$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d6e41751-4fa5-3cfc-a136-433e29daf589.roa File: d6e41751-4fa5-3cfc-a136-433e29daf589.roa (raw, json) Hash identifier: syBuandT6ojlwid8rMhFsMZgWm7Ww4FRdTxEYXl0gFg= Subject key identifier: 72:DD:41:A4:2A:11:44:CD:EF:29:00:36:EE:7F:55:C6:F8:25:98:00 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B347830BAA765C1DF6C0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d6e41751-4fa5-3cfc-a136-433e29daf589.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 162.223.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b3:47:83:0b:aa:76:5c:1d:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=cced59c6-a55e-4de9-bf78-8a04b430dca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:ce:7d:c7:cf:51:57:5d:0f:95:f1:44:ab: ee:83:cc:3f:92:9c:34:1b:6c:6b:7f:c2:e2:db:5c: 9d:bc:81:e6:1d:14:90:1d:61:af:ea:29:90:9a:d6: d1:f5:db:5d:e7:37:9a:f4:cc:13:98:26:79:91:81: 89:03:29:d7:d3:44:74:e6:70:2e:e3:58:a2:03:a4: 10:1d:f1:2b:d9:bb:5a:d7:50:02:48:fb:ed:42:a3: 64:25:f8:04:43:7a:59:3c:25:68:5d:f0:5a:ef:7b: 2b:5b:13:a8:03:c7:79:cb:bd:48:ef:44:c6:7d:f4: 9d:50:6e:67:62:ba:77:ba:55:96:2e:df:78:ab:63: 1a:62:0d:15:3d:e3:12:7c:a0:b8:56:ad:7c:dd:a6: 34:d0:53:92:f2:14:6f:8e:f9:ce:b1:19:4c:95:ce: 07:8a:dd:d2:26:85:4f:ec:bd:97:ba:a3:45:af:dd: c3:66:9d:bc:c1:3b:36:b9:7d:39:6c:be:b7:b1:5c: 1b:04:83:4f:87:11:32:8f:90:fc:d5:ea:28:37:b1: 8a:fb:d7:26:77:2e:6a:44:b8:2c:c1:d1:96:df:f0: 9a:2b:52:8c:33:62:e7:f4:f4:f8:f1:4b:82:da:28: 9d:ed:25:4b:85:19:81:c9:76:c5:f6:c8:6e:7c:d2: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DD:41:A4:2A:11:44:CD:EF:29:00:36:EE:7F:55:C6:F8:25:98:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/d6e41751-4fa5-3cfc-a136-433e29daf589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 162.223.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4b:e0:34:d9:e9:10:2d:b9:c7:cb:82:56:4b:61:1f:37:45: ea:6b:d1:8b:be:8a:f0:e0:e5:a1:84:90:2e:bc:06:1b:00:8b: a4:15:9b:01:f3:19:8a:19:a3:9c:d9:f9:48:00:93:ee:e2:7d: e0:4c:32:90:ef:3e:37:98:e6:8c:cd:ba:55:99:87:c0:6c:9a: 7a:38:ec:73:cc:9f:1c:72:07:19:6e:6d:1e:7a:bb:4c:d2:a5: 77:ab:62:19:1a:59:ee:11:7b:cd:9b:50:a9:b4:39:81:7f:d9: ad:f8:e9:9c:11:de:a9:9b:b9:64:1f:b2:87:11:2a:4d:1c:f7: d4:ad:24:c9:a0:b5:a8:a7:40:f2:e9:a0:88:1e:54:2c:60:55: 70:6d:87:ae:02:f2:7d:9d:b1:8e:e2:88:b0:66:65:61:aa:3c: f3:b4:42:57:87:e7:8d:61:d0:d5:da:c7:48:08:f4:76:7e:27: f1:95:ec:c4:ec:64:41:97:ed:6f:69:6b:aa:38:ab:32:d1:50: b4:f2:9b:7f:06:c7:60:5f:08:41:95:28:ad:d3:51:a6:d9:92: 4c:4c:3c:e8:e0:77:0c:ab:97:c1:67:57:3f:df:a3:ea:d9:63: 7f:c8:c2:3f:6f:48:dd:dd:84:5a:ea:75:c4:c9:13:25:39:36: be:d8:92:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7NHgwuqdlwd9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Y2NlZDU5YzYtYTU1ZS00ZGU5LWJmNzgtOGEwNGI0MzBkY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPDOfcfPUVddD5XxRKvug8w/kpw0G2xrf8Li 21ydvIHmHRSQHWGv6imQmtbR9dtd5zea9MwTmCZ5kYGJAynX00R05nAu41iiA6QQ HfEr2bta11ACSPvtQqNkJfgEQ3pZPCVoXfBa73srWxOoA8d5y71I70TGffSdUG5n Yrp3ulWWLt94q2MaYg0VPeMSfKC4Vq183aY00FOS8hRvjvnOsRlMlc4Hit3SJoVP 7L2XuqNFr93DZp28wTs2uX05bL63sVwbBINPhxEyj5D81eooN7GK+9cmdy5qRLgs wdGW3/CaK1KMM2Ln9PT48UuC2iid7SVLhRmByXbF9shufNJ93wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLdQaQqEUTN7ykANu5/Vcb4JZgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZDZlNDE3NTEtNGZhNS0z Y2ZjLWExMzYtNDMzZTI5ZGFmNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot9lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhL4DTZ6RAtucfLglZLYR83Repr0Yu+ivDg5aGEkC68BhsAi6QVmwHz GYoZo5zZ+UgAk+7ifeBMMpDvPjeY5ozNulWZh8Bsmno47HPMnxxyBxlubR56u0zS pXerYhkaWe4Re82bUKm0OYF/2a346ZwR3qmbuWQfsocRKk0c99StJMmgtainQPLp oIgeVCxgVXBth64C8n2dsY7iiLBmZWGqPPO0QleH541h0NXax0gI9HZ+J/GV7MTs ZEGX7W9pa6o4qzLRULTym38Gx2BfCEGVKK3TUabZkkxMPOjgdwyrl8FnVz/fo+rZ Y3/Iwj9vSN3dhFrqdcTJEyU5Nr7YktI= -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:47 2025 by rpki-client