$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3fca8b43-eadd-361e-b017-75be3cb82a6a.roa File: 3fca8b43-eadd-361e-b017-75be3cb82a6a.roa (raw, json) Hash identifier: OZi6/qy0qhNu/5EqJVxs/O2+zi6SiwQK3jwp/0gF/iw= Subject key identifier: 3A:86:5F:05:E3:13:E0:08:A5:03:D6:69:35:5E:FC:4C:DB:87:9B:27 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76D2C0A92128FE658C9900 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3fca8b43-eadd-361e-b017-75be3cb82a6a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 162.246.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d2:c0:a9:21:28:fe:65:8c:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=3745e3e6-f3d8-4095-a401-154c862d262c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:36:1a:e5:26:91:e6:23:2a:fd:cb:40:eb: f7:0f:35:b8:15:fd:00:e9:0c:35:a0:6d:8b:04:69: a7:2e:8a:39:e0:47:d1:b2:eb:71:78:4d:e3:f6:ce: 30:62:bb:19:fc:88:4d:38:e6:92:9d:30:ec:fa:4d: c9:61:8a:b2:1e:80:ec:d0:82:3c:c3:bb:40:ff:52: 0a:15:4f:f5:11:a7:28:ca:d6:f3:9d:28:7c:a3:2e: 53:05:87:c5:d6:bd:15:44:59:d0:fd:ad:08:1a:c3: 91:f3:6f:d0:6d:a3:b1:7a:7e:7b:3f:53:44:8f:b7: 32:20:e2:64:7c:cd:b6:c0:e7:9f:54:d5:81:99:67: 87:fe:7a:b5:ff:63:af:8c:48:af:07:16:fd:34:19: ef:26:1f:4d:eb:73:76:2f:15:0f:04:44:9a:57:3b: e7:2a:9d:2f:91:27:06:0f:19:ad:55:a1:ed:b3:7b: d5:52:62:61:79:8c:d1:00:f8:55:b1:1b:6b:53:da: 69:98:30:a3:15:13:d3:ef:34:73:b8:12:be:1e:1c: 6f:39:3d:62:18:f2:8b:3c:3e:cd:83:db:12:dd:30: f4:09:d4:4e:e4:fb:26:81:c1:cf:40:ae:9c:54:9f: 90:bc:28:fe:aa:5b:e9:af:1b:11:f6:2b:91:73:44: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:5F:05:E3:13:E0:08:A5:03:D6:69:35:5E:FC:4C:DB:87:9B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3fca8b43-eadd-361e-b017-75be3cb82a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 162.246.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:be:cc:6c:75:ff:14:a5:2c:59:26:a0:73:2d:10:13:f3:7f: 15:9d:35:85:bd:c0:86:e2:48:80:1e:3a:ea:2b:cc:0b:e0:74: 66:85:ac:fe:e2:f8:f6:9f:3d:19:c6:7d:23:27:b2:94:60:5e: db:75:cb:ee:23:1a:9c:b5:50:6c:ad:76:eb:fc:2c:88:11:72: 8d:7c:04:8b:2d:81:6c:7b:9f:6d:af:e3:49:f0:07:c0:66:96: 2b:5a:99:4e:2b:d1:2e:c1:74:a8:0b:ef:61:23:37:9d:3c:92: 53:25:f4:19:81:76:7e:2b:f2:55:4e:7f:04:45:3d:cb:55:67: 37:b5:1f:1b:91:85:cd:13:16:65:2b:72:6a:fd:be:98:02:ec: 19:9a:e2:3e:ee:20:ed:35:1a:85:2c:85:4a:b4:ca:10:f7:9a: d6:75:83:7d:96:5c:df:e1:91:1f:94:41:23:c2:77:55:56:63: f6:96:2d:58:ec:3e:48:16:14:b1:e2:7b:63:c9:1d:ee:e5:5d: 33:dc:66:77:7c:e3:1d:31:1a:63:81:3a:d7:3f:76:a0:da:47: 73:04:30:ca:3d:94:bc:d3:72:63:b9:b1:37:85:d9:4d:6a:26: e5:01:6b:31:4f:4e:97:44:95:d8:94:db:80:2c:2f:51:0f:5f: 05:4e:ca:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtLAqSEo/mWMmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Mzc0NWUzZTYtZjNkOC00MDk1LWE0MDEtMTU0Yzg2MmQyNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm82GuUmkeYjKv3LQOv3DzW4Ff0A6Qw1oG2L BGmnLoo54EfRsutxeE3j9s4wYrsZ/IhNOOaSnTDs+k3JYYqyHoDs0II8w7tA/1IK FU/1EacoytbznSh8oy5TBYfF1r0VRFnQ/a0IGsOR82/QbaOxen57P1NEj7cyIOJk fM22wOefVNWBmWeH/nq1/2OvjEivBxb9NBnvJh9N63N2LxUPBESaVzvnKp0vkScG DxmtVaHts3vVUmJheYzRAPhVsRtrU9ppmDCjFRPT7zRzuBK+HhxvOT1iGPKLPD7N g9sS3TD0CdRO5PsmgcHPQK6cVJ+QvCj+qlvprxsR9iuRc0Qi7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqGXwXjE+AIpQPWaTVe/Ezbh5snMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2ZjYThiNDMtZWFkZC0z NjFlLWIwMTctNzViZTNjYjgyYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe+zGx1/xSlLFkmoHMtEBPzfxWdNYW9wIbiSIAeOuorzAvgdGaFrP7i +PafPRnGfSMnspRgXtt1y+4jGpy1UGytduv8LIgRco18BIstgWx7n22v40nwB8Bm litamU4r0S7BdKgL72EjN508klMl9BmBdn4r8lVOfwRFPctVZze1HxuRhc0TFmUr cmr9vpgC7Bma4j7uIO01GoUshUq0yhD3mtZ1g32WXN/hkR+UQSPCd1VWY/aWLVjs PkgWFLHie2PJHe7lXTPcZnd84x0xGmOBOtc/dqDaR3MEMMo9lLzTcmO5sTeF2U1q JuUBazFPTpdEldiU24AsL1EPXwVOyrc= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:43 2025 by rpki-client