$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa File: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (raw, json) Hash identifier: 5LEYqOtIMFKhsegGISIgoukgf3mRSp7kPpb+mQ9oqJs= Subject key identifier: 84:7A:A1:66:D4:91:72:65:5E:F2:9D:AE:07:CD:05:0E:3A:4F:B3:3C Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F4328584B25FC33B183BE713E288FD0C0 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 41458 IP address blocks: 162.210.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:33:b1:83:be:71:3e:28:8f:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=0eb665e5-7003-465d-b7e3-73c504c89c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:5a:ca:7e:72:bb:6d:9c:66:15:5a:8e:14: 99:cf:2b:be:5e:bd:be:30:6e:2d:04:8f:09:19:0e: 65:09:1f:44:64:be:78:c8:02:7b:2f:fb:b2:78:de: 80:e1:5b:06:a2:90:3c:ec:a1:f5:ff:61:32:46:f4: c4:be:32:b9:d3:58:2e:f4:4f:e9:92:eb:4f:b9:bc: 18:d0:33:bc:9f:a0:b3:b8:e1:ae:09:7a:e8:84:4d: 7b:ea:93:4e:38:8d:e2:57:d9:a0:e3:da:a6:4a:92: 95:51:c1:71:9b:6f:92:25:33:48:fd:20:53:c3:1a: 51:80:20:22:a7:5e:97:85:16:39:e6:f3:da:f5:97: 98:fd:01:1b:1c:f7:ee:42:64:c8:72:10:c3:a6:05: ff:a1:9d:74:69:bd:ac:93:f2:3b:92:81:7f:7e:96: 52:dd:dc:64:41:88:70:76:23:86:62:5a:5e:f6:07: cc:40:dd:d3:ab:16:bc:3b:3e:d5:aa:33:50:10:9d: 50:b7:8b:10:44:2c:ae:c9:47:f3:d8:fc:91:06:33: 23:e0:6b:ab:36:fa:c5:da:d5:4a:8d:f0:67:63:c6: 4e:9f:8b:81:45:0e:f3:ea:75:e1:08:62:3b:e8:bd: 9a:78:03:f6:05:1f:0f:7f:91:8d:1b:b0:62:6d:18: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:A1:66:D4:91:72:65:5E:F2:9D:AE:07:CD:05:0E:3A:4F:B3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/97b8c640-fb2c-369e-90d7-90ade1142479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: 162.210.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:56:76:89:64:8f:2e:7b:c1:24:86:5f:f8:82:aa:c6:3d:44: c8:59:4b:57:4d:81:07:2e:69:96:7c:68:be:1a:20:01:74:19: 11:46:f0:d3:d3:b2:75:f5:f1:34:54:47:60:09:04:21:b2:c2: 47:d0:72:f6:10:c7:75:fe:04:22:36:e3:f6:3c:78:43:66:ba: 42:03:84:56:1f:b4:7f:8e:83:bc:bc:74:02:e7:03:a8:c7:71: 89:b2:f1:ff:cb:57:28:a3:09:f3:58:4b:a5:84:0c:0b:7a:6d: 3c:2e:07:55:14:da:71:a0:e5:8e:da:21:d8:b9:2f:28:cd:a8: 32:31:e2:cc:a9:30:1c:09:09:7c:b8:0f:02:bb:6d:29:ac:a1: 79:15:5c:11:54:56:39:b7:e8:37:b0:ad:6c:1e:a6:2a:c5:a2: c9:56:28:09:17:12:be:f8:69:3e:f6:55:40:6d:96:ca:3e:96: 3b:10:6a:93:71:a8:39:16:42:df:69:59:65:73:aa:f1:b8:03: 27:cb:68:be:64:8e:b3:2b:32:75:78:96:31:f0:55:28:d7:1a: 07:3d:5e:24:b7:2d:70:d7:8e:a5:5f:16:89:f3:58:da:36:25: f8:1b:a3:4e:ac:af:39:11:46:fa:78:cd:ab:06:84:55:3e:53: 76:22:83:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DOxg75xPiiP0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MGViNjY1ZTUtNzAwMy00NjVkLWI3ZTMtNzNjNTA0Yzg5YzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3Zayn5yu22cZhVajhSZzyu+Xr2+MG4tBI8J GQ5lCR9EZL54yAJ7L/uyeN6A4VsGopA87KH1/2EyRvTEvjK501gu9E/pkutPubwY 0DO8n6CzuOGuCXrohE176pNOOI3iV9mg49qmSpKVUcFxm2+SJTNI/SBTwxpRgCAi p16XhRY55vPa9ZeY/QEbHPfuQmTIchDDpgX/oZ10ab2sk/I7koF/fpZS3dxkQYhw diOGYlpe9gfMQN3Tqxa8Oz7VqjNQEJ1Qt4sQRCyuyUfz2PyRBjMj4GurNvrF2tVK jfBnY8ZOn4uBRQ7z6nXhCGI76L2aeAP2BR8Pf5GNG7BibRgBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR6oWbUkXJlXvKdrgfNBQ46T7M8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvOTdiOGM2NDAtZmIyYy0z NjllLTkwZDctOTBhZGUxMTQyNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxWdolkjy57wSSGX/iCqsY9RMhZS1dNgQcuaZZ8aL4aIAF0GRFG8NPT snX18TRUR2AJBCGywkfQcvYQx3X+BCI24/Y8eENmukIDhFYftH+Og7y8dALnA6jH cYmy8f/LVyijCfNYS6WEDAt6bTwuB1UU2nGg5Y7aIdi5LyjNqDIx4sypMBwJCXy4 DwK7bSmsoXkVXBFUVjm36DewrWwepirFoslWKAkXEr74aT72VUBtlso+ljsQapNx qDkWQt9pWWVzqvG4AyfLaL5kjrMrMnV4ljHwVSjXGgc9XiS3LXDXjqVfFonzWNo2 Jfgbo06srzkRRvp4zasGhFU+U3YigwY= -----END CERTIFICATE-----Generated at Wed Sep 17 00:47:16 2025 by rpki-client