$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/197fe0ef-c0a7-308c-b4a2-82b1c3ba00db.roa File: 197fe0ef-c0a7-308c-b4a2-82b1c3ba00db.roa (raw, json) Hash identifier: DmnkH85/+sIags9eOqPRE4uZlDCzhG/6G8hSAZmWUMw= Subject key identifier: 5B:A1:3F:63:11:A0:10:97:E1:5E:3D:9F:7C:DA:07:9E:4F:96:4D:86 Certificate issuer: /CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Certificate serial: 010D0C9F4328584B5141C2199942755FC3A86A80 Authority key identifier: 02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/197fe0ef-c0a7-308c-b4a2-82b1c3ba00db.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 400648 IP address blocks: 163.182.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c2:19:99:42:75:5f:c3:a8:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c86f5c3-cc81-4acd-8209-c28b6f5b7984 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=85439fba-f77d-4cd2-b274-04e7c1ceb1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:43:56:5f:f6:fe:37:b4:b9:88:9d:d4:25: ab:96:dc:e5:d9:96:96:7f:84:09:75:a7:98:0d:6b: ff:e8:49:f7:e7:02:70:9e:a1:f9:1d:6a:ff:39:13: 7b:06:8c:a0:84:97:57:18:22:bd:9d:5a:83:70:3f: 7b:36:f3:c4:13:66:00:ab:72:57:0a:91:ec:a6:52: da:ab:7b:76:23:76:c1:34:15:12:cb:d6:13:fb:99: 02:96:e0:f6:f4:e7:f1:23:8b:10:b3:13:75:5d:89: f3:a4:85:da:a9:55:ea:a8:8d:39:f7:68:56:2d:c5: 28:58:0f:bb:4e:bc:1b:7d:a5:c5:38:a9:e6:58:ae: 50:41:73:56:d6:0b:29:3d:28:4d:15:ed:7c:14:6b: c5:18:40:b6:8f:0b:50:af:72:84:8c:2b:cd:ba:24: 2e:29:22:77:84:51:15:9d:95:1c:53:4f:c7:3a:cd: 22:40:0d:ff:fd:f1:a0:ad:c3:dc:24:6c:4f:48:b2: 65:c8:0f:f3:94:b0:2b:c3:b3:ec:dd:c1:31:20:71: 14:0b:39:27:f7:10:22:c7:99:90:d8:98:7b:ff:c5: 7f:ba:e3:e8:ae:45:f0:d7:b4:57:dc:80:34:c8:57: 5f:54:0a:04:ce:0e:f1:fc:3b:8f:56:55:27:9c:33: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A1:3F:63:11:A0:10:97:E1:5E:3D:9F:7C:DA:07:9E:4F:96:4D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/197fe0ef-c0a7-308c-b4a2-82b1c3ba00db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.crl X509v3 Authority Key Identifier: keyid:02:D2:86:34:A6:8D:40:07:1A:18:26:BB:67:47:8B:58:91:FF:D2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9c86f5c3-cc81-4acd-8209-c28b6f5b7984.cer sbgp-ipAddrBlock: critical IPv4: 163.182.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ea:c2:1b:0e:e4:73:5f:e2:46:41:c7:83:eb:76:89:14:21: 5b:e4:dc:1c:26:1d:e6:db:0a:58:4c:32:9b:4f:6a:aa:d3:05: a2:c5:38:aa:40:14:1c:b7:ae:b2:9f:84:c7:f6:93:3e:d7:a4: d2:41:8f:a4:d9:44:fc:a5:9b:a1:7b:57:71:15:fa:af:dc:6b: 55:09:96:a8:ac:a9:8c:5f:57:a4:3f:27:2c:28:f1:26:2c:9b: ef:ab:b7:b5:e6:dc:c7:c5:cb:f9:31:07:c9:9b:35:27:89:72: d9:c5:6d:53:c1:78:eb:76:5c:a0:79:14:46:80:ed:40:8f:18: 1b:08:7e:64:2a:a8:50:ed:50:2d:a6:21:3b:62:b7:1b:62:1b: 30:29:ea:98:e8:b3:15:57:6d:77:cb:3a:ca:83:3f:15:64:e5: ae:cb:86:4f:4b:72:7e:3d:c9:bb:ba:af:af:6c:f0:32:88:ce: d6:b3:bd:fe:22:f7:e2:db:8c:ab:83:ea:4d:bc:76:98:9a:ac: c5:39:55:9c:c8:3a:3c:11:f4:b1:4a:34:94:77:28:e0:5c:d8: ab:95:b7:71:79:46:ad:b0:3b:c3:a8:99:89:c8:f5:ff:88:41: 06:d2:b1:fd:39:4d:98:3f:ca:14:b4:7c:70:2d:c7:1c:25:a7: 5b:02:4c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQcIZmUJ1X8OoaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM4NmY1YzMtY2M4MS00YWNkLTgyMDktYzI4YjZmNWI3 OTg0MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ODU0MzlmYmEtZjc3ZC00Y2QyLWIyNzQtMDRlN2MxY2ViMWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/VDVl/2/je0uYid1CWrltzl2ZaWf4QJdaeY DWv/6En35wJwnqH5HWr/ORN7BoyghJdXGCK9nVqDcD97NvPEE2YAq3JXCpHsplLa q3t2I3bBNBUSy9YT+5kCluD29OfxI4sQsxN1XYnzpIXaqVXqqI0592hWLcUoWA+7 TrwbfaXFOKnmWK5QQXNW1gspPShNFe18FGvFGEC2jwtQr3KEjCvNuiQuKSJ3hFEV nZUcU0/HOs0iQA3//fGgrcPcJGxPSLJlyA/zlLArw7Ps3cExIHEUCzkn9xAix5mQ 2Jh7/8V/uuPorkXw17RX3IA0yFdfVAoEzg7x/DuPVlUnnDNhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuhP2MRoBCX4V49n3zaB55Plk2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2 ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhiNmY1Yjc5ODQvMTk3ZmUwZWYtYzBhNy0z MDhjLWI0YTItODJiMWMzYmEwMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWM4NmY1YzMtY2M4MS00YWNkLTgy MDktYzI4YjZmNWI3OTg0LzljODZmNWMzLWNjODEtNGFjZC04MjA5LWMyOGI2ZjVi Nzk4NC5jcmwwHwYDVR0jBBgwFoAUAtKGNKaNQAcaGCa7Z0eLWJH/0icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yzg2ZjVjMy1jYzgxLTRhY2QtODIwOS1jMjhi NmY1Yjc5ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo7agMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjqwhsO5HNf4kZBx4PrdokUIVvk3BwmHebbClhMMptPaqrTBaLFOKpA FBy3rrKfhMf2kz7XpNJBj6TZRPylm6F7V3EV+q/ca1UJlqisqYxfV6Q/Jywo8SYs m++rt7Xm3MfFy/kxB8mbNSeJctnFbVPBeOt2XKB5FEaA7UCPGBsIfmQqqFDtUC2m ITtitxtiGzAp6pjosxVXbXfLOsqDPxVk5a7Lhk9Lcn49ybu6r69s8DKIztazvf4i 9+LbjKuD6k28dpiarMU5VZzIOjwR9LFKNJR3KOBc2KuVt3F5Rq2wO8OomYnI9f+I QQbSsf05TZg/yhS0fHAtxxwlp1sCTPE= -----END CERTIFICATE-----Generated at Thu Oct 9 20:06:19 2025 by rpki-client