$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa File: 25ed31a6-13c1-3088-8152-35ba9db84078.roa (raw, json) Hash identifier: 73yiFlHXAqyTKBs9qbFlZnK2p/aFz7idRWvMYo3L3ls= Subject key identifier: 59:D7:69:E2:BC:63:FD:51:97:E7:C0:3D:69:DA:4F:C2:31:B7:FB:DD Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584B9E07AAF2DD94F1B3A3E0C650 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30475 IP address blocks: 162.245.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:aa:f2:dd:94:f1:b3:a3:e0:c6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=4fbdb5ed-43f3-4919-9d25-6d0fb363a564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:94:67:c7:d0:49:98:3c:e2:78:67:13:e8: 7a:a2:94:c6:69:9f:d7:64:51:27:ed:42:73:7b:2c: ce:6e:c6:a3:0c:b7:12:4c:c8:4b:aa:7b:06:ff:24: 60:a4:28:aa:1b:2b:f0:f8:67:14:ea:77:3d:ad:8c: a9:7e:78:fd:c1:1f:16:f2:29:8b:0a:cb:73:49:d3: 57:f8:50:cf:d0:bc:e0:ff:5f:da:da:c3:a1:48:13: 2e:a7:34:92:b8:3d:07:65:06:00:7a:36:4c:90:00: 0a:3b:87:7f:9b:38:8e:c3:75:b6:fe:6a:dc:8e:f4: e7:00:d6:4f:04:f3:93:4b:74:d3:65:91:75:4c:f7: 7b:a4:99:2f:cd:e7:22:28:d1:5e:96:b7:ea:7f:4a: 57:af:bf:43:a4:43:af:29:03:88:ce:07:50:3a:51: 28:5c:dd:12:d3:72:43:dd:a5:b3:a1:14:90:e5:b9: 86:dd:76:4e:ac:e4:62:3b:1f:3a:1a:dd:f9:26:c6: c1:91:6b:b2:96:64:19:9a:8b:ca:59:a6:7a:f3:13: 5a:11:9b:5a:00:4c:db:9d:5a:5a:09:41:ab:9e:05: dd:ac:93:6c:21:2d:ad:f5:29:1f:2d:0c:a6:e8:23: 4d:fe:d5:58:62:19:cb:42:45:87:eb:21:c0:1d:bd: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D7:69:E2:BC:63:FD:51:97:E7:C0:3D:69:DA:4F:C2:31:B7:FB:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/25ed31a6-13c1-3088-8152-35ba9db84078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 162.245.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2a:23:21:6d:a5:ae:17:20:dc:4e:31:8e:f4:27:59:78:85: 74:95:23:10:ea:c0:6d:6d:ca:3f:26:5e:88:a5:00:a1:77:3b: 79:56:e9:6c:0a:e4:1f:dd:c1:b5:b7:3e:cb:0a:78:e7:53:ee: af:89:69:05:f6:b9:fb:2d:f8:cd:1e:fb:8e:7a:e9:a1:d0:c3: 28:a3:8a:d2:6f:75:8e:41:ef:c6:35:59:86:76:a3:53:84:3d: 5f:4f:0f:1c:2a:a8:f5:c8:29:ca:60:b7:65:5a:a0:a0:ba:b6: 8f:e0:fa:17:32:8c:8e:82:32:47:96:5b:93:ba:23:98:98:5e: 4c:c9:73:a3:b3:ab:69:3e:2d:b1:06:18:3b:de:76:11:e4:6a: c6:1f:48:a4:f4:57:e1:bd:5a:17:f1:e5:ce:9b:40:8b:ba:5d: 9c:09:a7:86:4b:fc:2f:69:9a:f3:11:af:3a:c5:d9:27:11:d8: 58:1a:8d:fc:db:a5:d2:6d:ea:b5:45:94:84:d5:ae:bb:c1:bd: 47:c8:95:5f:ad:82:38:c7:c9:f6:e5:2c:91:c8:5f:7f:a5:f9: bf:b6:d5:e1:aa:73:2b:35:ba:d3:1b:91:96:03:53:46:bc:54: 40:3c:7c:cb:f1:2e:d6:83:42:c3:bd:2a:57:9f:04:b7:f1:4b: 9b:38:d4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB6ry3ZTxs6PgxlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NGZiZGI1ZWQtNDNmMy00OTE5LTlkMjUtNmQwZmIzNjNhNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2UZ8fQSZg84nhnE+h6opTGaZ/XZFEn7UJz eyzObsajDLcSTMhLqnsG/yRgpCiqGyvw+GcU6nc9rYypfnj9wR8W8imLCstzSdNX +FDP0Lzg/1/a2sOhSBMupzSSuD0HZQYAejZMkAAKO4d/mziOw3W2/mrcjvTnANZP BPOTS3TTZZF1TPd7pJkvzeciKNFelrfqf0pXr79DpEOvKQOIzgdQOlEoXN0S03JD 3aWzoRSQ5bmG3XZOrORiOx86Gt35JsbBkWuylmQZmovKWaZ68xNaEZtaAEzbnVpa CUGrngXdrJNsIS2t9SkfLQym6CNN/tVYYhnLQkWH6yHAHb23hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnXaeK8Y/1Rl+fAPWnaT8Ixt/vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvMjVlZDMxYTYtMTNjMS0z MDg4LTgxNTItMzViYTlkYjg0MDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsqIyFtpa4XINxOMY70J1l4hXSVIxDqwG1tyj8mXoilAKF3O3lW6WwK 5B/dwbW3PssKeOdT7q+JaQX2ufst+M0e+4566aHQwyijitJvdY5B78Y1WYZ2o1OE PV9PDxwqqPXIKcpgt2VaoKC6to/g+hcyjI6CMkeWW5O6I5iYXkzJc6Ozq2k+LbEG GDvedhHkasYfSKT0V+G9Whfx5c6bQIu6XZwJp4ZL/C9pmvMRrzrF2ScR2Fgajfzb pdJt6rVFlITVrrvBvUfIlV+tgjjHyfblLJHIX3+l+b+21eGqcys1utMbkZYDU0a8 VEA8fMvxLtaDQsO9KlefBLfxS5s41Ck= -----END CERTIFICATE-----Generated at Tue Nov 4 19:43:41 2025 by rpki-client