$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/70ca31bf-1312-3f49-957a-9bbae483f555.roa File: 70ca31bf-1312-3f49-957a-9bbae483f555.roa (raw, json) Hash identifier: d5Jg8aa+AAYzzgw2415DqPQ8eWtxJ8U64WebUA7Xbnc= Subject key identifier: 20:3E:EF:51:2A:18:9B:46:54:46:D0:65:A7:2F:2D:C4:CD:84:73:F6 Certificate issuer: /CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Certificate serial: 010D0C9F4328584BA9ECB49E0F2EDBFB68599F70 Authority key identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/70ca31bf-1312-3f49-957a-9bbae483f555.roa Signing time: Mon 27 Oct 2025 19:16:15 +0000 ROA not before: Mon 27 Oct 2025 19:16:15 +0000 ROA not after: Sun 25 Jan 2026 20:16:15 +0000 asID: 46687 IP address blocks: 162.210.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:ec:b4:9e:0f:2e:db:fb:68:59:9f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84 Validity Not Before: Oct 27 19:16:15 2025 GMT Not After : Jan 25 20:16:15 2026 GMT Subject: CN=5a3ff14d-5a51-4ea2-9695-51ef6243eb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:51:72:1b:e5:8b:15:9b:b2:a5:92:39:cc: 48:1a:16:e8:ae:8c:a6:06:f1:65:88:20:3f:51:f4: 27:cb:b2:9a:10:ce:bb:e8:7e:e0:4e:47:61:43:04: f5:e8:bb:43:46:66:a2:50:2f:28:e0:dc:5a:31:41: b0:e3:f5:f8:1b:92:b9:97:5d:65:81:36:c9:c8:84: 4a:f5:bd:8b:c2:79:7d:ad:5e:21:f8:f5:35:d8:42: bd:0e:74:f9:a6:60:fe:f5:c6:6e:bd:81:be:a7:dc: e0:9e:85:75:69:47:0c:00:71:f8:8d:5f:d5:09:15: 3d:12:4b:ea:b4:1d:d7:68:89:bf:d5:16:ef:3d:ec: 80:f9:3d:13:97:33:5b:99:f6:16:77:c9:82:15:d5: 14:21:ad:88:e5:e7:6e:74:ba:c5:93:a9:65:55:43: 23:80:58:d9:ac:42:16:1f:3f:08:b1:c5:89:cd:0e: 82:e0:06:ea:bd:b4:91:f3:cb:bd:b8:18:35:12:2a: e8:67:ce:ff:51:9f:c8:da:ce:88:12:06:42:a5:f1: bf:17:7b:c3:3f:da:1f:68:e0:1c:53:ab:89:1e:9a: ae:21:b6:2b:e4:e2:77:c2:01:14:c4:ae:41:d5:d4: 82:02:8d:7b:5b:d3:b4:bd:38:4a:0f:fd:c6:29:bd: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3E:EF:51:2A:18:9B:46:54:46:D0:65:A7:2F:2D:C4:CD:84:73:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/70ca31bf-1312-3f49-957a-9bbae483f555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl X509v3 Authority Key Identifier: keyid:9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer sbgp-ipAddrBlock: critical IPv4: 162.210.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:29:b4:cd:68:cf:fc:2a:5c:e1:8f:37:28:90:80:36:3a:c6: 95:6f:fe:03:11:86:30:96:ce:e5:e4:69:0d:f6:b8:c4:bb:d9: a0:4d:b4:ed:ca:c2:02:f8:d7:9d:a9:21:36:4c:6c:46:e0:60: dd:a4:e5:26:10:91:82:f3:cb:a2:99:9a:25:eb:b8:2a:cf:c7: 7a:41:b9:9c:13:d1:9b:04:51:f6:ec:ef:d6:51:70:82:78:fd: 32:bf:43:18:00:9f:a2:c6:43:d0:fa:6c:f2:1b:4b:21:91:8a: 7d:25:fc:10:76:3b:5d:58:c9:20:2b:db:13:d9:8f:d4:52:d7: ea:fb:6d:ed:3a:c9:66:57:2b:1a:89:d3:d8:bd:be:e4:0e:af: 1b:c3:71:6a:08:64:b2:2e:c2:28:68:b2:d9:c6:ed:c9:55:50: c8:95:96:38:a2:1f:5f:15:e9:3c:c9:30:c9:76:48:d2:e0:a6: ce:d6:b4:4e:56:a7:8e:90:3b:2d:21:0e:7e:10:ad:a3:2b:27: 51:5a:36:f5:29:ce:da:f1:5d:7e:bd:af:82:ca:c1:26:88:63: 33:4e:29:11:71:8e:ce:68:3b:30:01:ab:6a:6e:a8:7a:eb:2c: 38:7a:40:76:62:61:f0:ee:1f:b7:b1:7d:85:a3:95:39:c0:05: a9:dc:f4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEup7LSeDy7b+2hZn3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YmFlMjItMjgyYy00YzQyLWEwNGYtZGM2YjQyNTBm YTg0MB4XDTI1MTAyNzE5MTYxNVoXDTI2MDEyNTIwMTYxNVowLzEtMCsGA1UEAxMk NWEzZmYxNGQtNWE1MS00ZWEyLTk2OTUtNTFlZjYyNDNlYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwFRchvlixWbsqWSOcxIGhboroymBvFliCA/ UfQny7KaEM676H7gTkdhQwT16LtDRmaiUC8o4NxaMUGw4/X4G5K5l11lgTbJyIRK 9b2Lwnl9rV4h+PU12EK9DnT5pmD+9cZuvYG+p9zgnoV1aUcMAHH4jV/VCRU9Ekvq tB3XaIm/1RbvPeyA+T0TlzNbmfYWd8mCFdUUIa2I5edudLrFk6llVUMjgFjZrEIW Hz8IscWJzQ6C4AbqvbSR88u9uBg1EiroZ87/UZ/I2s6IEgZCpfG/F3vDP9ofaOAc U6uJHpquIbYr5OJ3wgEUxK5B1dSCAo17W9O0vThKD/3GKb3PqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA+71EqGJtGVEbQZacvLcTNhHP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRi YWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1MGZhODQvNzBjYTMxYmYtMTMxMi0z ZjQ5LTk1N2EtOWJiYWU0ODNmNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2U0YmFlMjItMjgyYy00YzQyLWEw NGYtZGM2YjQyNTBmYTg0L2NlNGJhZTIyLTI4MmMtNGM0Mi1hMDRmLWRjNmI0MjUw ZmE4NC5jcmwwHwYDVR0jBBgwFoAUmvow79tWKWX054SZrrHV1aeJXNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZi NDI1MGZhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8ptM1oz/wqXOGPNyiQgDY6xpVv/gMRhjCWzuXkaQ32uMS72aBNtO3K wgL4152pITZMbEbgYN2k5SYQkYLzy6KZmiXruCrPx3pBuZwT0ZsEUfbs79ZRcIJ4 /TK/QxgAn6LGQ9D6bPIbSyGRin0l/BB2O11YySAr2xPZj9RS1+r7be06yWZXKxqJ 09i9vuQOrxvDcWoIZLIuwihostnG7clVUMiVljiiH18V6TzJMMl2SNLgps7WtE5W p46QOy0hDn4QraMrJ1FaNvUpztrxXX69r4LKwSaIYzNOKRFxjs5oOzABq2puqHrr LDh6QHZiYfDuH7exfYWjlTnABanc9FQ= -----END CERTIFICATE-----Generated at Tue Nov 4 20:14:14 2025 by rpki-client