$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be32dcd8-5c4a-3bb6-8030-7eb5488ad52e.roa File: be32dcd8-5c4a-3bb6-8030-7eb5488ad52e.roa (raw, json) Hash identifier: LfMUJ9TlJRRjc204Sd1nwmODHrHnsFO59da+GsRlQtg= Subject key identifier: 5C:33:29:AD:7B:91:E7:FC:5F:20:AC:5C:AB:84:DD:72:7A:73:AD:EC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB2F82E685B29D18CB3A8C340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be32dcd8-5c4a-3bb6-8030-7eb5488ad52e.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 401152 IP address blocks: 168.93.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:2e:68:5b:29:d1:8c:b3:a8:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=c766f085-57ad-439d-b245-c67dc5b8de55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:a0:78:e8:dc:60:b5:cb:2f:39:b0:d5:14: ec:15:17:fa:a4:7e:54:0a:be:c3:18:8a:39:de:1a: 25:f8:48:cc:5e:0f:d1:dc:1b:ea:a9:22:56:06:ba: 0c:47:c3:d2:48:c9:f7:03:4c:24:f3:e6:6f:33:55: 06:95:b8:61:09:2e:3d:15:88:aa:c8:0d:3e:da:50: aa:b4:8b:b9:4b:9a:f1:d8:00:a6:7d:f7:ab:13:bb: c9:e2:1f:f2:0d:d6:69:97:0b:0f:fb:da:43:a4:79: 39:29:22:fc:7b:2f:83:ac:12:a1:9c:1a:74:4e:72: e9:da:b2:68:ac:34:7d:f8:75:01:dd:99:3f:b3:ed: f5:6c:d7:8d:6c:7f:1f:cf:aa:59:15:f5:12:f5:89: f1:29:c9:d0:64:f9:77:ee:d1:32:e3:2c:53:79:6b: 28:07:d5:7e:83:86:46:c6:42:90:52:75:67:88:9e: 69:ad:6d:52:6c:64:8d:c2:51:79:28:ff:a9:66:8f: 92:66:d3:3f:32:58:4f:f5:e2:31:00:5b:91:09:f0: ad:ef:0e:c4:c0:3a:60:14:1c:69:e5:88:5a:82:80: ff:1c:6d:e1:66:94:d5:40:80:34:7a:3e:60:82:df: 15:2e:a9:ca:ac:61:01:87:16:82:8b:06:ac:5c:64: 24:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:33:29:AD:7B:91:E7:FC:5F:20:AC:5C:AB:84:DD:72:7A:73:AD:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be32dcd8-5c4a-3bb6-8030-7eb5488ad52e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 168.93.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:35:5d:77:0c:61:49:ce:1f:76:bd:e6:00:67:d1:fe:59:d3: 13:c0:a6:61:20:9f:47:a8:78:6f:36:34:e1:da:ed:01:9d:72: 27:8d:1c:83:70:e0:db:71:d4:ad:85:ab:98:5b:09:a4:33:3a: 6c:ef:dc:d1:38:66:b7:ad:38:14:3c:d0:30:15:25:22:98:6e: 34:b0:06:80:62:9f:da:f3:ac:e6:4e:d1:4d:ca:c7:d2:af:6e: 82:b2:3a:94:bc:ea:20:92:b3:71:6b:7d:f6:0b:d0:e9:da:a2: 2a:99:0c:23:43:39:75:ec:b1:bc:1b:4a:ee:9a:f7:e7:f5:14: c3:8b:1c:25:e3:ce:ea:29:a9:32:d6:ec:ba:14:15:84:7c:46: 9d:b4:2b:2d:d7:d8:ac:6e:cf:03:2d:05:45:a3:60:20:cb:92: 6e:ac:72:c4:75:57:77:35:ae:51:d0:77:f5:05:43:10:ed:2d: ec:a2:ff:14:fe:92:27:2c:77:4c:7c:38:3a:b5:58:d5:7f:71: ce:56:5c:f5:fb:b8:b0:3f:73:9e:e5:ea:30:4a:13:cd:fa:a7: 94:8b:7d:81:c1:bd:23:02:e0:ea:b7:5e:d3:bc:4e:74:6a:cc: 73:9f:1f:eb:b6:0c:30:18:2e:46:e0:5c:fb:04:63:1f:d8:b4: 37:07:e3:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+C5oWynRjLOow0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk Yzc2NmYwODUtNTdhZC00MzlkLWIyNDUtYzY3ZGM1YjhkZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6ageOjcYLXLLzmw1RTsFRf6pH5UCr7DGIo5 3hol+EjMXg/R3BvqqSJWBroMR8PSSMn3A0wk8+ZvM1UGlbhhCS49FYiqyA0+2lCq tIu5S5rx2ACmfferE7vJ4h/yDdZplwsP+9pDpHk5KSL8ey+DrBKhnBp0TnLp2rJo rDR9+HUB3Zk/s+31bNeNbH8fz6pZFfUS9YnxKcnQZPl37tEy4yxTeWsoB9V+g4ZG xkKQUnVniJ5prW1SbGSNwlF5KP+pZo+SZtM/MlhP9eIxAFuRCfCt7w7EwDpgFBxp 5YhagoD/HG3hZpTVQIA0ej5ggt8VLqnKrGEBhxaCiwasXGQkEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwzKa17kef8XyCsXKuE3XJ6c63sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmUzMmRjZDgtNWM0YS0z YmI2LTgwMzAtN2ViNTQ4OGFkNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqF3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA1XXcMYUnOH3a95gBn0f5Z0xPApmEgn0eoeG82NOHa7QGdcieNHINw 4Ntx1K2Fq5hbCaQzOmzv3NE4ZretOBQ80DAVJSKYbjSwBoBin9rzrOZO0U3Kx9Kv boKyOpS86iCSs3FrffYL0OnaoiqZDCNDOXXssbwbSu6a9+f1FMOLHCXjzuopqTLW 7LoUFYR8Rp20Ky3X2KxuzwMtBUWjYCDLkm6scsR1V3c1rlHQd/UFQxDtLeyi/xT+ kicsd0x8ODq1WNV/cc5WXPX7uLA/c57l6jBKE836p5SLfYHBvSMC4Oq3XtO8TnRq zHOfH+u2DDAYLkbgXPsEYx/YtDcH4/w= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:33 2025 by rpki-client