$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa File: c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa (raw, json) Hash identifier: kzetinqgcJHeyT85XgtWp6oVDU51V+5qN0Ommyx6PfY= Subject key identifier: 1E:42:F6:79:04:E2:D7:EB:E7:38:4E:C2:E5:CF:80:90:63:C2:33:C4 Certificate issuer: /CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a Certificate serial: 010D0C9F4328584AA85BAF5AD42DF940989B86A0 Authority key identifier: EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 395003 IP address blocks: 162.210.243.0/24 maxlen: 24 162.244.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:af:5a:d4:2d:f9:40:98:9b:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=9d17abe6-f60b-4985-a299-924acc1951c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:88:26:16:f7:4d:54:f3:f2:52:df:d1:ec: 57:86:25:1c:d4:81:79:c1:5f:a9:7a:94:16:37:6e: b5:5d:af:2a:57:40:b6:41:83:99:42:7e:48:3b:cf: 87:58:4b:1f:d0:8b:7a:b9:3b:47:e7:1f:c1:e1:a8: 98:84:46:b5:e5:e4:22:de:4c:d9:cd:99:12:d6:cb: 81:58:ff:7b:d7:17:9b:04:3f:87:55:0d:97:dc:66: fc:51:d8:99:0c:a1:6b:db:fa:f2:ea:ed:42:09:52: ca:fc:1a:7a:ff:7f:f8:5a:2b:10:a5:45:83:31:0c: 26:d6:7f:33:a7:8b:d2:24:c0:cb:d5:cd:ee:a3:cc: 59:d8:2c:f2:88:67:8f:bf:df:3e:e1:27:f3:4d:4c: 43:38:28:1b:97:d6:51:d6:06:7a:cf:a6:a0:17:f4: 0a:44:16:9a:12:d2:3b:e8:98:5c:1d:8c:87:1b:d4: 5a:10:a5:c8:80:fe:f5:f0:76:04:36:ef:42:7f:86: c6:0e:f3:3d:a4:a1:15:eb:86:6f:20:99:11:bd:d6: 16:94:18:59:31:ff:db:9c:8e:b8:9c:ce:c7:1d:1a: 81:a3:b0:ab:90:ff:32:f7:bd:71:ce:1f:74:41:56: 5c:e0:e0:b0:e6:aa:4c:1f:7d:82:d8:f1:42:45:80: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:42:F6:79:04:E2:D7:EB:E7:38:4E:C2:E5:CF:80:90:63:C2:33:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c8cc2f23-6ef4-3061-8389-a911f2bf39ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl X509v3 Authority Key Identifier: keyid:EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer sbgp-ipAddrBlock: critical IPv4: 162.210.243.0/24 162.244.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:4e:08:dc:b1:5e:29:32:bb:4d:36:eb:b1:f9:f2:d0:51:38: 18:92:8b:a0:00:52:ca:6d:2f:1d:37:b8:07:ae:68:78:40:79: 45:0a:70:6c:53:f4:5f:b8:1f:5a:be:02:a6:26:e3:e7:b9:ae: 82:f8:bc:11:33:bc:44:9a:ec:7d:05:cc:a2:b8:b8:7d:9d:21: 14:c7:b0:dc:ca:24:c8:f2:18:9b:39:5c:ae:1d:7e:1a:a2:1f: ff:7c:a5:59:bd:1a:9d:c8:ff:81:37:69:94:b3:c3:1f:64:5e: 87:fd:24:f6:f6:fc:c7:67:69:c2:9a:8b:8d:6d:3e:95:d1:7a: 47:74:04:64:40:40:64:7a:0a:9b:15:63:30:14:f3:47:3c:e8: 10:7b:f8:c9:44:ab:16:79:99:f4:5c:60:47:d1:fd:a7:c8:43: 83:47:4c:26:b5:89:e8:dc:49:d8:c8:e5:55:91:7f:78:91:ae: f3:65:89:32:74:96:4f:84:01:4c:b4:a0:52:17:e4:97:b0:e7: 97:90:91:f0:03:df:13:9e:94:3b:90:fd:ef:3d:88:56:e1:30: 04:4a:d4:88:14:77:8c:7d:a5:93:70:da:e8:c2:b4:e2:f2:f4: 86:44:86:46:3c:6b:e4:61:7e:84:8e:f7:d8:98:d4:cd:2d:d9: 50:e7:41:39 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqoW69a1C35QJibhqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ4M2Y1MjYtZGQ4Yi00Y2YzLWI1MDAtMDUyNWFkNWZh YzFhMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk OWQxN2FiZTYtZjYwYi00OTg1LWEyOTktOTI0YWNjMTk1MWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx86IJhb3TVTz8lLf0exXhiUc1IF5wV+pepQW N261Xa8qV0C2QYOZQn5IO8+HWEsf0It6uTtH5x/B4aiYhEa15eQi3kzZzZkS1suB WP971xebBD+HVQ2X3Gb8UdiZDKFr2/ry6u1CCVLK/Bp6/3/4WisQpUWDMQwm1n8z p4vSJMDL1c3uo8xZ2CzyiGePv98+4SfzTUxDOCgbl9ZR1gZ6z6agF/QKRBaaEtI7 6JhcHYyHG9RaEKXIgP718HYENu9Cf4bGDvM9pKEV64ZvIJkRvdYWlBhZMf/bnI64 nM7HHRqBo7CrkP8y971xzh90QVZc4OCw5qpMH32C2PFCRYDsDQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB5C9nkE4tfr5zhOwuXPgJBjwjPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZDgz ZjUyNi1kZDhiLTRjZjMtYjUwMC0wNTI1YWQ1ZmFjMWEvYzhjYzJmMjMtNmVmNC0z MDYxLTgzODktYTkxMWYyYmYzOWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmQ4M2Y1MjYtZGQ4Yi00Y2YzLWI1 MDAtMDUyNWFkNWZhYzFhL2ZkODNmNTI2LWRkOGItNGNmMy1iNTAwLTA1MjVhZDVm YWMxYS5jcmwwHwYDVR0jBBgwFoAU6tWZqteBYox/bUT22de2zRVarrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZDgzZjUyNi1kZDhiLTRjZjMtYjUwMC0wNTI1 YWQ1ZmFjMWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAotLzAwQA ovSNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKlOCNyxXikyu00267H58tBROBiSi6AAUsptLx03uAeuaHhA eUUKcGxT9F+4H1q+AqYm4+e5roL4vBEzvESa7H0FzKK4uH2dIRTHsNzKJMjyGJs5 XK4dfhqiH/98pVm9Gp3I/4E3aZSzwx9kXof9JPb2/MdnacKai41tPpXRekd0BGRA QGR6CpsVYzAU80c86BB7+MlEqxZ5mfRcYEfR/afIQ4NHTCa1iejcSdjI5VWRf3iR rvNliTJ0lk+EAUy0oFIX5Jew55eQkfAD3xOelDuQ/e89iFbhMARK1IgUd4x9pZNw 2ujCtOLy9IZEhkY8a+RhfoSO99iY1M0t2VDnQTk= -----END CERTIFICATE-----Generated at Sun Jul 27 17:28:09 2025 by rpki-client