$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/9949ced6-51fb-3055-b2ab-60498b32768c.roa File: 9949ced6-51fb-3055-b2ab-60498b32768c.roa (raw, json) Hash identifier: QIfiNo4DbP9LQlJbz/ZMvQ9eqfQ741cPWWGbrPnH+98= Subject key identifier: 6B:15:D1:2E:AB:A7:5C:55:2E:36:46:41:58:4D:F3:A6:25:05:AE:AE Certificate issuer: /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848 Certificate serial: 010D0C9F4328584B3987167582D0D17385AF4140 Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/9949ced6-51fb-3055-b2ab-60498b32768c.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 32249 IP address blocks: 162.250.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:16:75:82:d0:d1:73:85:af:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=c316abfb-e6f9-44be-a6d3-989b62c53f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:f8:13:08:25:d0:e9:19:e1:83:e1:6e:71: 91:2d:a9:50:b5:21:8c:e9:49:72:ec:d2:c0:f0:e1: b7:e1:68:89:2b:dd:1b:2b:b5:17:9a:81:1a:ba:5c: ca:bc:85:31:a5:2c:5a:d4:69:88:ac:fa:dd:eb:1e: d4:cd:74:58:da:b7:48:33:90:71:f2:31:fd:a8:94: 5a:6a:a0:85:9c:b7:91:25:be:44:10:29:23:b5:ad: 9c:28:6d:a4:de:47:d5:a1:a2:5f:00:31:1d:ec:1a: d6:16:32:88:ed:90:72:37:dc:78:65:c9:c5:47:df: 8c:3a:dd:56:cd:b7:99:40:14:78:be:09:8e:91:b8: 82:e5:e1:8e:bc:dc:ad:c4:da:51:65:63:ba:10:78: 4e:f1:0a:74:0a:91:65:cc:c2:29:5a:cb:38:3d:3d: fe:48:e9:7c:64:f5:08:2a:2f:e6:04:62:a6:fc:38: ce:03:42:bd:33:2d:ea:f6:71:de:0b:4e:96:77:7a: 3b:3c:6f:cd:a3:02:5c:e5:29:ce:3d:60:36:7d:0d: 18:17:73:f7:c1:48:36:ef:fd:49:04:e8:20:7c:81: 9d:c8:3a:47:6a:69:9e:f8:02:6e:64:f7:c2:c1:fd: 04:fa:43:84:a2:da:f6:08:fa:0d:dd:e3:91:72:b1: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:15:D1:2E:AB:A7:5C:55:2E:36:46:41:58:4D:F3:A6:25:05:AE:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/9949ced6-51fb-3055-b2ab-60498b32768c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl X509v3 Authority Key Identifier: keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer sbgp-ipAddrBlock: critical IPv4: 162.250.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ae:bc:90:24:42:f5:ec:d2:4a:a9:c4:0b:be:47:33:6f:14: 4e:31:f1:c6:6d:58:a6:fa:59:39:92:16:44:1e:4b:60:76:1f: 9f:3a:01:61:3a:e8:07:48:3f:b8:47:c3:ac:fd:00:c2:78:3b: 54:75:38:98:63:9e:22:4d:42:16:49:45:2b:ed:44:0c:62:71: 50:a2:c9:65:e3:e2:19:b1:3a:b5:77:2e:fb:8c:83:62:2d:34: f7:12:2c:71:6c:d5:89:c1:5f:e5:48:ef:6a:37:79:d4:8a:42: 2c:44:6f:4f:77:bb:41:f2:85:fb:a4:ea:08:10:6b:39:bd:12: 45:0e:85:15:1a:8c:e3:19:21:1f:66:c0:3b:3b:cd:45:48:be: 53:bd:bd:c0:7b:7c:0d:e1:b1:03:71:b0:63:72:11:88:8a:4f: ff:f9:c5:02:23:02:e1:cd:22:22:cd:c0:56:b4:22:7c:0a:5c: ee:0c:b2:24:f4:33:c8:56:75:da:82:f4:46:09:18:c9:e0:3b: 81:26:99:d6:36:e5:d2:89:c5:86:39:28:e1:71:1f:4d:e4:e9: ae:4f:a0:2e:1e:be:96:24:4c:14:87:72:46:50:17:55:a1:a5: af:20:79:cb:f0:62:64:27:7c:0c:db:83:bf:51:f7:37:f5:68: 33:d9:11:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hxZ1gtDRc4WvQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJhNmE2NDMtYjVkMC00ZjA5LThlNjAtZTgyYmExZWI3 ODQ4MB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YzMxNmFiZmItZTZmOS00NGJlLWE2ZDMtOTg5YjYyYzUzZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSL4Ewgl0OkZ4YPhbnGRLalQtSGM6Uly7NLA 8OG34WiJK90bK7UXmoEaulzKvIUxpSxa1GmIrPrd6x7UzXRY2rdIM5Bx8jH9qJRa aqCFnLeRJb5EECkjta2cKG2k3kfVoaJfADEd7BrWFjKI7ZByN9x4ZcnFR9+MOt1W zbeZQBR4vgmOkbiC5eGOvNytxNpRZWO6EHhO8Qp0CpFlzMIpWss4PT3+SOl8ZPUI Ki/mBGKm/DjOA0K9My3q9nHeC06Wd3o7PG/NowJc5SnOPWA2fQ0YF3P3wUg27/1J BOggfIGdyDpHamme+AJuZPfCwf0E+kOEotr2CPoN3eORcrEVxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsV0S6rp1xVLjZGQVhN86YlBa6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmE2 YTY0My1iNWQwLTRmMDktOGU2MC1lODJiYTFlYjc4NDgvOTk0OWNlZDYtNTFmYi0z MDU1LWIyYWItNjA0OThiMzI3NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJhNmE2NDMtYjVkMC00ZjA5LThl NjAtZTgyYmExZWI3ODQ4L2RiYTZhNjQzLWI1ZDAtNGYwOS04ZTYwLWU4MmJhMWVi Nzg0OC5jcmwwHwYDVR0jBBgwFoAUNX+gJNiHITtZZOj7Qig1gK5dUycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmE2YTY0My1iNWQwLTRmMDktOGU2MC1lODJi YTFlYjc4NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEauvJAkQvXs0kqpxAu+RzNvFE4x8cZtWKb6WTmSFkQeS2B2H586AWE6 6AdIP7hHw6z9AMJ4O1R1OJhjniJNQhZJRSvtRAxicVCiyWXj4hmxOrV3LvuMg2It NPcSLHFs1YnBX+VI72o3edSKQixEb093u0Hyhfuk6ggQazm9EkUOhRUajOMZIR9m wDs7zUVIvlO9vcB7fA3hsQNxsGNyEYiKT//5xQIjAuHNIiLNwFa0InwKXO4MsiT0 M8hWddqC9EYJGMngO4EmmdY25dKJxYY5KOFxH03k6a5PoC4evpYkTBSHckZQF1Wh pa8gecvwYmQnfAzbg79R9zf1aDPZEZo= -----END CERTIFICATE-----Generated at Tue Oct 28 13:03:21 2025 by rpki-client