$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/3da03965-f67d-3f9e-ba07-b78793310588.roa File: 3da03965-f67d-3f9e-ba07-b78793310588.roa (raw, json) Hash identifier: B4ton3NTTK+019uTn4qrF0dcdcUdTYxWUbDhTz3nNOs= Subject key identifier: 3F:FF:F7:00:41:A3:FF:D3:C7:F3:C2:01:4B:19:E0:FA:B8:CF:B1:47 Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F4328584B5F371E17E60D8E67B71233E0 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/3da03965-f67d-3f9e-ba07-b78793310588.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 63072 IP address blocks: 162.253.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:1e:17:e6:0d:8e:67:b7:12:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=0904b784-c603-48f0-8390-af7bd185117a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7c:d3:a1:c3:3b:00:94:ad:d2:37:fa:3e:3e: 83:61:5e:56:cf:04:4d:c1:fb:5e:f3:e3:72:1c:9e: fc:17:34:57:6b:36:d2:d1:ef:10:2f:ce:fd:7c:50: ec:d9:bb:c1:d0:74:b4:c4:a1:8e:f9:8f:a5:be:d1: b6:a7:fe:5b:f6:c3:0c:eb:4f:27:e5:f9:e4:e5:e2: 8b:c8:93:cd:bd:cc:ec:a3:7b:1b:ec:cc:31:0b:75: e2:8b:9b:7d:b4:23:a8:b3:e8:23:d7:9d:ec:3d:87: bd:6e:41:aa:30:a9:ce:ae:12:3e:30:2a:37:4e:b7: b3:4c:fb:3e:16:30:d4:a9:36:e3:7e:bd:4f:05:c4: 2a:01:fb:23:4d:b5:32:9e:48:82:c5:02:b1:27:dd: a2:b6:03:cf:c7:5f:5e:1c:ba:07:8b:cb:9c:1e:b1: 2e:9a:b9:a3:d1:25:e7:1b:79:f4:60:84:0a:62:ae: 43:37:73:a8:87:8c:ae:8d:c9:35:71:a2:b8:12:7f: 83:92:d8:14:1e:8b:f4:1c:92:f6:71:29:09:2d:c1: 6e:43:49:9b:c1:a6:66:57:1e:db:e7:37:d4:bb:d2: 7b:59:53:95:97:f6:80:14:b9:59:81:88:8c:0b:ad: 17:e6:00:d7:28:5b:b3:aa:c4:5a:18:bb:72:eb:cd: 38:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FF:F7:00:41:A3:FF:D3:C7:F3:C2:01:4B:19:E0:FA:B8:CF:B1:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/3da03965-f67d-3f9e-ba07-b78793310588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv4: 162.253.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:51:13:7b:d4:7c:a3:82:ce:5d:92:43:fa:2f:dd:59:d2:20: c0:d8:b7:52:ca:a7:0c:26:01:49:25:8a:9f:62:c9:f7:a2:46: 95:82:0b:e9:3d:44:61:68:71:69:ac:47:f4:e8:0c:f0:3f:b3: a7:68:6f:f1:6b:37:65:be:73:10:fc:2f:b3:a7:58:46:fc:63: e8:ee:8b:02:a0:ba:ab:79:81:63:0b:15:75:3e:e3:ca:86:8d: 4c:7d:60:0d:cd:32:67:e5:85:57:78:d3:93:c1:1e:23:85:93: 60:49:71:df:5c:2c:d8:86:59:5e:1f:2e:a2:c4:a1:3b:9c:30: f0:ac:f8:b1:cc:79:57:06:12:73:34:80:fd:75:b4:64:20:a1: 6b:c3:a9:20:64:b1:0b:66:81:e4:30:20:c1:54:1f:db:29:06: f9:1c:79:d2:10:17:63:23:7e:07:81:7c:27:cc:b8:e7:9f:a6: 0c:f0:a3:1f:e3:f4:d5:12:b7:2d:42:16:ad:c6:b5:36:8e:f1: 7b:40:c9:a4:af:44:70:2d:4d:dd:45:70:b6:e4:ef:a6:07:b4: c9:c3:8f:d2:e4:79:77:28:a9:d0:c4:1a:e8:4b:34:57:9b:78: dd:da:ae:3b:d7:5a:bd:09:e0:01:19:f8:e0:01:e0:34:bf:f7: e1:1e:16:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNx4X5g2OZ7cSM+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MDkwNGI3ODQtYzYwMy00OGYwLTgzOTAtYWY3YmQxODUxMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3zTocM7AJSt0jf6Pj6DYV5WzwRNwfte8+Ny HJ78FzRXazbS0e8QL879fFDs2bvB0HS0xKGO+Y+lvtG2p/5b9sMM608n5fnk5eKL yJPNvczso3sb7MwxC3Xii5t9tCOos+gj153sPYe9bkGqMKnOrhI+MCo3TrezTPs+ FjDUqTbjfr1PBcQqAfsjTbUynkiCxQKxJ92itgPPx19eHLoHi8ucHrEumrmj0SXn G3n0YIQKYq5DN3Ooh4yujck1caK4En+DktgUHov0HJL2cSkJLcFuQ0mbwaZmVx7b 5zfUu9J7WVOVl/aAFLlZgYiMC60X5gDXKFuzqsRaGLty6804VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD//9wBBo//Tx/PCAUsZ4Pq4z7FHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvM2RhMDM5NjUtZjY3ZC0z ZjllLWJhMDctYjc4NzkzMzEwNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJRE3vUfKOCzl2SQ/ov3VnSIMDYt1LKpwwmAUklip9iyfeiRpWCC+k9 RGFocWmsR/ToDPA/s6dob/FrN2W+cxD8L7OnWEb8Y+juiwKguqt5gWMLFXU+48qG jUx9YA3NMmflhVd405PBHiOFk2BJcd9cLNiGWV4fLqLEoTucMPCs+LHMeVcGEnM0 gP11tGQgoWvDqSBksQtmgeQwIMFUH9spBvkcedIQF2MjfgeBfCfMuOefpgzwox/j 9NUSty1CFq3GtTaO8XtAyaSvRHAtTd1FcLbk76YHtMnDj9LkeXcoqdDEGuhLNFeb eN3arjvXWr0J4AEZ+OAB4DS/9+EeFuA= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:55 2025 by rpki-client