$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/36c68fa7-e937-3cd6-a3fd-e98e18bb1b14.roa File: 36c68fa7-e937-3cd6-a3fd-e98e18bb1b14.roa (raw, json) Hash identifier: HFPddcU/N2azNCcQdFc39qXDwvjScpoVWtSq6RrAHOs= Subject key identifier: 01:D5:31:BD:72:58:9D:5A:E8:4F:9A:59:BA:B5:3D:42:5A:8C:D8:41 Certificate issuer: /CN=a0bcc13a-4107-4c4f-aab3-e4057364f637 Certificate serial: 010D0C9F4328584BA39D2824AC819706AF674A00 Authority key identifier: E7:7A:5D:45:EE:96:33:A2:31:74:54:91:4F:D0:FD:C3:4B:D1:6A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/36c68fa7-e937-3cd6-a3fd-e98e18bb1b14.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 46392 IP address blocks: 162.246.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:28:24:ac:81:97:06:af:67:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bcc13a-4107-4c4f-aab3-e4057364f637 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=3d69a893-4f6a-4768-a7a9-618a7bc2b093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:da:2c:1f:6f:9f:83:cc:60:c0:78:62:06: ec:e9:73:40:ce:79:a9:bd:6a:b7:04:a9:e4:2d:56: 24:41:f5:2c:c3:1a:6f:9f:d8:9b:37:84:0b:63:0c: c1:4f:fd:c8:b1:f4:72:dd:27:0a:95:51:73:7c:ff: 83:d1:c4:8c:76:65:7a:37:d6:30:dd:71:a8:1f:12: 3b:f8:75:d8:1f:56:d5:48:ea:d6:b1:2b:31:f7:aa: 5a:8a:d4:32:5d:d3:7d:27:1a:20:f6:60:28:06:8b: 18:61:0a:1d:b3:4b:16:10:9f:98:31:97:58:9d:85: 1f:d4:bc:c4:7e:c6:f7:1f:5f:31:fb:7d:5e:07:91: b6:93:17:40:bd:26:88:bb:38:c1:a9:52:0f:d5:cb: 3f:4a:f7:50:63:05:63:f8:e4:38:4c:a4:f2:d3:4c: 8a:45:6e:9b:74:93:77:c5:03:fe:bb:6b:b4:a2:4d: c2:77:5a:7e:a0:e4:9a:c5:4f:81:61:a7:5f:e9:4e: ae:2f:73:52:83:c0:39:68:5d:dd:d0:07:d4:3a:ed: 5f:eb:85:51:13:f0:d9:e0:3f:a9:99:ef:1b:19:81: 50:1f:81:37:ff:80:17:38:57:67:01:3d:0a:60:39: a9:8c:9c:e3:1b:05:47:80:08:e4:f6:e5:25:a2:64: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D5:31:BD:72:58:9D:5A:E8:4F:9A:59:BA:B5:3D:42:5A:8C:D8:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/36c68fa7-e937-3cd6-a3fd-e98e18bb1b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.crl X509v3 Authority Key Identifier: keyid:E7:7A:5D:45:EE:96:33:A2:31:74:54:91:4F:D0:FD:C3:4B:D1:6A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer sbgp-ipAddrBlock: critical IPv4: 162.246.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:78:53:39:ca:9f:ab:e0:e6:c5:fd:19:86:12:ab:18:a5:9e: 75:27:ab:57:bc:50:1d:e2:0a:d2:47:c7:e7:2f:e7:0f:6a:92: b7:bf:a2:6f:79:1a:63:7a:f3:b8:1b:73:93:18:f0:07:d5:17: dc:d1:2f:c7:9a:44:51:d0:4c:ef:b2:0b:8e:62:1b:00:35:62: 0b:16:95:03:4a:0e:b0:48:47:af:bc:50:08:fe:9b:f8:7d:ed: 1b:9b:2e:51:f4:ce:f5:6b:c5:5f:0c:3c:c1:d4:6b:37:bc:ed: 6a:bc:c7:5a:b4:38:b4:a0:74:b3:0a:0c:26:d1:ff:c2:de:3d: 22:86:b0:2a:37:fe:1f:82:91:26:db:36:ee:5b:7b:42:4e:4d: 30:5d:0f:8c:a1:84:6c:ce:34:0c:8d:3b:98:39:db:18:ec:ad: f2:01:22:3a:13:2c:0a:a0:9c:fc:91:94:7b:96:ef:14:ce:37: b7:71:12:77:e6:6e:db:7c:f5:3e:84:27:44:b3:29:cc:8a:67: 6b:07:e6:b2:67:be:8a:07:28:7d:ee:70:60:c9:fd:e0:c6:5a: 04:dc:4d:ec:72:41:16:74:cd:e9:0c:81:3b:c1:0f:fd:0f:4d: ba:e9:61:1d:3f:99:75:77:87:db:88:05:48:b9:5e:2b:54:77: f3:dd:61:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSgkrIGXBq9nSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBiY2MxM2EtNDEwNy00YzRmLWFhYjMtZTQwNTczNjRm NjM3MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk M2Q2OWE4OTMtNGY2YS00NzY4LWE3YTktNjE4YTdiYzJiMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL3aLB9vn4PMYMB4Ygbs6XNAznmpvWq3BKnk LVYkQfUswxpvn9ibN4QLYwzBT/3IsfRy3ScKlVFzfP+D0cSMdmV6N9Yw3XGoHxI7 +HXYH1bVSOrWsSsx96paitQyXdN9Jxog9mAoBosYYQods0sWEJ+YMZdYnYUf1LzE fsb3H18x+31eB5G2kxdAvSaIuzjBqVIP1cs/SvdQYwVj+OQ4TKTy00yKRW6bdJN3 xQP+u2u0ok3Cd1p+oOSaxU+BYadf6U6uL3NSg8A5aF3d0AfUOu1f64VRE/DZ4D+p me8bGYFQH4E3/4AXOFdnAT0KYDmpjJzjGwVHgAjk9uUlomS2JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHVMb1yWJ1a6E+aWbq1PUJajNhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMGJj YzEzYS00MTA3LTRjNGYtYWFiMy1lNDA1NzM2NGY2MzcvMzZjNjhmYTctZTkzNy0z Y2Q2LWEzZmQtZTk4ZTE4YmIxYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTBiY2MxM2EtNDEwNy00YzRmLWFh YjMtZTQwNTczNjRmNjM3L2EwYmNjMTNhLTQxMDctNGM0Zi1hYWIzLWU0MDU3MzY0 ZjYzNy5jcmwwHwYDVR0jBBgwFoAU53pdRe6WM6IxdFSRT9D9w0vRagIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMGJjYzEzYS00MTA3LTRjNGYtYWFiMy1lNDA1 NzM2NGY2MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB4UznKn6vg5sX9GYYSqxilnnUnq1e8UB3iCtJHx+cv5w9qkre/om95 GmN687gbc5MY8AfVF9zRL8eaRFHQTO+yC45iGwA1YgsWlQNKDrBIR6+8UAj+m/h9 7RubLlH0zvVrxV8MPMHUaze87Wq8x1q0OLSgdLMKDCbR/8LePSKGsCo3/h+CkSbb Nu5be0JOTTBdD4yhhGzONAyNO5g52xjsrfIBIjoTLAqgnPyRlHuW7xTON7dxEnfm btt89T6EJ0SzKcyKZ2sH5rJnvooHKH3ucGDJ/eDGWgTcTexyQRZ0zekMgTvBD/0P TbrpYR0/mXV3h9uIBUi5XitUd/PdYV0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:40:27 2025 by rpki-client