$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/a656dad3-6549-3bf2-b3e8-9a8673b60cf1.roa File: a656dad3-6549-3bf2-b3e8-9a8673b60cf1.roa (raw, json) Hash identifier: L8Q4Jmhp3vvGn0z68at+SAsOX56FTuZObdLUC28pFJg= Subject key identifier: 33:F0:A2:41:22:35:E0:2E:21:AC:3A:F0:7D:C8:20:86:47:BD:CC:98 Certificate issuer: /CN=5dbc0e41-c852-43ba-9c18-262c63aec1a9 Certificate serial: 010D0C9F4328584B9E07A899B347375B1B32AB00 Authority key identifier: C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/a656dad3-6549-3bf2-b3e8-9a8673b60cf1.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 20001 IP address blocks: 162.253.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:a8:99:b3:47:37:5b:1b:32:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dbc0e41-c852-43ba-9c18-262c63aec1a9 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=7c4109f1-4f4a-4fa6-8f00-17c917b089b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:0c:0e:84:ef:f3:b5:16:88:aa:cd:df:18: 64:0c:15:1c:cf:d3:f8:5d:d5:61:60:93:50:87:cc: 15:31:3b:0a:9a:f3:ea:95:8e:30:77:96:ee:f6:e4: b8:1f:5b:6b:45:9e:52:50:24:74:b8:e2:06:ae:66: 89:4d:5c:41:ce:fa:bb:fd:83:03:a9:bf:ea:cc:37: 8f:43:2b:43:36:eb:60:5a:0c:46:89:85:35:2b:88: 2a:6c:ea:42:7d:12:2b:99:d4:c6:f5:53:b8:b2:69: 93:25:81:ff:4b:01:9b:08:e3:af:44:93:93:9f:12: e0:6d:e4:a7:e0:7e:8c:53:a5:40:ed:0e:bf:ae:5f: 02:fb:de:5f:97:13:f5:d7:06:38:39:62:84:84:65: c8:6a:05:1f:40:45:d9:24:16:a3:36:0d:65:33:1b: ad:e3:57:6c:88:e6:e1:07:0d:7a:2b:ca:47:2c:3f: 11:15:27:04:98:93:0c:9c:0e:c1:c1:ba:fc:44:b7: c4:f9:dd:d7:74:8b:8f:3b:1f:2f:e3:fe:16:c8:8e: 71:75:db:0f:6d:2e:7a:9e:34:0d:8d:82:4d:bb:b5: ea:e7:35:7c:82:de:d0:62:59:e7:04:30:64:c7:13: ac:e9:ca:61:a1:52:a4:d0:5e:e9:fe:a6:1a:e4:58: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F0:A2:41:22:35:E0:2E:21:AC:3A:F0:7D:C8:20:86:47:BD:CC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/a656dad3-6549-3bf2-b3e8-9a8673b60cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9/5dbc0e41-c852-43ba-9c18-262c63aec1a9.crl X509v3 Authority Key Identifier: keyid:C1:5F:30:1E:29:71:B4:5D:0C:80:DA:BF:13:2B:FC:CE:71:BE:DB:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5dbc0e41-c852-43ba-9c18-262c63aec1a9.cer sbgp-ipAddrBlock: critical IPv4: 162.253.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:14:c8:d1:4c:0d:36:71:d1:2c:39:f1:c0:54:11:1f:1b:72: 3e:76:a0:38:bb:a5:26:e3:01:aa:e0:02:03:19:26:d6:f2:21: 65:35:a8:e5:d9:24:6c:24:c0:b6:c7:32:28:dc:2e:0b:f7:24: 6b:4f:1e:76:d8:ef:5c:a6:dd:e7:fa:5a:b2:1b:72:87:b3:00: 38:e5:6d:01:83:7c:b6:4b:a6:31:4f:d3:cd:49:bd:60:b8:51: f2:55:3b:36:81:44:b8:42:57:7e:aa:f5:16:f5:19:70:94:df: 65:78:4d:6a:5b:20:b9:3c:ab:c0:35:7f:a9:d4:58:dc:da:f7: f5:a6:93:d8:db:35:3b:37:26:bd:a8:6a:5a:53:b7:9b:5f:79: 0f:ed:ba:a5:65:e3:2c:e8:95:45:3f:82:ff:08:e3:eb:39:73: bf:66:12:1c:c5:c5:09:62:f0:4f:73:14:50:fe:57:08:65:aa: 87:c0:50:d3:ef:3b:a3:33:5e:21:3c:a9:97:21:fb:67:8c:25: 83:8d:66:50:0d:ba:de:9e:99:b1:17:ef:35:e9:8e:cc:0e:34: 45:c3:4d:0a:bb:f5:fb:66:5e:e9:da:1b:9e:5a:a9:df:4b:04: 01:50:ee:bf:b9:5d:94:e4:ad:77:c7:73:aa:e7:04:7b:9d:06: 72:c9:72:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6iZs0c3WxsyqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRiYzBlNDEtYzg1Mi00M2JhLTljMTgtMjYyYzYzYWVj MWE5MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk N2M0MTA5ZjEtNGY0YS00ZmE2LThmMDAtMTdjOTE3YjA4OWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoQMDoTv87UWiKrN3xhkDBUcz9P4XdVhYJNQ h8wVMTsKmvPqlY4wd5bu9uS4H1trRZ5SUCR0uOIGrmaJTVxBzvq7/YMDqb/qzDeP QytDNutgWgxGiYU1K4gqbOpCfRIrmdTG9VO4smmTJYH/SwGbCOOvRJOTnxLgbeSn 4H6MU6VA7Q6/rl8C+95flxP11wY4OWKEhGXIagUfQEXZJBajNg1lMxut41dsiObh Bw16K8pHLD8RFScEmJMMnA7Bwbr8RLfE+d3XdIuPOx8v4/4WyI5xddsPbS56njQN jYJNu7Xq5zV8gt7QYlnnBDBkxxOs6cphoVKk0F7p/qYa5Fj7twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPwokEiNeAuIaw68H3IIIZHvcyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZGJj MGU0MS1jODUyLTQzYmEtOWMxOC0yNjJjNjNhZWMxYTkvYTY1NmRhZDMtNjU0OS0z YmYyLWIzZTgtOWE4NjczYjYwY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWRiYzBlNDEtYzg1Mi00M2JhLTlj MTgtMjYyYzYzYWVjMWE5LzVkYmMwZTQxLWM4NTItNDNiYS05YzE4LTI2MmM2M2Fl YzFhOS5jcmwwHwYDVR0jBBgwFoAUwV8wHilxtF0MgNq/Eyv8znG+258wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZGJjMGU0MS1jODUyLTQzYmEtOWMxOC0yNjJj NjNhZWMxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAUyNFMDTZx0Sw58cBUER8bcj52oDi7pSbjAargAgMZJtbyIWU1qOXZ JGwkwLbHMijcLgv3JGtPHnbY71ym3ef6WrIbcoezADjlbQGDfLZLpjFP081JvWC4 UfJVOzaBRLhCV36q9Rb1GXCU32V4TWpbILk8q8A1f6nUWNza9/Wmk9jbNTs3Jr2o alpTt5tfeQ/tuqVl4yzolUU/gv8I4+s5c79mEhzFxQli8E9zFFD+VwhlqofAUNPv O6MzXiE8qZch+2eMJYONZlANut6embEX7zXpjswONEXDTQq79ftmXunaG55aqd9L BAFQ7r+5XZTkrXfHc6rnBHudBnLJcmw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:32 2025 by rpki-client