$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa File: 5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa (raw, json) Hash identifier: A9i92wGDAKK8KX7+Tzh1bIslvL3s8CAXwQolB8Ny2bw= Subject key identifier: FA:59:78:31:12:32:D2:69:E1:0A:03:0F:BD:DA:18:AD:70:32:8C:96 Certificate issuer: /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Certificate serial: 010D0C9F4328584B5E8534A515777C8F021AD100 Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa Signing time: Tue 30 Sep 2025 19:02:05 +0000 ROA not before: Tue 30 Sep 2025 19:02:05 +0000 ROA not after: Mon 29 Dec 2025 20:02:05 +0000 asID: 43685 IP address blocks: 162.246.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:85:34:a5:15:77:7c:8f:02:1a:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb Validity Not Before: Sep 30 19:02:05 2025 GMT Not After : Dec 29 20:02:05 2025 GMT Subject: CN=e9998ab3-db58-4e8c-b466-f9516387068f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:ff:6c:c2:8c:ec:04:3d:01:d0:c1:13:a0: 36:25:dc:ea:d1:0b:dc:40:92:3a:48:d5:e7:ad:a8: 50:fc:12:f3:85:ef:94:a4:b4:48:e2:b2:4f:c3:53: 0c:7a:e7:5a:96:66:25:91:e8:12:99:fc:de:d5:88: c8:2b:86:f4:a4:70:8f:80:57:58:7c:16:07:c6:94: 52:d8:c8:96:6f:0f:ef:e6:e0:27:90:37:f1:74:ad: ca:63:a3:0a:40:03:14:70:97:0e:0e:46:2d:31:a2: 8b:11:4a:13:2d:44:e3:00:92:bd:f3:03:29:19:ea: 37:a9:37:ff:87:83:83:66:d5:6c:38:5b:4b:21:27: cb:68:c9:af:66:d1:54:91:38:85:d2:98:e8:13:83: 1b:8c:39:cf:e4:74:68:26:70:a5:3c:1f:df:d7:44: 24:d3:b3:8c:f2:ce:3a:9c:28:8e:56:1f:8d:c7:ce: b5:23:ed:2a:3f:3c:bb:6a:b5:20:6d:cc:f7:50:8f: 25:57:1b:c6:87:7f:c0:3e:e7:4f:c4:93:d9:ff:8c: 8e:a2:02:a9:bc:4b:77:6e:12:1b:6b:d2:7b:cd:ed: e0:82:8a:73:08:0c:18:51:36:9a:1d:22:08:72:9e: 7a:ea:aa:18:05:34:33:75:7a:43:11:52:3a:ba:9a: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:59:78:31:12:32:D2:69:E1:0A:03:0F:BD:DA:18:AD:70:32:8C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl X509v3 Authority Key Identifier: keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer sbgp-ipAddrBlock: critical IPv4: 162.246.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:57:40:dd:86:c8:fd:74:ec:3c:e8:d4:cc:59:f7:2e:40:29: e9:64:a4:97:3e:25:08:4e:f8:c1:6a:37:c8:d3:e2:c2:9a:14: e4:f5:5b:74:fb:17:4a:33:de:33:da:ee:de:4f:42:54:05:26: 8e:80:56:36:b7:72:cc:06:9b:9e:88:6b:15:fd:2b:15:1a:26: 99:d9:c2:14:72:f7:14:7c:65:85:c3:bd:66:a9:91:f7:d6:b9: d5:45:aa:ca:65:34:14:ff:2a:19:1f:4f:1f:41:9d:39:ec:1c: 7f:ef:de:86:80:90:91:9b:ed:ca:99:3c:71:c0:b4:82:93:be: 9d:62:c7:34:f3:dd:94:e0:3c:40:e4:6f:43:a5:b5:0e:e9:dc: e6:1c:fe:ce:be:6c:ff:65:d3:32:5c:72:62:2c:ec:fc:06:81: 8d:1b:e6:91:23:22:9d:9b:1a:7f:13:b6:a0:2f:8f:d8:4d:85: 1a:11:7d:4e:cf:11:62:2c:55:a5:bd:2d:72:91:6e:70:c9:b0: 02:b0:70:03:ab:81:54:59:f0:2c:af:f4:0e:d9:f5:60:3c:51: e7:ea:b7:fc:09:78:9e:b0:db:35:5d:fe:f1:74:e9:f4:2f:93: c2:c5:c4:d0:9e:b8:23:a9:29:36:55:8f:8a:70:a2:a4:52:ea: 41:88:fd:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtehTSlFXd8jwIa0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJjYTNiMTYtZjQ3MC00Mjg3LThkYjktYjI4ZTA2Njdl ZmRiMB4XDTI1MDkzMDE5MDIwNVoXDTI1MTIyOTIwMDIwNVowLzEtMCsGA1UEAxMk ZTk5OThhYjMtZGI1OC00ZThjLWI0NjYtZjk1MTYzODcwNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw//bMKM7AQ9AdDBE6A2Jdzq0QvcQJI6SNXn rahQ/BLzhe+UpLRI4rJPw1MMeudalmYlkegSmfze1YjIK4b0pHCPgFdYfBYHxpRS 2MiWbw/v5uAnkDfxdK3KY6MKQAMUcJcODkYtMaKLEUoTLUTjAJK98wMpGeo3qTf/ h4ODZtVsOFtLISfLaMmvZtFUkTiF0pjoE4MbjDnP5HRoJnClPB/f10Qk07OM8s46 nCiOVh+Nx861I+0qPzy7arUgbcz3UI8lVxvGh3/APudPxJPZ/4yOogKpvEt3bhIb a9J7ze3ggopzCAwYUTaaHSIIcp566qoYBTQzdXpDEVI6upq+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpZeDESMtJp4QoDD73aGK1wMoyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNh M2IxNi1mNDcwLTQyODctOGRiOS1iMjhlMDY2N2VmZGIvNTA4M2YzYjgtYzE3Mi0z Y2JlLWE3ZDUtNzdjMzA0YzJhNmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJjYTNiMTYtZjQ3MC00Mjg3LThk YjktYjI4ZTA2NjdlZmRiL2EyY2EzYjE2LWY0NzAtNDI4Ny04ZGI5LWIyOGUwNjY3 ZWZkYi5jcmwwHwYDVR0jBBgwFoAUSt1qgiobNX7xW4Ql5YRVUPlCaK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmNhM2IxNi1mNDcwLTQyODctOGRiOS1iMjhl MDY2N2VmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxXQN2GyP107Dzo1MxZ9y5AKelkpJc+JQhO+MFqN8jT4sKaFOT1W3T7 F0oz3jPa7t5PQlQFJo6AVja3cswGm56IaxX9KxUaJpnZwhRy9xR8ZYXDvWapkffW udVFqsplNBT/KhkfTx9BnTnsHH/v3oaAkJGb7cqZPHHAtIKTvp1ixzTz3ZTgPEDk b0OltQ7p3OYc/s6+bP9l0zJccmIs7PwGgY0b5pEjIp2bGn8TtqAvj9hNhRoRfU7P EWIsVaW9LXKRbnDJsAKwcAOrgVRZ8Cyv9A7Z9WA8Uefqt/wJeJ6w2zVd/vF06fQv k8LFxNCeuCOpKTZVj4pwoqRS6kGI/SE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:36 2025 by rpki-client