$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa File: ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa (raw, json) Hash identifier: ZECUVIU/NCWjoS7pTWlkoAXQnR8CGOpKz7DGBZm2EBU= Subject key identifier: B2:D3:EA:01:32:83:EB:05:4E:BD:08:C7:C5:B4:92:4D:05:58:07:6F Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F4328584B5571D6042B72869BD3B14400 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 162.216.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d6:04:2b:72:86:9b:d3:b1:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=9b9157e7-0f34-4ccc-a0f4-54ce8f39354e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:84:4c:86:36:cf:20:81:ed:18:fa:ef:c3: 2a:8c:65:dc:77:6a:e2:8e:28:c0:50:0f:ca:64:c0: 58:88:22:1d:df:89:ec:c4:51:3c:55:16:5d:d2:6a: b8:c0:70:0e:21:84:9b:af:ff:08:22:c6:e4:3f:0f: ef:29:91:52:60:c8:76:0c:fa:1c:da:4f:f8:48:61: 86:fd:9f:a2:4f:66:d0:b3:62:3e:08:01:bc:bc:b8: 5e:b7:3a:ef:ec:39:67:6f:25:a3:54:45:84:4c:e1: 83:a8:19:c6:1e:83:cb:cc:05:90:b2:90:ed:7e:24: 91:8d:38:b7:cf:d6:4f:70:67:2d:9b:f6:d8:27:43: e1:78:1f:28:94:9d:1a:60:76:36:41:44:36:98:35: 6e:77:c7:36:87:38:2c:55:e9:8e:cd:58:3f:a4:06: 75:3b:08:6d:13:7c:07:34:38:b8:d6:0f:a4:b2:21: d6:be:27:38:09:04:ec:7c:5e:3e:3c:34:69:b9:ba: 1f:bf:0e:f9:55:72:31:4a:6a:77:09:29:f7:e5:68: 83:4d:26:40:4e:6d:6e:2c:1d:35:5d:c6:0b:6f:2c: 0f:27:e1:c8:dd:46:53:a5:73:1c:04:5b:40:f2:05: fc:e4:6c:b6:5c:6f:86:61:f0:55:7d:77:c4:33:5b: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D3:EA:01:32:83:EB:05:4E:BD:08:C7:C5:B4:92:4D:05:58:07:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: 162.216.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3c:75:b4:6a:99:de:ac:95:49:1f:4e:d6:c8:46:48:ec:b3: 1b:73:67:81:d4:8f:44:4a:01:b4:93:e4:48:93:15:4a:8a:c4: 7d:73:91:45:81:d0:e5:34:2e:8d:db:a4:dc:8f:f3:d6:df:d4: 48:cf:32:b1:40:79:de:ee:bf:b0:38:ec:27:a5:40:04:05:79: b6:a5:40:02:e5:14:d1:9b:97:5d:64:c3:42:de:ce:84:50:d5: 87:28:f9:5c:fa:37:34:6e:4b:8d:b5:80:a6:71:e1:16:6e:80: b4:d1:96:f4:d7:0c:6e:f2:19:28:3d:e2:1a:1e:ca:85:8f:c5: fe:ca:10:be:86:ef:6a:9d:a5:e9:c8:5d:ab:74:dc:f1:f5:00: c4:47:ae:b4:52:18:aa:7c:c8:74:03:f3:88:d3:65:be:62:b8: 6e:b6:9f:a6:93:bf:71:47:d2:82:59:8b:71:ac:2b:f9:ba:40: 08:54:49:4b:ce:ed:27:78:e1:3a:d4:c6:e5:15:56:e4:3b:1e: 5f:50:a6:c4:17:24:ba:28:67:58:bd:ac:21:3f:cc:2a:26:1b: 35:c2:a1:45:aa:01:dd:95:c0:08:89:3b:7e:04:4b:e9:83:8a: 75:78:5a:2c:b1:83:08:dd:15:16:cd:d9:5c:ac:f8:83:a9:ec: 19:a8:6c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdYEK3KGm9OxRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk OWI5MTU3ZTctMGYzNC00Y2NjLWEwZjQtNTRjZThmMzkzNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhyETIY2zyCB7Rj678MqjGXcd2rijijAUA/K ZMBYiCId34nsxFE8VRZd0mq4wHAOIYSbr/8IIsbkPw/vKZFSYMh2DPoc2k/4SGGG /Z+iT2bQs2I+CAG8vLhetzrv7DlnbyWjVEWETOGDqBnGHoPLzAWQspDtfiSRjTi3 z9ZPcGctm/bYJ0PheB8olJ0aYHY2QUQ2mDVud8c2hzgsVemOzVg/pAZ1OwhtE3wH NDi41g+ksiHWvic4CQTsfF4+PDRpubofvw75VXIxSmp3CSn35WiDTSZATm1uLB01 XcYLbywPJ+HI3UZTpXMcBFtA8gX85Gy2XG+GYfBVfXfEM1taowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLT6gEyg+sFTr0Ix8W0kk0FWAdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvZmY4OWQ5YjQtZDNhOS0z ZTI5LTk1YTktMDkxNmFjNjZkNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw8dbRqmd6slUkfTtbIRkjssxtzZ4HUj0RKAbST5EiTFUqKxH1zkUWB 0OU0Lo3bpNyP89bf1EjPMrFAed7uv7A47CelQAQFebalQALlFNGbl11kw0LezoRQ 1Yco+Vz6NzRuS421gKZx4RZugLTRlvTXDG7yGSg94hoeyoWPxf7KEL6G72qdpenI Xat03PH1AMRHrrRSGKp8yHQD84jTZb5iuG62n6aTv3FH0oJZi3GsK/m6QAhUSUvO 7Sd44TrUxuUVVuQ7Hl9QpsQXJLooZ1i9rCE/zComGzXCoUWqAd2VwAiJO34ES+mD inV4WiyxgwjdFRbN2Vys+IOp7BmobGU= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:39 2025 by rpki-client