3:7f:39:a0:df:50: 4c:ed:32:14:1b:ea:a7:85:75:07:a1:dc:51:2e:d8:44:98:21: bd:de:8f:04:fd:fc:8e:c9:bd:f6:a9:77:5d:2b:9a:0d:90:fd: 5e:12:f0:22:c8:bc:b3:ba:f5:55:c9:ad:7b:c1:b8:e8:1c:70: 77:48:8c:89:fc:5b:8f:90:7f:db:28:cb:5a:50:11:21:6f:3b: eb:86:6e:21:03:38:1f:5f:aa:a1:70:32:b5:48:a0:d9:0e:57: fb:93:7f:bd:e1:48:3d:10:70:51:da:7a:61:4f:68:38:a0:c7: 93:0d:5c:4e:a7:38:99:fc:e8:3a:b6:f0:dd:2f:aa:b4:f3:2b: f0:4c:7a:f1:bb:e7:e1:60:9a:6b:aa:a9:db:6f:1c:21:59:b0: d6:79:48:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMQ+qADxfa2S0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZTgyNTJjMjgtYzVjNy00ZmExLTlhMDQtNjU4YWY0ZjViMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifDPq6urlKcPEkWGXvtJ12PhDZgokDwn2TW1 KaaH4fdBI1wUIlDePaFVmkWjOCBAuwOZZb2ecxpGoBO/EYRVUX3BXurgUWsMO+X5 lVfas93zwzDmf8m+jGb3bwx52fH9ldI/WO0dowMnJb+SjLqMgvSoNVYYSLwLH4aC cJsQmWyEudIpyWm6RcQKni9wcW8XBOozfL1s0Abc6OxoNW5TQqk7pJqrlSoySo0Z OKios3U6hdk7mQNIrj77stNhdL/Ek/Uzlr8fNijIMCXBYKqMiJOjXev/9IRPguW0 vQgqHXyNtkmws3ifnbDvDzaC8YnnQiDVTKzatMYhl1O3UBVFAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImdsQrGlH9SaScOFs+zjVLy18hjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvM2ExZDBlMjctMWFkNS0z MDU2LWFkOTYtYWNlZTQ5OTM2ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqI6+sH6CxUzQMNHIRakESF5ND5axe4vu+r2l2h4fnUZWRyKYO/jyiO DxFpobvSoZN3z05YkLnOLE2QPFoG4cEVOYzmTmRIamzkYE62ib6faFh2k1dDGT9y I2kr8fJGcA7Jeb/wFdN/OaDfUEztMhQb6qeFdQeh3FEu2ESYIb3ejwT9/I7Jvfap d10rmg2Q/V4S8CLIvLO69VXJrXvBuOgccHdIjIn8W4+Qf9soy1pQESFvO+uGbiED OB9fqqFwMrVIoNkOV/uTf73hSD0QcFHaemFPaDigx5MNXE6nOJn86Dq28N0vqrTz K/BMevG75+FgmmuqqdtvHCFZsNZ5SLk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:19 2025 by rpki-client