$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729658de-8533-3e20-b5a0-aec67125e57a.roa File: 729658de-8533-3e20-b5a0-aec67125e57a.roa (raw, json) Hash identifier: hkAZBCAoxdsS2yQt48dMzWCY5yCVbaWfTpicua9Fq5Q= Subject key identifier: 06:B4:DB:F3:FF:9E:F8:74:82:3A:91:83:E1:2B:34:DD:8E:8C:F9:C7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6121B77D9DA3D56E48A856C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729658de-8533-3e20-b5a0-aec67125e57a.roa Signing time: Wed 01 Oct 2025 17:29:03 +0000 ROA not before: Wed 01 Oct 2025 17:29:03 +0000 ROA not after: Tue 30 Dec 2025 18:29:03 +0000 asID: 401152 IP address blocks: 170.62.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:21:b7:7d:9d:a3:d5:6e:48:a8:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 1 17:29:03 2025 GMT Not After : Dec 30 18:29:03 2025 GMT Subject: CN=c56fd0e3-bf33-4f17-8630-67449a51fc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:55:e6:23:fd:a8:9e:2b:4f:fb:7e:56:61: 90:18:82:33:29:ed:da:b0:01:5a:0b:cb:47:b8:b8: d4:af:f4:8d:bf:d5:bd:8f:af:50:23:4d:fc:f4:30: f9:31:c3:4d:41:37:41:c4:15:78:18:16:c1:82:0d: 8f:85:da:f5:25:5e:cd:26:3b:da:e7:ef:03:eb:c5: bb:34:4a:b1:57:7d:f0:e7:a7:3f:37:8f:f5:be:56: 22:7e:c2:d3:47:21:fd:0d:e5:eb:24:c0:db:bf:5c: ba:65:82:70:03:a2:2f:a4:b9:d1:c0:93:a1:4b:47: f3:7a:73:a5:ac:f8:e5:37:69:2e:68:c6:69:3f:db: cf:a5:b9:05:0a:66:f6:c1:6d:b0:a1:61:5d:a9:c7: 53:67:2c:77:34:92:eb:43:07:5c:f7:c6:ee:33:46: 80:43:4b:23:ac:17:03:15:2e:bf:08:cb:2e:07:a2: b4:9e:30:81:81:23:a4:a0:38:8f:06:de:bb:19:1a: 4e:e0:75:c0:bd:51:de:87:71:bb:42:6c:50:b5:94: 69:96:e4:02:bf:fb:84:f3:dc:5e:a2:d4:45:a8:9b: 58:fc:5b:1e:3f:2f:9e:70:cc:a1:5e:48:e3:85:d4: 9c:9e:b8:71:f4:ea:e4:51:d7:1b:23:45:34:6e:39: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B4:DB:F3:FF:9E:F8:74:82:3A:91:83:E1:2B:34:DD:8E:8C:F9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729658de-8533-3e20-b5a0-aec67125e57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 170.62.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:41:6c:1d:17:ea:f8:68:bb:b5:fe:90:cb:ba:a6:38:a7:70: 43:28:fd:88:1a:80:7a:e6:54:5b:a4:20:dd:a6:25:b4:75:dd: ed:05:f4:ef:4e:93:eb:e3:63:73:49:5b:74:64:46:e9:0c:2c: e7:66:f3:56:77:e9:7b:4f:39:55:e1:a8:ab:9e:79:26:dc:04: 89:5c:8f:c4:a7:12:13:a1:43:57:4a:d0:e5:44:20:97:67:03: 3c:03:8d:54:f6:a5:0a:b4:ee:70:31:ca:8b:5c:f4:ec:ef:fd: 07:3e:27:a4:26:8e:52:2b:17:71:4e:1d:7b:c4:9c:f8:bf:0a: 00:2b:b3:57:8c:c5:be:a2:c4:59:1a:5c:e6:3c:cd:e0:00:9a: 57:40:51:9a:ac:86:e8:0f:22:66:4c:e8:9e:99:63:98:e4:00: 3b:b3:0a:b8:08:a7:1d:ab:c8:11:ff:ec:bc:10:67:12:97:84: 38:af:65:0e:9d:87:88:0e:18:10:8d:d6:92:fe:2c:96:16:ef: 99:69:fa:16:e9:ea:e9:d3:eb:46:4a:04:d5:67:e7:f6:5e:73: 7b:cc:c0:44:c0:76:14:62:a4:6c:d6:f3:b6:ed:e9:bc:91:00: 0e:91:29:5f:b0:33:45:a6:3c:bb:4c:fb:25:e5:fe:e8:1a:69: 0d:b5:ce:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthIbd9naPVbkioVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwMTE3MjkwM1oXDTI1MTIzMDE4MjkwM1owLzEtMCsGA1UEAxMk YzU2ZmQwZTMtYmYzMy00ZjE3LTg2MzAtNjc0NDlhNTFmYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIVV5iP9qJ4rT/t+VmGQGIIzKe3asAFaC8tH uLjUr/SNv9W9j69QI0389DD5McNNQTdBxBV4GBbBgg2Phdr1JV7NJjva5+8D68W7 NEqxV33w56c/N4/1vlYifsLTRyH9DeXrJMDbv1y6ZYJwA6IvpLnRwJOhS0fzenOl rPjlN2kuaMZpP9vPpbkFCmb2wW2woWFdqcdTZyx3NJLrQwdc98buM0aAQ0sjrBcD FS6/CMsuB6K0njCBgSOkoDiPBt67GRpO4HXAvVHeh3G7QmxQtZRpluQCv/uE89xe otRFqJtY/FsePy+ecMyhXkjjhdScnrhx9OrkUdcbI0U0bjnthQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa02/P/nvh0gjqRg+ErNN2OjPnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzI5NjU4ZGUtODUzMy0z ZTIwLWI1YTAtYWVjNjcxMjVlNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqj6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExBbB0X6vhou7X+kMu6pjincEMo/YgagHrmVFukIN2mJbR13e0F9O9O k+vjY3NJW3RkRukMLOdm81Z36XtPOVXhqKueeSbcBIlcj8SnEhOhQ1dK0OVEIJdn AzwDjVT2pQq07nAxyotc9Ozv/Qc+J6QmjlIrF3FOHXvEnPi/CgArs1eMxb6ixFka XOY8zeAAmldAUZqshugPImZM6J6ZY5jkADuzCrgIpx2ryBH/7LwQZxKXhDivZQ6d h4gOGBCN1pL+LJYW75lp+hbp6unT60ZKBNVn5/Zec3vMwETAdhRipGzW87bt6byR AA6RKV+wM0WmPLtM+yXl/ugaaQ21zvw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:03 2025 by rpki-client