$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa File: 8092af76-214c-34c1-a5f8-aad25351bfc1.roa (raw, json) Hash identifier: vblYSCJLTWas3O9T8hYP+7TWWALO9E1otNxoa+TNCks= Subject key identifier: AA:F8:5B:80:4C:2F:D4:06:29:8F:12:0A:AA:E9:C2:1F:81:67:5B:7F Certificate issuer: /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Certificate serial: 010D0C9F4328584B39ACDD50D6E00C56F6B5A200 Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa Signing time: Wed 17 Sep 2025 14:17:05 +0000 ROA not before: Wed 17 Sep 2025 14:17:05 +0000 ROA not after: Tue 16 Dec 2025 15:17:05 +0000 asID: 22504 IP address blocks: 162.118.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:ac:dd:50:d6:e0:0c:56:f6:b5:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113 Validity Not Before: Sep 17 14:17:05 2025 GMT Not After : Dec 16 15:17:05 2025 GMT Subject: CN=427821f1-1092-4f24-9bd1-19662b373713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:01:f4:3d:fe:dd:21:ae:0b:81:d4:6b:92: 5f:d3:3e:5e:57:72:83:f2:e3:c8:4b:91:85:3c:a3: 86:37:73:58:10:ee:2d:f9:ce:96:fb:0f:7a:5a:e3: a4:6f:8c:08:0d:ed:ce:2e:ec:7f:54:aa:88:7e:06: 90:d1:e6:09:ec:53:4c:8c:11:72:aa:ee:f9:0e:40: 4d:3d:6c:5c:11:5e:b0:48:19:7f:dd:10:80:7d:18: c3:e1:bf:8b:e6:40:ad:ee:a9:62:78:c5:42:6e:52: ca:9b:33:59:72:de:36:38:96:2d:4d:bc:d9:54:4a: 3b:6b:90:b6:6f:9a:ce:59:0f:36:3a:7b:f6:15:e2: 9d:0d:e1:de:02:74:a8:d4:95:ef:c5:fa:f7:3f:c6: 60:70:01:70:e3:af:3b:81:73:11:2a:3d:02:0f:8a: ea:9d:6e:13:12:80:ce:da:b7:0b:7c:68:c4:30:10: 6a:33:6b:d4:a3:e4:1b:91:57:05:a9:04:95:0c:7c: b2:ef:64:72:e4:17:a2:53:cf:6d:a9:8f:2e:dc:ce: 2a:53:5b:69:2b:f4:95:82:b9:eb:e5:10:91:c6:69: 91:91:a5:56:20:85:b3:e2:88:4a:93:b4:77:49:93: bd:7b:a4:d0:78:ad:4f:a4:63:bc:08:ec:dc:e4:3e: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:5B:80:4C:2F:D4:06:29:8F:12:0A:AA:E9:C2:1F:81:67:5B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/8092af76-214c-34c1-a5f8-aad25351bfc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl X509v3 Authority Key Identifier: keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer sbgp-ipAddrBlock: critical IPv4: 162.118.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:88:6d:bd:5b:2d:41:10:2e:b4:75:79:1d:e7:72:78:36:d5: 44:a1:0a:27:90:2e:e7:4f:e8:e3:6a:b3:c4:17:d9:dc:8c:b1: 39:6e:da:31:03:8b:4c:e9:c6:d8:97:23:9e:9a:88:86:ff:ee: 73:16:bc:e7:16:6d:5a:f0:cd:8a:bc:3e:8f:74:e0:b7:91:f2: fb:63:8a:17:81:95:c4:57:78:eb:c4:84:e6:f1:37:d3:c4:c8: d8:d3:39:98:aa:97:09:42:ab:74:8d:7f:75:07:c8:5c:2d:00: 61:1b:8e:ce:02:2e:54:13:e2:3a:1f:64:26:26:a8:de:24:7c: 1b:51:83:c8:f0:36:8a:04:68:2e:42:3b:e1:c5:db:1a:95:f9: fe:0b:28:eb:d4:0c:fa:17:fc:2d:6e:88:7a:a0:88:8f:cd:5d: 08:9a:26:35:0c:0e:ef:af:c7:11:38:72:fe:5b:c4:c8:4e:ca: 01:70:55:6b:fa:d5:5f:da:7d:79:77:58:b5:2f:8e:76:f3:3a: 53:b8:20:29:af:78:96:e0:40:71:2e:45:0c:2a:a9:c9:51:e3: 74:4d:5e:06:1c:23:46:56:4b:9e:ec:a7:62:4f:61:16:c1:b9: a9:9d:7b:fa:3e:90:2f:c0:56:f9:42:9b:4e:f7:3a:fd:43:64: 87:47:83:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5rN1Q1uAMVva1ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEzZmUzYTktZDlmNy00YjhlLWEwMzctODc3MzYzYzUz MTEzMB4XDTI1MDkxNzE0MTcwNVoXDTI1MTIxNjE1MTcwNVowLzEtMCsGA1UEAxMk NDI3ODIxZjEtMTA5Mi00ZjI0LTliZDEtMTk2NjJiMzczNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0EB9D3+3SGuC4HUa5Jf0z5eV3KD8uPIS5GF PKOGN3NYEO4t+c6W+w96WuOkb4wIDe3OLux/VKqIfgaQ0eYJ7FNMjBFyqu75DkBN PWxcEV6wSBl/3RCAfRjD4b+L5kCt7qlieMVCblLKmzNZct42OJYtTbzZVEo7a5C2 b5rOWQ82Onv2FeKdDeHeAnSo1JXvxfr3P8ZgcAFw4687gXMRKj0CD4rqnW4TEoDO 2rcLfGjEMBBqM2vUo+QbkVcFqQSVDHyy72Ry5BeiU89tqY8u3M4qU1tpK/SVgrnr 5RCRxmmRkaVWIIWz4ohKk7R3SZO9e6TQeK1PpGO8COzc5D75ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKr4W4BML9QGKY8SCqrpwh+BZ1t/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNm ZTNhOS1kOWY3LTRiOGUtYTAzNy04NzczNjNjNTMxMTMvODA5MmFmNzYtMjE0Yy0z NGMxLWE1ZjgtYWFkMjUzNTFiZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWEzZmUzYTktZDlmNy00YjhlLWEw MzctODc3MzYzYzUzMTEzLzVhM2ZlM2E5LWQ5ZjctNGI4ZS1hMDM3LTg3NzM2M2M1 MzExMy5jcmwwHwYDVR0jBBgwFoAUqMFLPdFSbDWZZINgLfzwTAq87N4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTNmZTNhOS1kOWY3LTRiOGUtYTAzNy04Nzcz NjNjNTMxMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAonYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWIbb1bLUEQLrR1eR3ncng21UShCieQLudP6ONqs8QX2dyMsTlu2jED i0zpxtiXI56aiIb/7nMWvOcWbVrwzYq8Po904LeR8vtjiheBlcRXeOvEhObxN9PE yNjTOZiqlwlCq3SNf3UHyFwtAGEbjs4CLlQT4jofZCYmqN4kfBtRg8jwNooEaC5C O+HF2xqV+f4LKOvUDPoX/C1uiHqgiI/NXQiaJjUMDu+vxxE4cv5bxMhOygFwVWv6 1V/afXl3WLUvjnbzOlO4ICmveJbgQHEuRQwqqclR43RNXgYcI0ZWS57sp2JPYRbB uamde/o+kC/AVvlCm073Ov1DZIdHgyY= -----END CERTIFICATE-----Generated at Sat Oct 11 15:09:08 2025 by rpki-client