$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa File: 585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa (raw, json) Hash identifier: FPji8vcjL+3grH+kYw47+map9HY9mCIU7o3xBFPQ4Cg= Subject key identifier: 28:E3:68:89:F8:9F:17:04:B1:04:92:B3:BA:0B:0A:93:DA:36:3B:5F Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Certificate serial: 010D0C9F4328584B99D7A2347D031BA34C227F80 Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 22438 IP address blocks: 162.211.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a2:34:7d:03:1b:a3:4c:22:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d198adb1-f8f4-41f8-8e16-bd4a1c84563a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:96:af:d6:63:c5:95:16:dd:ab:44:2e:63:96: 2f:f1:4f:69:37:eb:bd:c4:e2:c8:44:ec:87:f4:38: 38:8f:59:6b:2f:13:55:a1:8c:74:62:29:d2:c6:63: 9e:b2:6e:4c:d6:8f:2b:74:78:68:9f:b6:c3:b1:26: 74:a0:05:6c:3c:2d:68:5c:6a:70:f0:f9:7f:e2:ce: 07:54:a5:21:d4:8a:9f:c8:31:fe:bd:08:f5:7a:90: 86:87:c5:ab:56:e8:53:b7:00:37:f5:1e:24:b5:98: 52:6a:49:46:c3:87:4e:5c:05:16:e1:ed:49:86:10: 85:ec:2c:e9:35:8e:b1:98:44:27:45:57:64:a0:1d: 67:82:9f:da:d6:7f:83:2f:7b:21:52:ec:51:03:a3: a4:d3:0a:bf:16:49:a5:14:db:bc:df:bf:f5:55:0f: 96:0a:3c:9f:6f:0e:e5:b9:02:c0:20:47:7d:89:83: 41:46:5b:19:46:e2:d5:e3:55:78:e2:15:f8:25:78: 4c:f5:bc:c6:5f:cf:71:9d:d9:f0:04:be:e3:b7:ad: c6:90:ee:ab:fc:89:80:40:c7:8d:97:fb:61:10:c8: ad:7d:0b:c8:a0:11:23:99:3b:90:a2:96:36:8e:26: a9:2b:a6:c7:49:77:b4:af:19:e8:86:6e:a0:ba:35: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E3:68:89:F8:9F:17:04:B1:04:92:B3:BA:0B:0A:93:DA:36:3B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/585f0fc1-bd4d-32ad-8339-c2a16b3f095f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl X509v3 Authority Key Identifier: keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer sbgp-ipAddrBlock: critical IPv4: 162.211.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ad:ed:31:f0:97:c7:66:2d:33:60:67:51:f6:7f:a7:7e:5f: 2f:9e:2e:eb:46:f8:00:ec:1f:b7:9f:5c:30:f6:c5:01:37:37: df:06:ee:29:63:39:95:77:19:54:a7:89:a7:3c:f9:c0:78:46: 0c:0f:bc:84:49:7f:02:76:db:5e:fd:55:55:26:6d:27:ac:d8: 78:2b:4d:88:c2:a0:40:6c:eb:41:3e:7c:22:15:f7:30:f9:83: 9c:a8:50:fd:3b:6e:e1:8a:7a:d5:70:f6:3d:ee:ec:90:91:0a: 92:82:e5:55:32:d6:41:d9:bf:e0:af:74:a1:69:e4:d2:b2:3a: bc:f1:3f:69:b8:6c:e5:02:ec:48:a2:eb:c4:09:14:04:a4:5f: b0:bf:cb:a3:86:32:2d:6b:f3:8c:cb:3d:25:ab:c2:95:94:1f: e6:84:14:8f:37:8d:d9:f1:16:62:a4:1f:15:85:87:45:8c:67: 22:77:a1:de:12:1b:6f:f6:d8:1f:e6:4e:0f:cd:32:d4:24:51: 85:d6:cf:41:a4:26:23:35:51:d5:92:b7:77:48:8b:b5:b4:bd: f9:30:1d:60:3d:cf:ec:f3:16:f3:60:2e:d5:49:cf:59:46:6a: 82:e9:b3:ed:f4:9c:ba:6b:82:f5:36:55:0c:81:3a:35:3d:45: 1d:0f:05:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16I0fQMbo0wif4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1 NDdjMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDE5OGFkYjEtZjhmNC00MWY4LThlMTYtYmQ0YTFjODQ1NjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpav1mPFlRbdq0QuY5Yv8U9pN+u9xOLIROyH 9Dg4j1lrLxNVoYx0YinSxmOesm5M1o8rdHhon7bDsSZ0oAVsPC1oXGpw8Pl/4s4H VKUh1IqfyDH+vQj1epCGh8WrVuhTtwA39R4ktZhSaklGw4dOXAUW4e1JhhCF7Czp NY6xmEQnRVdkoB1ngp/a1n+DL3shUuxRA6Ok0wq/FkmlFNu837/1VQ+WCjyfbw7l uQLAIEd9iYNBRlsZRuLV41V44hX4JXhM9bzGX89xndnwBL7jt63GkO6r/ImAQMeN l/thEMitfQvIoBEjmTuQopY2jiapK6bHSXe0rxnohm6gujUUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjjaIn4nxcEsQSSs7oLCpPaNjtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5 MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvNTg1ZjBmYzEtYmQ0ZC0z MmFkLTgzMzktYzJhMTZiM2YwOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4 YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJat7THwl8dmLTNgZ1H2f6d+Xy+eLutG+ADsH7efXDD2xQE3N98G7ilj OZV3GVSniac8+cB4RgwPvIRJfwJ22179VVUmbSes2HgrTYjCoEBs60E+fCIV9zD5 g5yoUP07buGKetVw9j3u7JCRCpKC5VUy1kHZv+CvdKFp5NKyOrzxP2m4bOUC7Eii 68QJFASkX7C/y6OGMi1r84zLPSWrwpWUH+aEFI83jdnxFmKkHxWFh0WMZyJ3od4S G2/22B/mTg/NMtQkUYXWz0GkJiM1UdWSt3dIi7W0vfkwHWA9z+zzFvNgLtVJz1lG aoLps+30nLprgvU2VQyBOjU9RR0PBU4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:11:00 2025 by rpki-client