$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa File: a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa (raw, json) Hash identifier: woCSt20GAK0MKIhbH+vFP+C/1CbBt8lxJAdD6lbujf4= Subject key identifier: DE:5E:C7:AC:A9:02:51:6A:11:74:09:31:91:27:F1:1B:9F:11:17:1A Certificate issuer: /CN=25200eb8-bc93-4e8b-afa9-05e635b02746 Certificate serial: 010D0C9F4328584BB02D11EF4A97040E21A39114 Authority key identifier: 8C:6F:E1:DB:DA:07:93:01:A1:F1:55:59:1A:12:B3:EC:F9:BE:1D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 395821 IP address blocks: 162.217.128.0/22 maxlen: 24 204.16.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:11:ef:4a:97:04:0e:21:a3:91:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25200eb8-bc93-4e8b-afa9-05e635b02746 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=578753a4-6b3d-4958-a378-5c5abf82152c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:60:cf:ce:20:9e:0d:6d:a2:2f:f2:40:c6:5f: 9d:0d:06:ca:1c:91:e4:eb:41:b3:62:0a:54:79:8e: 15:d8:d2:37:3b:2c:c6:d2:e6:da:d7:4b:af:39:2d: f3:52:ed:3d:eb:c4:d8:04:21:5e:36:eb:67:fb:99: eb:9e:4a:aa:2b:32:18:57:81:a6:6a:21:c7:29:95: 57:e6:9d:c2:04:56:ca:16:3d:8b:eb:b3:80:c3:92: 98:20:10:03:1d:a2:b1:74:95:72:1f:4d:0d:85:e5: ac:ab:e6:f0:9b:e8:d6:8f:f8:a9:6a:62:0c:6d:5e: a6:ba:14:11:b4:3d:21:2f:a7:14:1e:9b:70:08:10: 1f:36:31:82:05:50:92:aa:ae:56:60:e7:6f:a5:f9: 1a:29:1f:77:0c:9d:4b:6e:de:3c:95:e0:cb:fd:7a: 98:cc:a9:64:d7:81:54:2b:10:ae:df:d2:33:7d:db: cf:6f:35:88:55:89:f8:04:ed:d3:5d:fe:84:20:95: 16:a9:f2:8d:bb:57:ec:4a:dc:30:5f:ab:e5:01:9e: 2d:34:12:ec:c2:10:4e:d0:b9:ca:cf:11:cd:e1:4f: 30:f7:2d:76:e7:7f:87:08:91:1b:33:68:b4:bd:15: 83:56:5a:01:c0:c4:0d:0e:a0:c7:e0:ea:f0:3d:e1: 82:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:C7:AC:A9:02:51:6A:11:74:09:31:91:27:F1:1B:9F:11:17:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/a82ed3cd-b524-3ac3-af6c-58576c65c2a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746/25200eb8-bc93-4e8b-afa9-05e635b02746.crl X509v3 Authority Key Identifier: keyid:8C:6F:E1:DB:DA:07:93:01:A1:F1:55:59:1A:12:B3:EC:F9:BE:1D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25200eb8-bc93-4e8b-afa9-05e635b02746.cer sbgp-ipAddrBlock: critical IPv4: 162.217.128.0/22 204.16.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ee:1f:75:a8:54:01:73:b6:5f:0f:2c:93:b1:4d:99:4b:68: 46:ea:21:a5:3b:e1:0a:bf:a3:42:15:57:cb:0e:23:7a:df:90: d5:29:27:47:a5:77:34:f2:f2:77:a0:8f:2b:10:7c:fc:95:5e: 53:eb:9e:cf:76:40:b7:ea:5c:87:28:d6:ca:54:4d:0e:3c:d8: f4:84:20:39:aa:99:67:a7:1b:22:1d:e9:c0:4b:c4:24:65:87: cf:c1:33:f6:ba:e5:f0:70:bc:23:bc:43:d8:85:aa:d9:65:85: 59:0f:0a:dd:c0:69:8f:95:58:41:df:20:7e:a5:b7:40:e2:5c: ef:04:db:4d:74:15:8a:1e:b9:5e:1e:77:70:73:b8:af:29:ae: 51:ca:c2:09:31:45:b9:0f:4d:6e:b8:bf:9a:58:31:b1:15:15: ee:a0:2a:2a:6a:0d:10:56:b6:00:7c:09:03:8b:18:36:34:ad: 29:36:5c:80:c0:81:f5:8a:d8:df:3f:3f:f4:26:da:18:e9:ec: 7c:22:87:df:b8:2d:bc:52:7a:bc:3e:c9:ba:72:b4:44:bd:34: 88:60:fa:80:34:54:fe:32:15:8d:1a:df:bb:99:c0:3d:77:ca: 34:62:32:68:95:7d:eb:85:33:bb:03:0d:2b:03:c6:b8:00:8b: f0:90:ef:f0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuwLRHvSpcEDiGjkRQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyMDBlYjgtYmM5My00ZThiLWFmYTktMDVlNjM1YjAy NzQ2MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NTc4NzUzYTQtNmIzZC00OTU4LWEzNzgtNWM1YWJmODIxNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGDPziCeDW2iL/JAxl+dDQbKHJHk60GzYgpU eY4V2NI3OyzG0uba10uvOS3zUu0968TYBCFeNutn+5nrnkqqKzIYV4GmaiHHKZVX 5p3CBFbKFj2L67OAw5KYIBADHaKxdJVyH00NheWsq+bwm+jWj/ipamIMbV6muhQR tD0hL6cUHptwCBAfNjGCBVCSqq5WYOdvpfkaKR93DJ1Lbt48leDL/XqYzKlk14FU KxCu39IzfdvPbzWIVYn4BO3TXf6EIJUWqfKNu1fsStwwX6vlAZ4tNBLswhBO0LnK zxHN4U8w9y1253+HCJEbM2i0vRWDVloBwMQNDqDH4OrwPeGCdQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN5ex6ypAlFqEXQJMZEn8RufERcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNTIw MGViOC1iYzkzLTRlOGItYWZhOS0wNWU2MzViMDI3NDYvYTgyZWQzY2QtYjUyNC0z YWMzLWFmNmMtNTg1NzZjNjVjMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjUyMDBlYjgtYmM5My00ZThiLWFm YTktMDVlNjM1YjAyNzQ2LzI1MjAwZWI4LWJjOTMtNGU4Yi1hZmE5LTA1ZTYzNWIw Mjc0Ni5jcmwwHwYDVR0jBBgwFoAUjG/h29oHkwGh8VVZGhKz7Pm+HXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNTIwMGViOC1iYzkzLTRlOGItYWZhOS0wNWU2 MzViMDI3NDYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotmAAwQB zBAsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIHuH3WoVAFztl8PLJOxTZlLaEbqIaU74Qq/o0IVV8sOI3rf kNUpJ0eldzTy8negjysQfPyVXlPrns92QLfqXIco1spUTQ482PSEIDmqmWenGyId 6cBLxCRlh8/BM/a65fBwvCO8Q9iFqtllhVkPCt3AaY+VWEHfIH6lt0DiXO8E2010 FYoeuV4ed3BzuK8prlHKwgkxRbkPTW64v5pYMbEVFe6gKipqDRBWtgB8CQOLGDY0 rSk2XIDAgfWK2N8/P/Qm2hjp7Hwih9+4LbxSerw+ybpytES9NIhg+oA0VP4yFY0a 37uZwD13yjRiMmiVfeuFM7sDDSsDxrgAi/CQ7/A= -----END CERTIFICATE-----Generated at Thu Nov 6 07:52:57 2025 by rpki-client