$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa File: 1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa (raw, json) Hash identifier: tBEPnJsVrBRf+8op6EKwrIhCh47oDsPbbx1TV4/Sgwo= Subject key identifier: 39:21:C1:F1:C7:5B:69:5B:D4:25:BB:E2:A4:D0:8D:C3:2E:3A:69:B5 Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584AF7EBE02642FDFD284C5BC280 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 23467 IP address blocks: 162.247.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e0:26:42:fd:fd:28:4c:5b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=70593470-163d-401d-a945-339ca8462c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6f:8e:ae:72:00:8c:08:a6:46:79:57:84:bd: d8:ca:c0:e5:ad:ea:9f:e2:c8:92:1b:90:27:b6:aa: 37:cf:9a:31:f8:d6:2c:13:d7:4e:ff:12:6d:cb:d1: 2b:6e:1a:38:63:ee:b4:f2:28:40:26:a8:7e:f4:3d: 93:24:51:d2:87:0b:7b:3f:f7:14:72:b7:c1:9c:e4: 9d:5f:9c:a1:a6:eb:18:f6:b4:db:37:b7:33:c7:af: 95:86:d5:9c:85:f5:6f:fe:bf:69:9d:2c:57:ba:04: df:18:f9:ae:12:48:71:e2:cd:ba:e1:c7:85:26:c1: 7b:84:49:f2:f7:59:9f:ae:ed:33:7a:39:6d:ec:80: 9a:d9:c6:0b:19:5c:63:67:59:c0:d6:3a:cc:a7:b4: 2b:2f:bd:34:e5:f7:35:23:ab:33:9b:cf:85:33:3e: 49:31:1e:41:16:e4:84:bd:b0:00:77:88:19:95:73: 7c:ba:8b:15:6c:a2:74:d0:7b:69:aa:45:3b:cd:48: f8:29:cd:23:9e:2c:29:92:fb:4d:7c:ef:8e:c3:2a: f7:a3:fc:c2:d4:b9:2f:9f:89:00:ff:fd:31:00:21: 8b:08:23:ae:cf:a9:67:c1:a4:09:37:8d:7f:c4:c0: da:f0:fa:e8:92:65:74:39:fb:f7:6e:60:63:80:47: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:C1:F1:C7:5B:69:5B:D4:25:BB:E2:A4:D0:8D:C3:2E:3A:69:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ef:3e:85:a3:ff:fd:0d:82:c3:9b:5b:b5:7a:6e:f4:72:1d: ae:15:f9:fa:f8:4e:43:f0:b3:cf:0c:31:f9:f0:09:78:7e:d3: 3d:07:70:69:e1:4b:8d:0d:c8:58:d4:87:6e:7e:83:b5:f4:2a: ca:0a:f6:ec:fd:6c:e5:a1:2e:6c:de:63:72:c5:1e:5f:d0:b9: 07:2c:b7:ae:1f:8e:1d:fb:60:73:af:88:5f:56:32:3c:ad:4e: 27:72:f5:b9:27:41:06:e3:75:23:18:78:53:a8:a1:39:3d:ca: b5:71:c6:cb:ce:9d:f5:44:47:6d:60:8e:61:f3:57:f8:77:1b: d6:11:92:07:16:93:6a:3e:3d:59:e8:b9:e7:67:f5:f8:1a:34: e8:0b:64:da:1a:34:7b:2f:33:76:67:b2:f5:f0:38:36:1f:af: 6c:cf:c3:04:ed:07:f6:32:65:63:86:ab:64:10:6f:ff:a8:fe: fb:ad:19:8f:91:4b:05:f4:35:10:2f:f7:99:65:c1:0d:36:23: 06:8c:c8:f8:3d:8e:04:90:25:4e:80:05:4e:37:5d:a8:d4:bd: ef:10:5f:0b:f7:4c:c8:72:09:c0:94:e3:8a:fe:ef:82:35:c5: 6a:c4:7b:7c:2e:60:44:a9:2f:d4:e3:2f:58:cc:5c:ea:97:74: 57:39:6f:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+AmQv39KExbwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NzA1OTM0NzAtMTYzZC00MDFkLWE5NDUtMzM5Y2E4NDYyYzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm+OrnIAjAimRnlXhL3YysDlreqf4siSG5An tqo3z5ox+NYsE9dO/xJty9Erbho4Y+608ihAJqh+9D2TJFHShwt7P/cUcrfBnOSd X5yhpusY9rTbN7czx6+VhtWchfVv/r9pnSxXugTfGPmuEkhx4s264ceFJsF7hEny 91mfru0zejlt7ICa2cYLGVxjZ1nA1jrMp7QrL7005fc1I6szm8+FMz5JMR5BFuSE vbAAd4gZlXN8uosVbKJ00HtpqkU7zUj4Kc0jniwpkvtNfO+Owyr3o/zC1Lkvn4kA //0xACGLCCOuz6lnwaQJN41/xMDa8ProkmV0Ofv3bmBjgEdnOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkhwfHHW2lb1CW74qTQjcMuOmm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMWJiNjkwY2QtMjM4OC0z ZWFmLTg4MWQtZjlkZTZhYjEyYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrvPoWj//0NgsObW7V6bvRyHa4V+fr4TkPws88MMfnwCXh+0z0HcGnh S40NyFjUh25+g7X0KsoK9uz9bOWhLmzeY3LFHl/QuQcst64fjh37YHOviF9WMjyt Tidy9bknQQbjdSMYeFOooTk9yrVxxsvOnfVER21gjmHzV/h3G9YRkgcWk2o+PVno uedn9fgaNOgLZNoaNHsvM3ZnsvXwODYfr2zPwwTtB/YyZWOGq2QQb/+o/vutGY+R SwX0NRAv95llwQ02IwaMyPg9jgSQJU6ABU43XajUve8QXwv3TMhyCcCU44r+74I1 xWrEe3wuYESpL9TjL1jMXOqXdFc5b4o= -----END CERTIFICATE-----Generated at Tue Oct 28 11:52:58 2025 by rpki-client