$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa File: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (raw, json) Hash identifier: oPqiIEqF5rLLE/pMQp7WLB4BlhbElFLj+S+gTb8H/R4= Subject key identifier: BE:91:40:01:98:32:81:BB:B4:45:83:54:A9:78:F4:ED:04:32:DA:25 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584B8BE225E86C09C884D8CF1A00 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 9009 IP address blocks: 162.254.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:25:e8:6c:09:c8:84:d8:cf:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=96c8f3fd-aa6a-41f7-ae68-44c207633571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6f:30:c0:e5:e5:94:af:4d:4e:2d:62:a2:96: 94:f5:71:07:bc:ba:d0:f6:17:e9:01:24:0d:0d:5a: 25:00:2e:d4:a7:a7:18:a1:c5:40:dd:65:5f:d9:13: d6:59:3e:a9:07:32:a7:8c:7f:5e:1b:63:d5:66:3b: 88:a1:e8:c8:fa:5c:4c:26:e5:6b:57:f0:40:19:65: 10:a2:30:1a:c2:bb:be:c0:6b:7e:17:14:53:e5:a7: 6b:69:2a:28:3e:cc:cf:1e:84:d6:63:ba:67:98:35: 57:fb:2d:5b:6e:1c:b7:77:14:3f:a2:22:b1:f8:32: 16:f3:12:d1:b8:ed:14:63:68:91:49:01:2b:b0:21: 78:0d:60:33:4c:53:c4:30:2f:c6:76:92:23:7e:0d: 04:0a:3e:69:ea:6f:ec:a8:33:4a:aa:99:f8:35:31: bd:a4:86:b4:1c:ab:4a:ef:d6:cc:8b:89:69:e8:71: 0a:e8:d9:af:b0:26:83:14:a5:d7:12:74:ba:17:e0: 51:85:ba:e6:97:94:b5:cb:d3:6d:66:22:6d:f3:c8: 91:e1:20:74:16:30:2b:c7:77:12:da:67:45:69:6e: 21:87:b4:68:8c:ca:cd:20:c2:09:82:36:41:2a:1b: 08:eb:a1:4b:cc:03:ac:17:9c:ae:b0:93:d2:7d:26: f0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:91:40:01:98:32:81:BB:B4:45:83:54:A9:78:F4:ED:04:32:DA:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f2:28:b8:1c:26:41:5b:cc:f7:92:46:ef:bd:76:b4:18:b1: 6b:b3:82:eb:95:6e:12:8c:2d:79:62:4f:7d:52:ba:49:0d:92: 56:45:7a:1b:5d:ed:71:33:70:de:4e:87:21:60:04:80:3e:3f: 74:de:c6:11:b8:7d:58:77:4b:a0:2c:73:fa:8a:d7:48:2b:48: c0:c2:f7:18:2a:4e:55:16:3c:9e:1e:1b:e2:a5:2e:0b:26:8a: 26:54:76:09:30:da:de:4a:e1:af:8b:dc:66:b5:fa:f4:3b:da: ff:6a:98:b5:27:38:b7:8e:5a:a5:1b:0e:fb:26:88:8f:c7:9c: ea:07:cd:64:4c:bd:6a:13:4f:a9:23:9e:4e:42:fe:9a:00:3b: 38:5c:d3:1c:85:d2:a6:16:30:5c:17:2c:01:6e:53:c0:9c:6a: 2d:26:3f:ce:d2:d1:a1:b8:63:ae:34:30:fc:34:4d:76:d9:bf: ab:92:c1:f0:53:e3:a6:02:9d:8c:4a:af:0a:36:2e:07:f0:e8: 34:1b:db:bc:aa:1c:fc:60:73:e9:7d:11:be:40:be:fa:08:0c: e0:b8:eb:67:5e:4b:41:e3:21:4a:cf:2a:7b:97:d3:fe:bf:e6: dd:37:86:46:cd:d6:9b:91:f7:aa:32:0c:d9:b5:c6:6f:28:fc: 22:77:b3:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iXobAnIhNjPGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk OTZjOGYzZmQtYWE2YS00MWY3LWFlNjgtNDRjMjA3NjMzNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW8wwOXllK9NTi1iopaU9XEHvLrQ9hfpASQN DVolAC7Up6cYocVA3WVf2RPWWT6pBzKnjH9eG2PVZjuIoejI+lxMJuVrV/BAGWUQ ojAawru+wGt+FxRT5adraSooPszPHoTWY7pnmDVX+y1bbhy3dxQ/oiKx+DIW8xLR uO0UY2iRSQErsCF4DWAzTFPEMC/GdpIjfg0ECj5p6m/sqDNKqpn4NTG9pIa0HKtK 79bMi4lp6HEK6NmvsCaDFKXXEnS6F+BRhbrml5S1y9NtZiJt88iR4SB0FjArx3cS 2mdFaW4hh7RojMrNIMIJgjZBKhsI66FLzAOsF5yusJPSfSbwzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6RQAGYMoG7tEWDVKl49O0EMtolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNjhlNGM2M2MtZjNkOC0z NzYyLWJhMWQtYTAyMDUzYTA2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3yKLgcJkFbzPeSRu+9drQYsWuzguuVbhKMLXliT31SukkNklZFehtd 7XEzcN5OhyFgBIA+P3TexhG4fVh3S6Asc/qK10grSMDC9xgqTlUWPJ4eG+KlLgsm iiZUdgkw2t5K4a+L3Ga1+vQ72v9qmLUnOLeOWqUbDvsmiI/HnOoHzWRMvWoTT6kj nk5C/poAOzhc0xyF0qYWMFwXLAFuU8Ccai0mP87S0aG4Y640MPw0TXbZv6uSwfBT 46YCnYxKrwo2Lgfw6DQb27yqHPxgc+l9Eb5AvvoIDOC462deS0HjIUrPKnuX0/6/ 5t03hkbN1puR96oyDNm1xm8o/CJ3s70= -----END CERTIFICATE-----Generated at Sun Oct 26 20:25:57 2025 by rpki-client