$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa File: 8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa (raw, json) Hash identifier: 8Y84OtAOh1G8JSGYRBSnoAQoxXRdW+jAQ9zUYIBUJYc= Subject key identifier: 31:E2:31:9C:E3:1E:66:54:58:FA:5D:33:51:80:09:FB:9E:F1:5E:73 Certificate issuer: /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e Certificate serial: 010D0C9F4328584B9E079F745E68932DC20EFA80 Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 162.213.126.0/24 maxlen: 24 162.213.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:9f:74:5e:68:93:2d:c2:0e:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=af7796c7-140f-4d2e-856a-6767652b72f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:8f:15:f6:91:2a:d4:d2:61:53:a9:b0:27: bb:1d:25:8b:45:84:28:6e:52:20:0c:d9:95:f0:19: ee:4c:8b:11:e9:ab:7b:cc:c9:b1:d4:ab:19:4a:fa: fb:45:40:d9:00:5c:99:a0:5b:d5:c5:23:ea:6a:07: f8:2c:e8:b3:9e:0c:b9:c7:bc:9f:e2:5c:06:2c:df: 00:02:83:0e:ee:34:9e:c5:6a:d7:ae:48:0e:c6:f1: 38:72:c8:14:bd:fb:f6:e5:a7:a3:a3:7b:34:77:71: ef:54:ac:4b:24:ac:65:df:25:3b:d9:f8:71:d5:f9: 54:37:ca:35:25:b0:cc:f3:96:2b:c5:c9:ed:d9:63: 11:f8:dc:36:53:91:d2:27:74:96:88:73:c9:35:7e: 43:1f:ff:1f:c3:71:e1:a9:01:e5:ba:9e:9f:10:a7: 1c:dc:73:aa:bd:3a:60:90:64:0d:ad:6a:db:16:a0: a3:79:f1:33:d4:fe:55:05:04:03:cb:33:1c:f8:08: 8f:96:f9:8a:db:fe:2f:4f:78:f3:ed:04:1f:b2:71: 18:d7:b5:ba:b7:99:85:87:f9:23:c6:08:7a:00:22: a9:50:ed:f7:4e:a6:3c:47:fe:29:7c:26:1a:61:06: c5:23:38:40:34:ed:71:80:17:d4:df:d0:a7:d2:eb: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E2:31:9C:E3:1E:66:54:58:FA:5D:33:51:80:09:FB:9E:F1:5E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl X509v3 Authority Key Identifier: keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer sbgp-ipAddrBlock: critical IPv4: 162.213.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:ec:80:54:9f:61:0a:89:97:3a:8e:fd:4a:c9:e2:2f:47:a0: 6f:ef:72:c2:8a:39:b1:21:27:ee:77:08:34:43:27:dd:f8:87: b2:07:07:35:48:91:af:53:cc:b4:6b:f1:e7:98:2c:56:ac:18: b3:e1:fc:29:c5:a0:4c:eb:d4:98:11:c5:11:b0:48:f7:48:f7: 00:84:7d:9d:6c:4f:7b:f5:d7:78:ba:9b:1c:17:e7:0e:0e:6b: 22:85:d2:76:06:ac:62:0e:53:63:6c:cc:ae:b2:41:ef:43:e0: 24:bc:fa:5e:46:bb:13:57:61:57:9b:8a:61:b7:9f:c5:5b:b6: 68:86:f4:f5:c5:18:d0:ed:e8:bf:bd:cd:c1:0b:53:3a:f4:64: ef:e2:c4:9b:16:ac:01:bb:a8:1d:93:f1:18:6f:29:f3:62:a2: dc:6f:79:b8:41:8e:e1:c4:72:b0:d6:fd:7d:6a:d6:89:c7:30: eb:00:99:7a:0c:8e:5b:86:fc:8c:bc:83:f5:0b:e0:2c:8b:71: 55:9c:4c:55:25:47:c4:9d:5a:03:4f:9a:79:bb:c0:a0:3c:cb: 17:21:90:60:d0:6a:dc:31:d7:66:21:5c:61:63:ff:a5:77:1b: 9d:20:b4:2c:b1:1e:f6:0a:9c:96:0a:38:16:37:7f:83:55:7a: 0f:fa:a6:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB590XmiTLcIO+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzODY4ZDQtMWU5MS00NzczLTljZWYtNTFiODRmNDNj MjBlMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YWY3Nzk2YzctMTQwZi00ZDJlLTg1NmEtNjc2NzY1MmI3MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFmPFfaRKtTSYVOpsCe7HSWLRYQoblIgDNmV 8BnuTIsR6at7zMmx1KsZSvr7RUDZAFyZoFvVxSPqagf4LOizngy5x7yf4lwGLN8A AoMO7jSexWrXrkgOxvE4csgUvfv25aejo3s0d3HvVKxLJKxl3yU72fhx1flUN8o1 JbDM85Yrxcnt2WMR+Nw2U5HSJ3SWiHPJNX5DH/8fw3HhqQHlup6fEKcc3HOqvTpg kGQNrWrbFqCjefEz1P5VBQQDyzMc+AiPlvmK2/4vT3jz7QQfsnEY17W6t5mFh/kj xgh6ACKpUO33TqY8R/4pfCYaYQbFIzhANO1xgBfU39Cn0us7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHiMZzjHmZUWPpdM1GACfue8V5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZDM4 NjhkNC0xZTkxLTQ3NzMtOWNlZi01MWI4NGY0M2MyMGUvOGM0NGNkYmQtNzIyYi0z MTFhLWFhNGQtMGM3OWM3ZTRhY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGQzODY4ZDQtMWU5MS00NzczLTlj ZWYtNTFiODRmNDNjMjBlLzhkMzg2OGQ0LTFlOTEtNDc3My05Y2VmLTUxYjg0ZjQz YzIwZS5jcmwwHwYDVR0jBBgwFoAUw99vQ7x1F08JDM2+r7OE9K3N9gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZDM4NjhkNC0xZTkxLTQ3NzMtOWNlZi01MWI4 NGY0M2MyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBotV+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDsgFSfYQqJlzqO/UrJ4i9HoG/vcsKKObEhJ+53CDRDJ934h7IHBzVI ka9TzLRr8eeYLFasGLPh/CnFoEzr1JgRxRGwSPdI9wCEfZ1sT3v113i6mxwX5w4O ayKF0nYGrGIOU2NszK6yQe9D4CS8+l5GuxNXYVebimG3n8VbtmiG9PXFGNDt6L+9 zcELUzr0ZO/ixJsWrAG7qB2T8RhvKfNiotxvebhBjuHEcrDW/X1q1onHMOsAmXoM jluG/Iy8g/UL4CyLcVWcTFUlR8SdWgNPmnm7wKA8yxchkGDQatwx12YhXGFj/6V3 G50gtCyxHvYKnJYKOBY3f4NVeg/6psM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:19 2025 by rpki-client