$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa File: c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa (raw, json) Hash identifier: D0ocKZrdGPbG8dXor5mIXcVKYCNtG/Gy1lXGyd7WwAE= Subject key identifier: 92:D9:91:AD:4A:26:1E:A8:5D:7D:F4:62:CF:90:46:AB:E2:33:45:7E Certificate issuer: /CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a Certificate serial: 010D0C9F4328584B8917708AD7AA8D62A8B88C80 Authority key identifier: EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 395003 IP address blocks: 162.210.243.0/24 maxlen: 24 162.244.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:70:8a:d7:aa:8d:62:a8:b8:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=e499f76d-9126-40e6-818c-6e3a8e5fcbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:37:c9:57:33:ce:57:f2:1f:b3:bf:c4:0f: 4b:ae:ab:26:e2:0c:36:ac:70:42:08:38:9e:d2:99: 14:8f:fd:11:81:6d:ca:a2:a9:55:0a:f9:75:15:ff: ab:40:c3:bc:0b:3f:25:a8:7f:d8:cb:f3:85:d1:23: 65:10:fb:d0:b4:c1:54:b5:ce:6c:71:ea:b3:43:e1: ff:99:16:9d:aa:9a:62:74:1b:c3:ac:f7:f6:02:e4: 22:5c:11:ea:29:21:1f:01:82:cc:b1:92:26:1f:bc: e3:8e:13:90:8e:54:89:cc:0c:79:19:b7:4a:0b:19: 7c:e4:6f:f0:65:36:ac:fd:2c:d7:81:75:4e:2f:23: 9f:09:01:b8:54:4a:44:a1:b4:59:50:b3:b4:27:b0: 4b:44:24:0d:cf:b8:d4:ff:4f:bc:38:f6:74:87:b9: 06:7f:d7:32:77:99:9f:d2:93:e5:94:66:ea:60:4b: 2d:75:3b:a1:ce:ec:8c:6f:8c:54:c1:83:40:4c:07: ec:15:df:f5:fe:f6:be:c7:c4:67:c4:72:ca:68:fb: c9:32:33:c1:65:e2:55:f3:0a:f9:6b:12:0f:f6:69: 5e:3a:d9:16:51:e2:ce:46:a3:bc:60:37:a5:f0:7e: c9:40:cf:27:53:e2:d5:38:6c:6a:31:f6:89:b4:11: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D9:91:AD:4A:26:1E:A8:5D:7D:F4:62:CF:90:46:AB:E2:33:45:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl X509v3 Authority Key Identifier: keyid:EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer sbgp-ipAddrBlock: critical IPv4: 162.210.243.0/24 162.244.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:02:ea:ee:e7:83:0a:46:3b:58:f3:7c:73:de:14:89:ac:35: 88:b5:ef:14:a8:f5:8e:ab:28:12:8a:19:97:3a:5c:a3:18:be: 68:25:b2:e6:35:8e:b3:15:c7:65:f9:3b:3d:43:4e:06:eb:15: c9:12:64:1e:95:1c:fe:22:ec:46:57:6b:15:da:ca:7a:29:db: 10:60:7d:46:5b:5e:e3:2f:75:a8:10:88:28:f7:e8:23:f8:a0: 94:49:51:11:47:63:bc:db:ad:79:eb:06:3c:ec:b5:aa:55:1e: 52:dd:4c:f8:14:38:3c:95:6c:73:a6:e9:33:b1:66:10:3c:4e: e4:fe:19:ce:f4:4e:10:52:bb:1c:08:1b:21:dc:1d:bc:f0:39: 1a:8f:c0:93:8a:f1:f2:39:1e:51:45:83:0c:0e:6a:72:8f:d2: 4d:a2:b1:d9:b4:db:e6:c0:15:79:97:de:3f:94:d3:96:26:60: d5:34:0f:42:2d:73:b9:1d:5c:f3:60:ee:e0:2c:be:1f:41:68: 7e:fa:9e:ae:54:61:30:e8:08:76:98:10:be:14:de:ba:9a:95: a5:15:ee:b4:ff:44:0b:54:64:c9:70:0f:04:c3:e2:a1:e1:7b: 87:b9:13:3d:bb:11:da:a5:91:f6:75:56:6d:82:69:96:56:2f: 53:26:0c:10 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuJF3CK16qNYqi4jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ4M2Y1MjYtZGQ4Yi00Y2YzLWI1MDAtMDUyNWFkNWZh YzFhMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ZTQ5OWY3NmQtOTEyNi00MGU2LTgxOGMtNmUzYThlNWZjYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmko3yVczzlfyH7O/xA9Lrqsm4gw2rHBCCDie 0pkUj/0RgW3KoqlVCvl1Ff+rQMO8Cz8lqH/Yy/OF0SNlEPvQtMFUtc5sceqzQ+H/ mRadqppidBvDrPf2AuQiXBHqKSEfAYLMsZImH7zjjhOQjlSJzAx5GbdKCxl85G/w ZTas/SzXgXVOLyOfCQG4VEpEobRZULO0J7BLRCQNz7jU/0+8OPZ0h7kGf9cyd5mf 0pPllGbqYEstdTuhzuyMb4xUwYNATAfsFd/1/va+x8RnxHLKaPvJMjPBZeJV8wr5 axIP9mleOtkWUeLORqO8YDel8H7JQM8nU+LVOGxqMfaJtBE4BQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJLZka1KJh6oXX30Ys+QRqviM0V+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZDgz ZjUyNi1kZDhiLTRjZjMtYjUwMC0wNTI1YWQ1ZmFjMWEvYzhjYzJmMjMtNmVmNC0z MDYxLTgzODktYTkxMWYyYmYzOWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmQ4M2Y1MjYtZGQ4Yi00Y2YzLWI1 MDAtMDUyNWFkNWZhYzFhL2ZkODNmNTI2LWRkOGItNGNmMy1iNTAwLTA1MjVhZDVm YWMxYS5jcmwwHwYDVR0jBBgwFoAU6tWZqteBYox/bUT22de2zRVarrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZDgzZjUyNi1kZDhiLTRjZjMtYjUwMC0wNTI1 YWQ1ZmFjMWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAotLzAwQA ovSNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHoC6u7ngwpGO1jzfHPeFImsNYi17xSo9Y6rKBKKGZc6XKMY vmglsuY1jrMVx2X5Oz1DTgbrFckSZB6VHP4i7EZXaxXaynop2xBgfUZbXuMvdagQ iCj36CP4oJRJURFHY7zbrXnrBjzstapVHlLdTPgUODyVbHOm6TOxZhA8TuT+Gc70 ThBSuxwIGyHcHbzwORqPwJOK8fI5HlFFgwwOanKP0k2isdm02+bAFXmX3j+U05Ym YNU0D0Itc7kdXPNg7uAsvh9BaH76nq5UYTDoCHaYEL4U3rqalaUV7rT/RAtUZMlw DwTD4qHhe4e5Ez27EdqlkfZ1Vm2CaZZWL1MmDBA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:21 2025 by rpki-client