$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa File: d4db6e43-4486-319a-a77e-97a0a6fec458.roa (raw, json) Hash identifier: XAEYSQHnZadp+rAvT0pG8paxn1CJLFi5frdhClCALL4= Subject key identifier: E1:41:22:E5:CA:88:65:54:E1:38:DB:24:F3:55:0E:73:B3:02:06:61 Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Certificate serial: 010D0C9F4328584B99D7A258404F42B3003020C0 Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 22438 IP address blocks: 162.246.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a2:58:40:4f:42:b3:00:30:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0ee198b5-ecf3-47ee-a240-fc8596013290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:50:09:ea:fb:dd:f6:66:d3:19:b1:f6:0d:fa: 77:26:9d:27:21:4e:95:64:2d:52:9c:66:cb:cd:5b: c5:a7:a2:74:f8:fe:d4:f4:b7:e5:75:57:30:20:3c: 98:c2:b5:64:f8:3a:a1:e8:d7:4b:ac:53:6a:50:d6: 6b:de:b1:e4:c2:9f:07:8a:8f:2a:cc:f7:d4:78:eb: 3b:7d:e9:22:b5:29:1f:89:ad:d5:68:f9:ca:ea:b0: 62:86:b5:a8:22:4d:7f:8f:92:74:c3:13:3a:a5:48: df:d8:04:9d:c2:31:dd:dd:ec:57:8b:55:c4:aa:53: 5e:37:fd:76:99:33:7d:4c:68:0b:e1:a5:1a:82:95: 45:df:5a:f6:ab:8a:38:39:6b:7a:ed:dc:3c:c4:bc: bb:28:69:26:76:0e:58:b9:2a:14:71:d8:13:62:4c: 6a:c3:1f:7f:36:04:0a:1b:ef:d7:1d:7a:f6:2d:89: 30:dc:ea:d7:22:b9:ed:a7:4b:36:67:41:24:34:bd: 06:a7:68:1d:9f:f2:da:f6:68:c4:3c:83:69:c4:66: bf:59:2c:99:ff:95:33:1f:5b:d8:fb:d8:a5:19:d7: 59:a3:6e:69:8b:bf:ba:7b:4f:38:83:91:ac:40:21: 8b:47:1c:65:47:61:b4:3b:58:9e:f0:f8:2d:62:4d: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:41:22:E5:CA:88:65:54:E1:38:DB:24:F3:55:0E:73:B3:02:06:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/d4db6e43-4486-319a-a77e-97a0a6fec458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl X509v3 Authority Key Identifier: keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer sbgp-ipAddrBlock: critical IPv4: 162.246.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b0:45:85:63:fe:36:a4:95:8a:e8:f6:c3:a2:1d:62:e8:2b: 82:bb:d6:89:71:78:7d:d9:d5:0b:8b:de:b4:38:a6:11:b9:1a: dd:ed:f8:3f:6d:42:00:d1:06:2c:e7:2e:b1:e9:49:d7:39:98: 16:c1:42:a2:26:4c:b0:6f:dd:c3:fb:99:38:b9:43:50:01:23: a6:df:af:83:c3:2b:eb:a1:ac:4d:1b:29:fb:de:5d:8a:5b:b5: cb:08:c8:b8:fc:68:89:fc:a1:ae:2a:60:77:de:f7:4c:35:d0: 13:c5:55:69:65:c6:55:0b:a4:9d:8c:2b:18:de:35:d3:02:39: e7:0a:2d:1e:b1:5a:91:69:8b:af:ff:89:c9:c9:36:6e:3b:58: f9:f2:4e:8c:55:1f:4c:1a:5c:6f:73:d3:43:94:0b:32:3b:03: 1a:dd:c8:6c:6b:8f:f3:32:1e:32:49:da:86:a5:30:45:41:4a: a0:65:3d:4a:99:b1:cf:ec:ab:61:2f:f1:36:f4:ce:e4:77:54: a1:5a:26:2d:6b:f6:1b:e5:5b:36:62:5a:f2:76:d8:cd:8d:9f: 84:27:37:95:0b:a6:f3:1b:8c:09:4c:f3:9f:c4:28:99:84:e6: f0:75:8f:fc:d8:94:a1:f8:85:c6:ba:9b:8d:3e:12:46:5f:42: cd:70:22:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16JYQE9CswAwIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1 NDdjMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MGVlMTk4YjUtZWNmMy00N2VlLWEyNDAtZmM4NTk2MDEzMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlAJ6vvd9mbTGbH2Dfp3Jp0nIU6VZC1SnGbL zVvFp6J0+P7U9LfldVcwIDyYwrVk+Dqh6NdLrFNqUNZr3rHkwp8Hio8qzPfUeOs7 fekitSkfia3VaPnK6rBihrWoIk1/j5J0wxM6pUjf2ASdwjHd3exXi1XEqlNeN/12 mTN9TGgL4aUagpVF31r2q4o4OWt67dw8xLy7KGkmdg5YuSoUcdgTYkxqwx9/NgQK G+/XHXr2LYkw3OrXIrntp0s2Z0EkNL0Gp2gdn/La9mjEPINpxGa/WSyZ/5UzH1vY +9ilGddZo25pi7+6e084g5GsQCGLRxxlR2G0O1ie8PgtYk1dYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFBIuXKiGVU4TjbJPNVDnOzAgZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5 MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvZDRkYjZlNDMtNDQ4Ni0z MTlhLWE3N2UtOTdhMGE2ZmVjNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4 YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCwRYVj/jaklYro9sOiHWLoK4K71olxeH3Z1QuL3rQ4phG5Gt3t+D9t QgDRBiznLrHpSdc5mBbBQqImTLBv3cP7mTi5Q1ABI6bfr4PDK+uhrE0bKfveXYpb tcsIyLj8aIn8oa4qYHfe90w10BPFVWllxlULpJ2MKxjeNdMCOecKLR6xWpFpi6// icnJNm47WPnyToxVH0waXG9z00OUCzI7AxrdyGxrj/MyHjJJ2oalMEVBSqBlPUqZ sc/sq2Ev8Tb0zuR3VKFaJi1r9hvlWzZiWvJ22M2Nn4QnN5ULpvMbjAlM85/EKJmE 5vB1j/zYlKH4hca6m40+EkZfQs1wIuE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:49 2025 by rpki-client