$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9/bf3e7ae7-23b5-3007-b8f1-e25a719d39ba.roa File: bf3e7ae7-23b5-3007-b8f1-e25a719d39ba.roa (raw, json) Hash identifier: 9IazHC7jjx/9sN/Xt1EcGCbp/qfdxDhd4rIg4RdFbtk= Subject key identifier: B0:D3:17:26:D8:09:B7:67:6C:C5:99:F8:4A:46:C5:10:48:A6:AD:F5 Certificate issuer: /CN=c65b1f67-e903-4eb3-8e02-acf824b74dd9 Certificate serial: 010D0C9F4328584B7DECC93ED155DD27167E6C80 Authority key identifier: EA:E4:D7:5C:B8:9E:86:57:E1:88:69:3B:31:FE:BF:A0:D0:39:39:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9/bf3e7ae7-23b5-3007-b8f1-e25a719d39ba.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 55172 IP address blocks: 162.210.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9/c65b1f67-e903-4eb3-8e02-acf824b74dd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9/c65b1f67-e903-4eb3-8e02-acf824b74dd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c9:3e:d1:55:dd:27:16:7e:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65b1f67-e903-4eb3-8e02-acf824b74dd9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=52aa8c81-d687-4f4a-9188-ec1aa3ac018d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e2:bc:5a:bc:58:07:72:1b:b8:34:1d:d9:87: a0:3a:2a:72:ee:61:0e:8c:3c:cc:2c:bf:35:72:9f: 86:18:d6:50:5c:c6:76:e7:89:3e:6d:65:ac:fa:66: 1b:d9:e2:17:77:c2:08:d9:24:3b:3d:c2:3c:65:9b: 42:53:87:c3:8d:95:99:c0:6b:9e:0d:8a:14:ed:1b: ae:b4:c0:0c:67:e5:7d:18:db:a1:53:5a:aa:20:30: cd:4c:a7:8d:b4:24:5b:1f:d0:a3:fb:e3:08:87:12: 9f:ce:22:1f:a7:c8:a0:ab:3e:47:72:1d:e2:ac:d5: 8c:52:1d:c0:b8:a5:8c:20:ea:00:de:54:2e:49:df: 2b:f6:c8:ea:48:c8:9f:ae:2e:b7:a2:ff:c1:63:4b: e9:06:cb:c1:d5:96:99:b5:7a:0a:23:ba:8a:d7:56: 04:d6:ba:c9:22:35:7d:0d:ef:48:5e:d8:c5:79:15: 38:b4:20:72:8e:9e:d7:84:d7:e4:4d:a4:d8:12:f3: 48:7b:13:5d:43:f3:ec:ea:aa:e1:56:25:00:c4:b5: e9:89:4c:00:3f:50:d6:d3:81:9b:13:1b:f4:0f:8f: 7e:c5:ed:ad:96:fe:de:64:7e:9b:59:24:b0:17:76: f6:c6:f3:4d:c4:f7:87:43:02:d0:ab:2e:be:d3:10: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D3:17:26:D8:09:B7:67:6C:C5:99:F8:4A:46:C5:10:48:A6:AD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9/bf3e7ae7-23b5-3007-b8f1-e25a719d39ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9/c65b1f67-e903-4eb3-8e02-acf824b74dd9.crl X509v3 Authority Key Identifier: keyid:EA:E4:D7:5C:B8:9E:86:57:E1:88:69:3B:31:FE:BF:A0:D0:39:39:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c65b1f67-e903-4eb3-8e02-acf824b74dd9.cer sbgp-ipAddrBlock: critical IPv4: 162.210.