$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa File: feab4e24-c427-3262-ae07-c36619833029.roa (raw, json) Hash identifier: xB5IWE5bkutFOcThlygXAMdnOYJ23zzlJEC7l4VBHhI= Subject key identifier: 62:19:71:B4:0E:20:27:4F:A5:15:87:59:7B:45:76:74:5D:02:8A:02 Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F4328584B2496C7EA9E77B20CC04DC700 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 46841 IP address blocks: 162.218.240.0/21 maxlen: 24 162.251.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c7:ea:9e:77:b2:0c:c0:4d:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=03c30fb3-a233-4be8-80ca-a54e5276a37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b9:5e:ca:fc:4a:30:36:3b:8c:77:98:99:e1: 3a:2c:17:31:a0:0d:a0:34:d8:ef:6f:39:b2:62:42: 46:0e:61:a9:2a:cc:59:04:97:17:dc:8b:b8:0d:3a: 95:6d:bb:05:b7:9d:11:cd:28:62:8b:40:b9:1c:22: 16:1e:81:bf:fd:a3:6a:6b:b4:f5:61:be:96:dd:f6: 39:bf:30:69:30:98:62:f6:eb:10:1f:0b:d2:5b:16: e2:e7:7a:d6:87:62:26:30:d0:0b:b8:51:62:9a:e4: a7:cf:74:d8:e1:12:4a:2e:b4:8d:4a:6d:67:51:9e: 09:46:25:a2:0c:52:2a:48:db:27:06:b7:d7:ce:05: 9a:d1:5e:d3:34:b1:d0:53:88:1d:46:86:d9:62:b0: db:50:9a:d6:d5:3d:ba:ac:bc:68:6d:b7:b6:50:e8: 8e:f5:d0:e9:96:0c:5d:85:33:d8:4d:d6:98:d0:97: b4:8d:fa:79:58:23:e2:0a:cd:b0:d9:14:85:68:29: ff:da:29:c3:9c:e9:ab:3e:c5:cc:66:c2:dc:6a:86: ff:84:d8:9b:2a:95:e3:69:d7:e4:14:15:34:43:7e: e2:8c:02:23:fb:7f:f3:c6:f9:c3:11:eb:a6:9f:a2: 94:d8:0d:5a:8f:73:1c:e2:77:73:32:7c:80:ef:f5: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:19:71:B4:0E:20:27:4F:A5:15:87:59:7B:45:76:74:5D:02:8A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: 162.218.240.0/21 162.251.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:45:52:e6:3a:57:d4:1d:45:5f:7e:96:7b:b2:ca:f3:8e:53: 98:61:b8:fb:98:8a:a2:32:ea:2d:30:db:a0:20:49:82:4e:e8: 1f:52:cb:fb:bd:6c:d1:b8:32:fd:e2:56:d6:d4:32:a9:0c:01: 1d:40:a3:2e:dd:87:c1:16:90:3d:a2:9f:90:91:33:28:10:e3: 85:28:83:24:7f:db:83:b8:45:79:e1:c5:3e:6f:49:7e:16:00: 13:75:5c:16:8c:4f:da:c1:2e:62:3c:ed:e3:76:98:39:93:ab: f6:34:2d:c9:58:15:66:54:d9:82:3d:de:8e:c2:19:bd:5b:1f: f9:bd:ea:6f:f2:08:1c:a9:48:1b:a0:3e:66:91:d5:b1:12:56: 6f:8a:1d:36:10:19:cb:5c:68:de:ba:b4:6c:6d:b0:06:f6:3a: 62:3c:22:a8:16:48:b9:9f:94:c5:be:9a:eb:b6:e8:bb:e3:ac: db:dd:a9:56:17:9b:a5:2d:b0:bb:96:0d:92:70:f1:6b:eb:28: 00:8a:bc:34:4a:dc:4e:84:4c:db:f6:2a:01:d9:07:1c:3e:c1: 81:e9:dc:41:a2:05:98:4f:eb:92:cd:cc:c8:a6:9c:8d:a7:d9: 77:fe:0e:ca:79:e4:91:2b:cd:6c:53:e0:8e:d5:48:25:d2:9a: 4b:b0:13:c2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsklsfqnneyDMBNxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MDNjMzBmYjMtYTIzMy00YmU4LTgwY2EtYTU0ZTUyNzZhMzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLleyvxKMDY7jHeYmeE6LBcxoA2gNNjvbzmy YkJGDmGpKsxZBJcX3Iu4DTqVbbsFt50RzShii0C5HCIWHoG//aNqa7T1Yb6W3fY5 vzBpMJhi9usQHwvSWxbi53rWh2ImMNALuFFimuSnz3TY4RJKLrSNSm1nUZ4JRiWi DFIqSNsnBrfXzgWa0V7TNLHQU4gdRobZYrDbUJrW1T26rLxobbe2UOiO9dDplgxd hTPYTdaY0Je0jfp5WCPiCs2w2RSFaCn/2inDnOmrPsXMZsLcaob/hNibKpXjadfk FBU0Q37ijAIj+3/zxvnDEeumn6KU2A1aj3Mc4ndzMnyA7/V73wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGIZcbQOICdPpRWHWXtFdnRdAooCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvZmVhYjRlMjQtYzQyNy0z MjYyLWFlMDctYzM2NjE5ODMzMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDotrwAwQD ovsAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADtFUuY6V9QdRV9+lnuyyvOOU5hhuPuYiqIy6i0w26AgSYJO 6B9Sy/u9bNG4Mv3iVtbUMqkMAR1Aoy7dh8EWkD2in5CRMygQ44UogyR/24O4RXnh xT5vSX4WABN1XBaMT9rBLmI87eN2mDmTq/Y0LclYFWZU2YI93o7CGb1bH/m96m/y CBypSBugPmaR1bESVm+KHTYQGctcaN66tGxtsAb2OmI8IqgWSLmflMW+muu26Lvj rNvdqVYXm6UtsLuWDZJw8WvrKACKvDRK3E6ETNv2KgHZBxw+wYHp3EGiBZhP65LN zMimnI2n2Xf+Dsp55JErzWxT4I7VSCXSmkuwE8I= -----END CERTIFICATE-----Generated at Wed Sep 10 12:59:54 2025 by rpki-client