$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa File: c8823d7b-5ece-3489-b72b-ced743ec137b.roa (raw, json) Hash identifier: IR1zt6XP8ZROFoc5eICGjUJaZ5SmJ3BL25I+Tl8BnLQ= Subject key identifier: F6:A2:D3:7C:64:B2:E2:93:30:DE:69:0F:4B:56:41:93:53:14:94:70 Certificate issuer: /CN=1cf30977-73f6-4522-b061-66f0061f58dd Certificate serial: 010D0C9F4328584B398701A98D1B3A9287CAAB00 Authority key identifier: 8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 395660 IP address blocks: 162.106.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:01:a9:8d:1b:3a:92:87:ca:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf30977-73f6-4522-b061-66f0061f58dd Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=2403ee0e-676c-4ecd-bc1a-2c0d051f2e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:26:40:2a:d8:d0:1e:c4:9e:52:c1:bc:0d: 8a:26:79:62:54:ee:af:e6:2a:ce:d4:be:ac:54:87: 87:ff:e5:80:cc:57:cf:59:4b:f8:27:1f:29:cf:c4: af:f7:ba:32:be:1d:08:7b:d7:ba:7f:75:1a:66:68: 56:ae:2d:fe:64:db:10:20:4a:de:d8:83:6d:c1:49: 70:f6:b4:3f:8c:d5:f5:bf:e4:bc:4a:04:f6:40:b2: 65:38:17:35:92:fe:18:89:f9:7e:9a:52:6a:3e:ea: 93:b0:ea:a6:39:53:eb:4f:49:90:5a:b0:df:90:e5: fe:ea:65:29:62:94:9c:e6:0f:16:8c:78:7f:04:7b: a9:9a:75:5d:e2:47:3e:81:62:67:ce:a8:42:38:74: df:2f:22:a7:1b:ff:42:ff:9e:8d:fc:25:99:ca:45: bd:81:fd:f8:10:8e:5e:76:c4:c1:ad:8f:06:e4:48: f9:c0:fb:9f:ed:9b:45:af:e8:0e:5d:19:3f:c8:03: 14:f4:fc:1f:dc:87:36:9d:46:e1:a1:d6:95:10:89: 6f:9f:f3:10:16:87:6b:0d:b7:3a:d7:c2:9f:cd:09: 96:fc:06:e2:19:36:01:c5:95:e4:2a:54:24:99:03: bf:41:02:50:cd:28:f8:fc:d8:e1:3a:93:3c:5d:e5: 0c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A2:D3:7C:64:B2:E2:93:30:DE:69:0F:4B:56:41:93:53:14:94:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/c8823d7b-5ece-3489-b72b-ced743ec137b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd/1cf30977-73f6-4522-b061-66f0061f58dd.crl X509v3 Authority Key Identifier: keyid:8C:7B:72:58:A8:E7:5D:32:06:BA:47:53:70:B1:0C:36:80:A3:7F:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cf30977-73f6-4522-b061-66f0061f58dd.cer sbgp-ipAddrBlock: critical IPv4: 162.106.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:21:35:00:f9:73:d5:da:c8:8a:15:33:55:64:a3:8c:25:21: c7:1a:89:29:2f:86:2d:9d:a5:34:26:43:c0:b6:bf:e7:86:9e: 39:d1:78:50:7a:72:5f:cd:1d:b0:a1:8d:33:12:8a:35:00:74: 8b:52:5c:b4:1a:17:b9:d0:01:d5:4e:ba:20:34:1c:01:f4:06: ea:1f:fd:7b:48:ac:81:d8:1c:b2:c3:75:61:71:e9:c7:3b:ea: 32:8d:1c:43:42:3f:38:f0:a5:bd:4a:e6:57:28:1a:2a:5a:7c: df:8f:db:76:89:29:95:f9:a9:61:37:fd:68:97:1f:4e:4f:ea: d2:fb:0d:6f:74:38:57:bf:bc:ef:4e:8c:41:2a:0a:6d:b2:35: 28:8d:aa:29:02:a8:4f:2e:aa:ef:8e:74:09:9a:7d:ed:3c:9b: 46:57:eb:91:3f:b4:48:1e:65:37:7e:1d:1c:51:81:b1:a1:ac: fd:54:37:7a:7e:51:7d:96:94:33:c8:7b:b4:d1:b9:16:0c:bf: 20:d7:a6:c0:51:0d:da:fb:40:72:5c:b1:81:10:aa:44:61:45: 4f:2b:8c:4d:81:9d:5a:87:c9:66:21:ae:a1:4f:28:81:3d:b7: 7f:3f:dd:7f:47:09:85:e6:68:88:ed:3f:39:10:4f:16:9d:cd: 03:3c:b0:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEs5hwGpjRs6kofKqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmMzA5NzctNzNmNi00NTIyLWIwNjEtNjZmMDA2MWY1 OGRkMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MjQwM2VlMGUtNjc2Yy00ZWNkLWJjMWEtMmMwZDA1MWYyZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIMmQCrY0B7EnlLBvA2KJnliVO6v5irO1L6s VIeH/+WAzFfPWUv4Jx8pz8Sv97oyvh0Ie9e6f3UaZmhWri3+ZNsQIEre2INtwUlw 9rQ/jNX1v+S8SgT2QLJlOBc1kv4Yifl+mlJqPuqTsOqmOVPrT0mQWrDfkOX+6mUp YpSc5g8WjHh/BHupmnVd4kc+gWJnzqhCOHTfLyKnG/9C/56N/CWZykW9gf34EI5e dsTBrY8G5Ej5wPuf7ZtFr+gOXRk/yAMU9Pwf3Ic2nUbhodaVEIlvn/MQFodrDbc6 18KfzQmW/AbiGTYBxZXkKlQkmQO/QQJQzSj4/NjhOpM8XeUMXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPai03xksuKTMN5pD0tWQZNTFJRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2Yz MDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYwMDYxZjU4ZGQvYzg4MjNkN2ItNWVjZS0z NDg5LWI3MmItY2VkNzQzZWMxMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWNmMzA5NzctNzNmNi00NTIyLWIw NjEtNjZmMDA2MWY1OGRkLzFjZjMwOTc3LTczZjYtNDUyMi1iMDYxLTY2ZjAwNjFm NThkZC5jcmwwHwYDVR0jBBgwFoAUjHtyWKjnXTIGukdTcLEMNoCjf6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xY2YzMDk3Ny03M2Y2LTQ1MjItYjA2MS02NmYw MDYxZjU4ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAomowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATiE1APlz1drIihUzVWSjjCUhxxqJKS+GLZ2lNCZDwLa/54aeOdF4UHpy X80dsKGNMxKKNQB0i1JctBoXudAB1U66IDQcAfQG6h/9e0isgdgcssN1YXHpxzvq Mo0cQ0I/OPClvUrmVygaKlp834/bdokplfmpYTf9aJcfTk/q0vsNb3Q4V7+8706M QSoKbbI1KI2qKQKoTy6q7450CZp97TybRlfrkT+0SB5lN34dHFGBsaGs/VQ3en5R fZaUM8h7tNG5Fgy/INemwFEN2vtAclyxgRCqRGFFTyuMTYGdWofJZiGuoU8ogT23 fz/df0cJheZoiO0/ORBPFp3NAzywtQ== -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:42 2025 by rpki-client