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:15:c5:aa:db:96:62:f0:ee:c0:2e:cc:52:d3:20:d1:9a:5c: ab:c3:19:78:d2:54:7f:b9:dc:24:2f:f8:8e:1d:8a:6c:88:5f: 41:80:36:39:49:09:b5:a6:86:69:de:c5:72:df:39:b6:43:c9: e9:8f:6d:56:b4:09:85:e4:7b:93:bf:a9:c2:46:ff:f5:e6:f5: 34:53:f1:72:07:8d:90:52:c5:fe:46:24:f0:90:f9:26:fe:3f: 09:22:e6:00:00:a5:a1:29:d2:36:8c:51:38:ad:00:f0:84:38: 2a:e6:51:19:9f:c6:44:46:67:f8:e7:3a:d2:ba:05:3b:3f:f2: 46:c8:13:ca:3c:e1:3b:76:c4:b0:b2:3a:b1:9a:88:cb:26:9c: 73:66:17:25:2a:bf:30:df:6c:40:b7:15:1f:5e:96:cc:6a:f6: 84:ed:ac:a4:52:e7:e5:0f:6a:b4:90:90:0d:8e:94:e5:8d:f3: a7:de:3c:d2:46:96:e8:e8:af:2f:f4:4d:73:e9:de:28:08:87: 3d:7d:05:00:09:52:3d:4c:b6:7b:68:9b:bb:3a:aa:66:b5:0b: a6:2f:52:f1:0c:23:9d:4e:26:55:8a:1d:5c:a5:e4:23:d7:b7: a1:72:1c:f4:6a:eb:2b:90:9e:f7:98:c7:ef:14:f8:c9:55:d4: a0:43:22:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97Mk+0VXdJxZ+bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY1YjFmNjctZTkwMy00ZWIzLThlMDItYWNmODI0Yjc0 ZGQ5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NTJhYThjODEtZDY4Ny00ZjRhLTkxODgtZWMxYWEzYWMwMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOK8WrxYB3IbuDQd2YegOipy7mEOjDzMLL81 cp+GGNZQXMZ254k+bWWs+mYb2eIXd8II2SQ7PcI8ZZtCU4fDjZWZwGueDYoU7Ruu tMAMZ+V9GNuhU1qqIDDNTKeNtCRbH9Cj++MIhxKfziIfp8igqz5Hch3irNWMUh3A uKWMIOoA3lQuSd8r9sjqSMifri63ov/BY0vpBsvB1ZaZtXoKI7qK11YE1rrJIjV9 De9IXtjFeRU4tCByjp7XhNfkTaTYEvNIexNdQ/Ps6qrhViUAxLXpiUwAP1DW04Gb Exv0D49+xe2tlv7eZH6bWSSwF3b2xvNNxPeHQwLQqy6+0xAl9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDTFybYCbdnbMWZ+EpGxRBIpq31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNjVi MWY2Ny1lOTAzLTRlYjMtOGUwMi1hY2Y4MjRiNzRkZDkvYmYzZTdhZTctMjNiNS0z MDA3LWI4ZjEtZTI1YTcxOWQzOWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzY1YjFmNjctZTkwMy00ZWIzLThl MDItYWNmODI0Yjc0ZGQ5L2M2NWIxZjY3LWU5MDMtNGViMy04ZTAyLWFjZjgyNGI3 NGRkOS5jcmwwHwYDVR0jBBgwFoAU6uTXXLiehlfhiGk7Mf6/oNA5OQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNjViMWY2Ny1lOTAzLTRlYjMtOGUwMi1hY2Y4 MjRiNzRkZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQVxarblmLw7sAuzFLTINGaXKvDGXjSVH+53CQv+I4dimyIX0GANjlJ CbWmhmnexXLfObZDyemPbVa0CYXke5O/qcJG//Xm9TRT8XIHjZBSxf5GJPCQ+Sb+ Pwki5gAApaEp0jaMUTitAPCEOCrmURmfxkRGZ/jnOtK6BTs/8kbIE8o84Tt2xLCy OrGaiMsmnHNmFyUqvzDfbEC3FR9elsxq9oTtrKRS5+UParSQkA2OlOWN86fePNJG lujory/0TXPp3igIhz19BQAJUj1Mtntom7s6qma1C6YvUvEMI51OJlWKHVyl5CPX t6FyHPRq6yuQnveYx+8U+MlV1KBDIq8= -----END CERTIFICATE-----Generated at Mon Oct 20 04:30:22 2025 by rpki-client