$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/644ecdd1-ea78-3ea3-a19c-f67c39830de3.roa File: 644ecdd1-ea78-3ea3-a19c-f67c39830de3.roa (raw, json) Hash identifier: g1v5lNTX52w3ryxJJNLG+Rd0woRh1a7tTI9mLy0Fasc= Subject key identifier: A7:87:30:88:F5:5C:7E:8D:C4:54:62:1F:AE:09:17:7C:2F:39:29:BC Certificate issuer: /CN=bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77 Certificate serial: 010D0C9F4328584B40819EC683F041B69FD6CA40 Authority key identifier: 23:9E:55:A1:BA:B3:DE:8D:4C:12:D6:86:B8:04:B5:B5:08:1B:49:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/644ecdd1-ea78-3ea3-a19c-f67c39830de3.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 31898 IP address blocks: 162.248.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:9e:c6:83:f0:41:b6:9f:d6:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=9c936868-ca41-44d6-933b-416a3be00ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:24:5b:76:f9:e8:3e:a0:13:f5:ce:28:92: 78:59:ee:e8:c0:a0:4d:fe:19:34:a0:7d:6a:76:8e: cf:4a:a6:13:cc:6b:16:3b:32:2b:ba:62:fc:cb:7c: 3a:82:75:d3:e6:87:3b:52:7c:14:f9:eb:62:20:d6: 90:92:26:ce:83:66:06:44:fb:80:6c:9a:98:47:bd: 98:e5:9b:fe:55:41:20:f0:0e:95:11:af:c9:69:78: c2:89:ec:fc:1f:54:3e:01:d4:29:53:06:37:58:ed: d6:30:68:4c:3d:2b:60:1b:80:5c:5f:ec:95:4c:64: 77:f7:f1:d7:fb:41:ea:ef:78:42:ce:73:85:e1:bb: 73:18:fc:74:84:69:3b:b8:96:97:14:13:39:18:d4: 92:e6:b6:da:3b:15:ab:63:8e:8b:7c:84:bf:21:7f: 9f:18:e0:26:12:3e:b6:1c:91:56:dc:52:35:6c:e9: 46:6e:31:3b:b1:6b:5a:42:6f:5b:70:44:34:51:30: 19:1c:69:c3:92:3c:af:c8:9f:07:17:f6:96:f5:66: f2:ef:11:ca:9d:84:5a:dd:42:78:87:7d:2c:b0:e5: c2:e1:88:8d:b6:3c:3d:dd:b3:2b:1c:5a:df:cc:1a: de:6b:81:44:99:54:fc:22:5f:57:40:5b:d3:d0:83: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:87:30:88:F5:5C:7E:8D:C4:54:62:1F:AE:09:17:7C:2F:39:29:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/644ecdd1-ea78-3ea3-a19c-f67c39830de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.crl X509v3 Authority Key Identifier: keyid:23:9E:55:A1:BA:B3:DE:8D:4C:12:D6:86:B8:04:B5:B5:08:1B:49:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer sbgp-ipAddrBlock: critical IPv4: 162.248.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:04:af:ec:4d:ac:6e:4d:8c:94:88:a0:76:d0:d9:29:18:0b: 46:78:78:23:95:c8:0b:52:87:7e:72:31:36:0d:28:09:d2:18: c0:75:03:03:1d:81:66:88:5f:b5:08:04:34:53:b2:af:a2:fe: 37:f7:3e:76:da:ff:47:f0:fb:cc:d2:47:58:0d:61:be:6a:93: 6f:a6:3c:69:43:ed:27:65:5a:88:fa:e9:e7:24:ef:06:fb:dc: 17:66:f7:0f:e0:87:79:63:85:86:5d:11:a3:62:49:17:11:91: 54:31:9c:31:8e:04:db:43:14:7d:14:c3:95:be:90:b8:6c:c5: 8a:3f:24:bf:79:60:e7:64:e9:35:1b:f7:1a:ee:62:74:2c:64: 39:f8:f9:eb:59:e0:e5:4b:41:ee:e5:c3:bf:1d:4b:68:fe:df: 30:6e:cd:6c:f9:a7:05:8c:2b:47:d8:1e:70:29:43:93:20:30: 6d:01:6a:38:7e:bf:fb:f1:71:d5:b9:c5:32:d4:77:f7:43:f0: c4:35:8c:d8:22:2d:ea:3a:1a:56:87:9b:f2:37:a3:13:ee:e7: 16:f8:9f:90:18:38:9f:35:2f:6b:1a:ae:a6:0f:e0:dd:54:9a: 1e:94:a1:3d:b4:7e:57:da:10:fb:51:7c:11:65:01:de:f8:d4: 30:7b:f7:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgZ7Gg/BBtp/WykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMxZDYxZjEtNzM1Yi00ZjRkLWExZWYtYzcwYjc0YmQz Zjc3MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OWM5MzY4NjgtY2E0MS00NGQ2LTkzM2ItNDE2YTNiZTAwZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXMkW3b56D6gE/XOKJJ4We7owKBN/hk0oH1q do7PSqYTzGsWOzIrumL8y3w6gnXT5oc7UnwU+etiINaQkibOg2YGRPuAbJqYR72Y 5Zv+VUEg8A6VEa/JaXjCiez8H1Q+AdQpUwY3WO3WMGhMPStgG4BcX+yVTGR39/HX +0Hq73hCznOF4btzGPx0hGk7uJaXFBM5GNSS5rbaOxWrY46LfIS/IX+fGOAmEj62 HJFW3FI1bOlGbjE7sWtaQm9bcEQ0UTAZHGnDkjyvyJ8HF/aW9Wby7xHKnYRa3UJ4 h30ssOXC4YiNtjw93bMrHFrfzBrea4FEmVT8Il9XQFvT0IONaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeHMIj1XH6NxFRiH64JF3wvOSm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzFk NjFmMS03MzViLTRmNGQtYTFlZi1jNzBiNzRiZDNmNzcvNjQ0ZWNkZDEtZWE3OC0z ZWEzLWExOWMtZjY3YzM5ODMwZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmMxZDYxZjEtNzM1Yi00ZjRkLWEx ZWYtYzcwYjc0YmQzZjc3L2JjMWQ2MWYxLTczNWItNGY0ZC1hMWVmLWM3MGI3NGJk M2Y3Ny5jcmwwHwYDVR0jBBgwFoAUI55Vobqz3o1MEtaGuAS1tQgbSWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzFkNjFmMS03MzViLTRmNGQtYTFlZi1jNzBi NzRiZDNmNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoviwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoEr+xNrG5NjJSIoHbQ2SkYC0Z4eCOVyAtSh35yMTYNKAnSGMB1AwMd gWaIX7UIBDRTsq+i/jf3Pnba/0fw+8zSR1gNYb5qk2+mPGlD7SdlWoj66eck7wb7 3Bdm9w/gh3ljhYZdEaNiSRcRkVQxnDGOBNtDFH0Uw5W+kLhsxYo/JL95YOdk6TUb 9xruYnQsZDn4+etZ4OVLQe7lw78dS2j+3zBuzWz5pwWMK0fYHnApQ5MgMG0Bajh+ v/vxcdW5xTLUd/dD8MQ1jNgiLeo6GlaHm/I3oxPu5xb4n5AYOJ81L2sarqYP4N1U mh6UoT20flfaEPtRfBFlAd741DB79zA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:58 2025 by rpki-client