$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa File: 295d7e62-9ba8-30e9-976f-7b86d221816e.roa (raw, json) Hash identifier: PKQr8MIgALNunu9ZBJLMdyG3TWQKxWlOh8KSGY2PsPU= Subject key identifier: D7:04:58:64:1D:EA:A3:CD:D4:22:8C:DC:BC:06:D8:4F:29:95:A9:03 Certificate issuer: /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Certificate serial: 010D0C9F4328584B92DCECEB66CEBDEE33267240 Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 162.219.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:ec:eb:66:ce:bd:ee:33:26:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=68e82fd4-5d3e-4645-aa93-2f38b80a768d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:06:fd:67:c7:5b:ec:cb:25:74:de:22:b1: d4:e5:bf:8b:e0:47:20:aa:fb:24:56:1e:e2:4b:c2: bc:71:0d:b6:a3:2a:74:8f:ec:a7:ec:1a:aa:49:85: 7d:b2:46:f6:51:36:11:6c:a3:e5:95:73:b7:e7:39: 2c:19:21:8c:1b:8c:7d:1e:79:3b:73:d3:37:df:66: 45:b5:8b:d6:58:ce:83:f0:a6:7d:60:ab:bb:d2:ce: 35:0f:48:41:bd:eb:86:62:a4:f5:02:ac:de:e1:e4: 03:45:ed:a4:6f:e0:6e:73:79:5f:cc:94:37:d5:f7: 8d:22:48:d2:89:a6:6f:95:9f:34:2c:f1:84:0c:46: 2a:ff:8b:51:de:98:8e:b4:79:bf:c3:c8:11:fc:6e: e1:bd:e3:51:90:66:09:90:54:38:2e:35:00:86:21: b9:0a:8f:f3:aa:aa:90:b2:d0:ad:9b:1c:20:f5:60: 37:cc:39:d7:c6:53:52:87:20:7f:d0:27:03:50:8a: ba:63:1a:8f:66:d6:e7:71:99:f8:a8:7b:4c:38:b0: 33:f7:3e:c4:87:16:de:3c:0b:44:c9:d2:61:ea:cd: ab:bf:e3:7f:70:fa:92:68:19:8e:71:55:41:00:82: 56:ae:e8:9c:67:d0:62:80:7f:b9:18:3d:1c:8b:a1: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:58:64:1D:EA:A3:CD:D4:22:8C:DC:BC:06:D8:4F:29:95:A9:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/295d7e62-9ba8-30e9-976f-7b86d221816e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl X509v3 Authority Key Identifier: keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer sbgp-ipAddrBlock: critical IPv4: 162.219.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5e:f4:6c:ba:61:0f:06:e2:c1:72:26:af:09:5b:a2:fd:1a: 35:91:a1:55:6d:5b:69:af:12:c5:ac:9b:ab:2c:ea:e1:05:48: 19:31:c6:7a:58:78:d3:f5:8f:2b:e9:12:fb:3d:74:54:85:1c: c2:ff:c6:8e:bb:17:19:cd:d4:09:11:7a:b1:d6:32:e3:d8:a5: 5f:4b:6d:ed:96:af:87:b8:56:08:bc:db:4b:40:54:34:4f:ac: e6:54:3a:a1:5c:7e:60:21:12:99:76:25:8d:36:3b:ed:d7:90: 93:a5:39:ff:36:8e:5a:f5:0c:be:e0:f0:6e:d7:2e:24:24:67: 9f:74:5b:36:4b:de:a1:40:29:83:5f:29:4a:d4:58:5f:42:55: cb:fe:8b:6d:d3:ab:b3:28:a4:23:2e:b6:64:c2:f5:40:0e:4a: 5d:c7:8c:80:8f:d0:c8:4e:5e:b3:73:e9:29:66:6a:16:fb:68: 6b:5b:5d:09:5b:ea:42:1f:1a:f8:1f:ec:ac:b9:70:e9:f9:73: 2f:65:35:36:b2:d8:8a:81:54:a7:ae:09:9d:50:5c:9d:8a:3e: 05:45:0e:21:89:52:ae:ca:22:78:25:72:21:67:c6:44:31:27: 78:26:ee:63:d9:cd:b5:a7:e3:1a:6b:b2:cb:de:06:a2:1c:f5: 07:eb:78:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3OzrZs697jMmckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0NzgtOTU4NDljYjc3 ZTVlMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NjhlODJmZDQtNWQzZS00NjQ1LWFhOTMtMmYzOGI4MGE3NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAgG/WfHW+zLJXTeIrHU5b+L4EcgqvskVh7i S8K8cQ22oyp0j+yn7BqqSYV9skb2UTYRbKPllXO35zksGSGMG4x9Hnk7c9M332ZF tYvWWM6D8KZ9YKu70s41D0hBveuGYqT1Aqze4eQDRe2kb+Buc3lfzJQ31feNIkjS iaZvlZ80LPGEDEYq/4tR3piOtHm/w8gR/G7hveNRkGYJkFQ4LjUAhiG5Co/zqqqQ stCtmxwg9WA3zDnXxlNShyB/0CcDUIq6YxqPZtbncZn4qHtMOLAz9z7EhxbePAtE ydJh6s2rv+N/cPqSaBmOcVVBAIJWruicZ9BigH+5GD0ci6GigwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcEWGQd6qPN1CKM3LwG2E8plakDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hNTdm NTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0OWNiNzdlNWUvMjk1ZDdlNjItOWJhOC0z MGU5LTk3NmYtN2I4NmQyMjE4MTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTU3ZjU0M2QtNTRmNy00ZGQ2LWE0 NzgtOTU4NDljYjc3ZTVlL2E1N2Y1NDNkLTU0ZjctNGRkNi1hNDc4LTk1ODQ5Y2I3 N2U1ZS5jcmwwHwYDVR0jBBgwFoAUzQLYTm7RMgTKPzjYIZZ9u+A0nZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hNTdmNTQzZC01NGY3LTRkZDYtYTQ3OC05NTg0 OWNiNzdlNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANe9Gy6YQ8G4sFyJq8JW6L9GjWRoVVtW2mvEsWsm6ss6uEFSBkxxnpY eNP1jyvpEvs9dFSFHML/xo67FxnN1AkRerHWMuPYpV9Lbe2Wr4e4Vgi820tAVDRP rOZUOqFcfmAhEpl2JY02O+3XkJOlOf82jlr1DL7g8G7XLiQkZ590WzZL3qFAKYNf KUrUWF9CVcv+i23Tq7MopCMutmTC9UAOSl3HjICP0MhOXrNz6Slmahb7aGtbXQlb 6kIfGvgf7Ky5cOn5cy9lNTay2IqBVKeuCZ1QXJ2KPgVFDiGJUq7KInglciFnxkQx J3gm7mPZzbWn4xprssveBqIc9QfreOA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:46:49 2025 by rpki-client