$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94ab2003-88b3-32a3-8ce8-5e67c29b4850.roa File: 94ab2003-88b3-32a3-8ce8-5e67c29b4850.roa (raw, json) Hash identifier: odOxwrW8tnAbfuHVjk3eV97PpUpLDFUXt5VM2xaXk6Y= Subject key identifier: 13:16:E6:C1:83:D8:C2:9E:09:24:AC:D0:63:32:87:43:13:18:C7:7D Certificate issuer: /CN=e9769409-4db3-443e-9837-3afd4dca595d Certificate serial: 010D0C9F4328584B9B3CE7A6D63FADF13A551900 Authority key identifier: F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94ab2003-88b3-32a3-8ce8-5e67c29b4850.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 23316 IP address blocks: 162.255.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e7:a6:d6:3f:ad:f1:3a:55:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9769409-4db3-443e-9837-3afd4dca595d Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=82fd334c-9cfd-4f15-b23a-598ad0d22fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:02:74:54:ac:f2:93:8d:45:48:e6:ac:e1: 21:e8:7f:ea:c7:29:d4:b1:cd:75:a1:a9:50:00:93: e0:2d:33:5a:b5:da:4f:39:7b:a1:c5:de:98:49:60: a5:2f:e9:ae:2c:c5:ce:1a:81:20:a8:20:36:c1:95: 6d:a0:ca:ab:b5:55:5b:90:63:1a:27:36:92:89:ac: 60:7f:29:c2:5e:ac:78:4e:b0:d0:3f:cc:8d:1b:95: 0c:a3:7d:94:c8:f6:f1:e8:57:cc:2c:b5:98:e4:ab: f4:a2:4e:5a:52:70:03:b0:94:a4:be:42:84:ad:42: bd:81:18:ec:a0:c1:9f:b5:eb:5e:4f:ec:f2:55:8d: 7d:85:a5:06:1c:fb:43:66:b3:3e:eb:e8:c4:ae:ca: b5:5f:dc:66:f3:2d:7e:3d:c4:4e:a7:1d:5a:1e:10: 9d:d0:3f:6a:1f:d1:31:f7:9b:c2:84:e7:b6:99:87: ec:4f:77:76:48:53:d9:67:06:23:7d:f1:e6:a3:5c: d0:20:e6:f0:33:78:a3:47:24:b1:81:20:79:77:47: 95:92:88:8f:b1:e5:42:53:72:48:cf:33:b2:6a:b5: d3:2e:52:1c:39:11:1d:c0:e9:7a:fc:8c:11:d1:98: 67:1e:0b:9c:7d:b7:c7:35:18:a8:b5:83:4d:ff:b3: dc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:16:E6:C1:83:D8:C2:9E:09:24:AC:D0:63:32:87:43:13:18:C7:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/94ab2003-88b3-32a3-8ce8-5e67c29b4850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d/e9769409-4db3-443e-9837-3afd4dca595d.crl X509v3 Authority Key Identifier: keyid:F6:C8:09:76:E4:F0:CE:2E:06:48:19:F1:1F:D8:CB:04:C1:FF:B5:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e9769409-4db3-443e-9837-3afd4dca595d.cer sbgp-ipAddrBlock: critical IPv4: 162.255.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cb:6e:b5:fd:ff:7b:66:06:53:f1:4b:e1:35:fe:b2:d0:5e: 52:7c:06:48:d1:23:a8:16:24:7e:af:45:96:19:d7:cb:a3:31: c5:18:08:75:13:a0:04:28:69:80:89:95:54:4a:7d:b3:22:d9: 59:2e:95:4b:41:10:8f:01:cb:61:cc:69:7c:5e:e1:4e:9c:ee: 9f:9a:25:9a:70:fc:71:0b:35:6a:ff:b7:09:4c:25:c7:53:77: b6:4e:cd:c3:b1:93:cf:40:68:55:82:2a:54:76:58:79:a0:d8: 5c:aa:a4:63:67:ce:05:12:d0:c5:1e:c8:60:c0:f8:c8:c4:8e: b0:48:70:31:18:2b:71:68:d6:7a:7b:02:c5:77:29:d9:f5:e5: 43:b8:a6:ba:fd:18:ef:50:17:35:c1:9d:9f:45:ef:8e:15:3f: 13:c1:fa:5e:ea:07:af:70:a2:fe:2a:d3:d1:35:27:32:13:d3: 64:a0:4f:8e:4b:1d:74:db:38:f0:f7:64:85:b5:06:69:58:de: ed:d0:79:c0:08:28:dc:df:50:b5:6f:6c:61:54:30:38:99:92: 9d:0a:60:55:cf:2f:61:35:e4:5a:36:53:81:dd:ef:18:55:32: 23:10:2c:7a:25:df:fd:fc:b5:2f:6d:f8:ef:ef:01:bd:88:f7: cf:fc:bf:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOem1j+t8TpVGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk3Njk0MDktNGRiMy00NDNlLTk4MzctM2FmZDRkY2E1 OTVkMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ODJmZDMzNGMtOWNmZC00ZjE1LWIyM2EtNTk4YWQwZDIyZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMwCdFSs8pONRUjmrOEh6H/qxynUsc11oalQ AJPgLTNatdpPOXuhxd6YSWClL+muLMXOGoEgqCA2wZVtoMqrtVVbkGMaJzaSiaxg fynCXqx4TrDQP8yNG5UMo32UyPbx6FfMLLWY5Kv0ok5aUnADsJSkvkKErUK9gRjs oMGfteteT+zyVY19haUGHPtDZrM+6+jErsq1X9xm8y1+PcROpx1aHhCd0D9qH9Ex 95vChOe2mYfsT3d2SFPZZwYjffHmo1zQIObwM3ijRySxgSB5d0eVkoiPseVCU3JI zzOyarXTLlIcOREdwOl6/IwR0ZhnHgucfbfHNRiotYNN/7PcWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMW5sGD2MKeCSSs0GMyh0MTGMd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2 OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZkNGRjYTU5NWQvOTRhYjIwMDMtODhiMy0z MmEzLThjZTgtNWU2N2MyOWI0ODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZTk3Njk0MDktNGRiMy00NDNlLTk4 MzctM2FmZDRkY2E1OTVkL2U5NzY5NDA5LTRkYjMtNDQzZS05ODM3LTNhZmQ0ZGNh NTk1ZC5jcmwwHwYDVR0jBBgwFoAU9sgJduTwzi4GSBnxH9jLBMH/tewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9lOTc2OTQwOS00ZGIzLTQ0M2UtOTgzNy0zYWZk NGRjYTU5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3LbrX9/3tmBlPxS+E1/rLQXlJ8BkjRI6gWJH6vRZYZ18ujMcUYCHUT oAQoaYCJlVRKfbMi2VkulUtBEI8By2HMaXxe4U6c7p+aJZpw/HELNWr/twlMJcdT d7ZOzcOxk89AaFWCKlR2WHmg2FyqpGNnzgUS0MUeyGDA+MjEjrBIcDEYK3Fo1np7 AsV3Kdn15UO4prr9GO9QFzXBnZ9F744VPxPB+l7qB69wov4q09E1JzIT02SgT45L HXTbOPD3ZIW1BmlY3u3QecAIKNzfULVvbGFUMDiZkp0KYFXPL2E15Fo2U4Hd7xhV MiMQLHol3/38tS9t+O/vAb2I98/8vyg= -----END CERTIFICATE-----Generated at Wed Oct 29 11:07:17 2025 by rpki-client