$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa File: 98962ffc-7137-39c6-954d-ea2ac9a1f644.roa (raw, json) Hash identifier: 23FkHY2g8If9bcrTWy6EaHC2xrA7KwChC8O6u1cmTCk= Subject key identifier: E1:F5:7B:51:3D:E9:D6:C7:A9:5C:6A:35:03:64:A7:5C:F7:73:E5:A1 Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584B16A16F8FA385DE0ED6792C80 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 29900 IP address blocks: 162.218.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6f:8f:a3:85:de:0e:d6:79:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=8d1d907a-0b8b-4885-8dd1-8b5632a4570a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:d1:c5:77:48:51:e7:d1:80:43:9c:7d:a9: c9:fd:96:41:6f:58:4e:e1:cd:25:13:e3:ee:69:65: d4:91:7d:d6:16:26:b8:79:80:00:4a:d0:f8:46:aa: 83:ba:df:66:48:ef:92:23:d4:ef:ce:94:f3:ad:26: 3a:d6:d3:dc:75:ec:16:bd:b2:31:2e:21:a0:78:ec: dd:60:cc:b5:d3:71:ac:ca:aa:8f:a8:bc:af:8e:54: 36:30:48:26:35:52:5c:46:50:84:57:0e:8f:45:16: 57:dc:6e:e0:06:c3:4a:d1:87:10:5c:f2:6a:4c:75: 66:51:77:ff:69:5c:bc:fa:48:f7:74:33:fd:6e:22: 4b:99:fe:a9:c7:e1:2e:b9:93:8a:e4:eb:c7:02:7d: 7c:06:37:db:f3:06:1b:d3:fa:a8:6d:69:54:49:0d: 5e:04:f4:ad:65:89:b7:2b:18:ba:58:bf:db:bd:bc: 64:f4:53:04:0d:c6:ef:f7:16:0a:8e:83:23:82:08: 96:6d:3d:bd:e5:cb:a3:35:66:d4:bf:29:07:0a:77: 7a:82:3f:87:bf:31:03:37:ee:cf:72:73:46:37:2a: 5b:63:34:05:31:b7:03:fd:b7:c4:d4:45:b8:fc:24: 63:71:c1:f7:d1:67:c2:19:a6:76:5e:db:92:40:fb: b4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F5:7B:51:3D:E9:D6:C7:A9:5C:6A:35:03:64:A7:5C:F7:73:E5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/98962ffc-7137-39c6-954d-ea2ac9a1f644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0b:29:f2:90:b3:55:21:1e:47:a9:c9:19:55:a0:78:a3:04: 13:64:67:25:38:ee:3b:6a:ec:8f:d4:03:f9:4b:c0:99:4e:31: 97:af:86:a0:c5:ff:7b:e9:df:f5:d4:46:7f:19:b9:30:58:4d: 32:f0:ad:a7:29:22:c2:78:5f:01:90:0c:1a:ed:6f:32:d6:b9: b6:f8:c2:ce:c9:d6:10:fd:7b:4a:16:0b:be:6e:3f:3a:e0:e3: 8a:5b:43:69:53:42:bd:09:7c:88:f1:8a:60:8f:be:be:9e:3f: d1:a2:c8:6b:fc:84:33:db:51:d9:3e:43:23:e6:95:9d:28:86: 60:e2:d1:22:22:c9:49:e9:97:5a:b9:27:5f:63:83:d2:42:f8: 6d:ae:4a:a3:52:57:2c:f6:74:e9:fa:7e:51:80:4d:96:17:a9: be:47:71:47:5b:6b:47:ba:c5:ba:11:53:ac:bb:28:a7:51:1f: 3b:33:2e:05:04:4b:ee:ef:bb:dc:0e:2d:ed:0e:d8:c4:b8:60: cf:83:62:f1:b5:34:65:8e:c3:70:bb:0d:86:d8:60:8d:a8:8d: 41:aa:4f:82:34:9e:4e:47:a0:a0:3b:5f:87:f2:e7:ad:36:ee: a2:ef:69:22:19:8f:ba:df:5f:03:5b:da:04:81:0c:af:3f:9e: e5:60:fb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoW+Po4XeDtZ5LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk OGQxZDkwN2EtMGI4Yi00ODg1LThkZDEtOGI1NjMyYTQ1NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8fRxXdIUefRgEOcfanJ/ZZBb1hO4c0lE+Pu aWXUkX3WFia4eYAAStD4RqqDut9mSO+SI9TvzpTzrSY61tPcdewWvbIxLiGgeOzd YMy103GsyqqPqLyvjlQ2MEgmNVJcRlCEVw6PRRZX3G7gBsNK0YcQXPJqTHVmUXf/ aVy8+kj3dDP9biJLmf6px+EuuZOK5OvHAn18Bjfb8wYb0/qobWlUSQ1eBPStZYm3 Kxi6WL/bvbxk9FMEDcbv9xYKjoMjggiWbT295cujNWbUvykHCnd6gj+HvzEDN+7P cnNGNypbYzQFMbcD/bfE1EW4/CRjccH30WfCGaZ2XtuSQPu0cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOH1e1E96dbHqVxqNQNkp1z3c+WhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvOTg5NjJmZmMtNzEzNy0z OWM2LTk1NGQtZWEyYWM5YTFmNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMLKfKQs1UhHkepyRlVoHijBBNkZyU47jtq7I/UA/lLwJlOMZevhqDF /3vp3/XURn8ZuTBYTTLwracpIsJ4XwGQDBrtbzLWubb4ws7J1hD9e0oWC75uPzrg 44pbQ2lTQr0JfIjximCPvr6eP9GiyGv8hDPbUdk+QyPmlZ0ohmDi0SIiyUnpl1q5 J19jg9JC+G2uSqNSVyz2dOn6flGATZYXqb5HcUdba0e6xboRU6y7KKdRHzszLgUE S+7vu9wOLe0O2MS4YM+DYvG1NGWOw3C7DYbYYI2ojUGqT4I0nk5HoKA7X4fy5602 7qLvaSIZj7rfXwNb2gSBDK8/nuVg+1E= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:38 2025 by rpki-client