$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa File: b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa (raw, json) Hash identifier: qZsdC2FOSRA9XtLHQuy1Lf2HHO7lReTL6Hw9ZfoGBKg= Subject key identifier: 70:DF:CF:5D:B1:AA:02:30:E0:3F:39:CE:BD:4A:B5:54:F6:D3:06:10 Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Certificate serial: 010D0C9F4328584B9E07BB72F48C2077638A4700 Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 19257 IP address blocks: 162.222.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:bb:72:f4:8c:20:77:63:8a:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=7c2e5a22-ac1b-47a8-bcb1-eca8366d91b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:64:cd:6d:c0:29:b4:ce:b4:13:40:ed:58:9b: 2f:5a:cb:4c:87:25:10:e7:f1:25:0b:39:b1:84:34: 7f:dd:90:a8:3c:5c:d5:ce:3a:bb:52:ab:c7:c9:d2: 52:3a:e6:d2:cc:15:fe:ec:d0:d4:c6:7b:6a:98:56: dc:5c:36:cb:0a:1a:23:24:bf:9f:84:bb:98:cd:64: 71:be:7d:e4:d6:84:7f:02:82:80:cc:5e:d9:c9:d2: 41:e8:39:ab:34:33:c7:90:d5:09:cf:c7:4d:c5:e5: 81:34:96:ed:f3:65:9d:e8:a3:1d:a7:e6:80:62:c8: a1:13:24:8f:f4:b4:73:b2:a4:48:5e:85:e8:c9:ad: c9:9a:00:81:26:0a:5f:76:b6:af:19:9c:78:f9:1f: 76:ab:6a:35:3b:55:61:3c:cb:bd:86:b3:1a:31:aa: 7a:aa:e0:cb:6e:a0:4c:71:25:16:8f:83:60:e9:79: 71:7e:bf:c4:b8:ce:96:75:6c:17:c7:c7:82:ed:50: 6c:d3:83:69:37:06:00:fc:2c:80:9d:1e:2b:18:d6: e0:46:60:e9:4e:4e:79:41:0b:08:41:7f:8a:2f:56: 84:d8:37:37:3f:6d:a9:06:76:1e:f7:61:ad:6c:5f: 0c:d7:da:57:95:2e:01:68:8a:97:e7:22:0f:9d:ba: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DF:CF:5D:B1:AA:02:30:E0:3F:39:CE:BD:4A:B5:54:F6:D3:06:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl X509v3 Authority Key Identifier: keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer sbgp-ipAddrBlock: critical IPv4: 162.222.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:da:81:0d:28:12:21:d5:8a:3a:bb:85:3a:11:42:43:69:11: 3d:14:a7:cb:4a:2a:a8:6b:3c:1e:7c:92:2e:7d:24:e0:09:35: 40:b6:30:a5:cc:52:cf:90:fc:5a:b6:23:e8:23:93:9f:41:05: 7e:4c:2a:90:8c:1b:17:2b:3d:d7:2a:d3:68:75:a7:f0:4a:43: 1a:48:7c:bd:24:e1:b6:45:d5:db:f2:54:78:f4:c1:5d:8c:3f: 05:28:bb:70:ad:e5:33:7d:57:29:62:47:7a:e2:c3:c6:b9:d6: cf:e7:de:7e:c7:3a:4e:3a:11:dc:6b:56:b2:fc:72:08:39:88: 0e:c5:95:1c:b4:2a:9e:3d:47:92:4f:10:9b:88:b7:df:e3:13: 5b:fe:24:8b:27:d4:67:e0:b1:ec:7b:80:22:99:05:0d:7b:09: 1d:48:cd:10:eb:47:ee:c1:0e:20:5a:04:87:36:3c:e5:ed:ce: 12:02:f5:2d:9a:78:25:b5:55:cb:76:d7:04:1a:aa:0f:99:19: 1c:53:38:09:5f:1b:91:a6:2b:e5:d0:8e:9f:b5:e9:0e:6d:9c: 3b:b8:1e:9f:60:4b:cd:e2:66:cb:3c:39:94:94:dd:93:99:13: 93:8d:fe:70:bb:b3:88:c2:6c:7d:66:1b:1b:28:62:3b:fa:25: 49:f6:3d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7ty9Iwgd2OKRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0 MjhhMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk N2MyZTVhMjItYWMxYi00N2E4LWJjYjEtZWNhODM2NmQ5MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2TNbcAptM60E0DtWJsvWstMhyUQ5/ElCzmx hDR/3ZCoPFzVzjq7UqvHydJSOubSzBX+7NDUxntqmFbcXDbLChojJL+fhLuYzWRx vn3k1oR/AoKAzF7ZydJB6DmrNDPHkNUJz8dNxeWBNJbt82Wd6KMdp+aAYsihEySP 9LRzsqRIXoXoya3JmgCBJgpfdravGZx4+R92q2o1O1VhPMu9hrMaMap6quDLbqBM cSUWj4Ng6Xlxfr/EuM6WdWwXx8eC7VBs04NpNwYA/CyAnR4rGNbgRmDpTk55QQsI QX+KL1aE2Dc3P22pBnYe92GtbF8M19pXlS4BaIqX5yIPnbpyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDfz12xqgIw4D85zr1KtVT20wYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1 YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvYjUyMDY5NWQtOTdjYy0z ZWFmLTkxNWQtZjg0YmIyZTE2ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5 ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot5bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzagQ0oEiHVijq7hToRQkNpET0Up8tKKqhrPB58ki59JOAJNUC2MKXM Us+Q/Fq2I+gjk59BBX5MKpCMGxcrPdcq02h1p/BKQxpIfL0k4bZF1dvyVHj0wV2M PwUou3Ct5TN9VyliR3riw8a51s/n3n7HOk46EdxrVrL8cgg5iA7FlRy0Kp49R5JP EJuIt9/jE1v+JIsn1Gfgsex7gCKZBQ17CR1IzRDrR+7BDiBaBIc2POXtzhIC9S2a eCW1Vct21wQaqg+ZGRxTOAlfG5GmK+XQjp+16Q5tnDu4Hp9gS83iZss8OZSU3ZOZ E5ON/nC7s4jCbH1mGxsoYjv6JUn2PWA= -----END CERTIFICATE-----Generated at Mon Nov 3 08:54:14 2025 by rpki-client