$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa File: 80d79225-d47a-33b5-b17d-0e051345c7d6.roa (raw, json) Hash identifier: cQ9RsZSqLz+7oCsoX8xRPcA1ut8lrLrb6NNGKr+awlU= Subject key identifier: 0F:AB:1B:38:07:A5:15:E3:89:E1:29:13:E8:40:C8:F8:CE:32:17:CC Certificate issuer: /CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Certificate serial: 010D0C9F4328584B6BC7606C5D54BCC422860540 Authority key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 62592 IP address blocks: 162.219.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:60:6c:5d:54:bc:c4:22:86:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b255a31a-57d0-47dd-b6d9-71da5ea75383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:79:ef:18:dd:c5:93:a3:0e:71:c0:b0:e0: 56:71:10:19:d9:a2:37:c8:47:a5:15:97:b1:96:68: 88:14:0f:8e:01:8a:3a:af:32:b2:8c:f9:02:6a:aa: 64:51:c8:0d:ef:75:9f:52:3c:83:47:65:2b:bd:18: 7b:7b:4b:15:1e:2a:37:22:47:92:42:56:58:c2:b2: ed:8c:d0:3a:73:85:19:a3:f5:c3:1c:49:bc:42:d5: 78:56:76:3c:33:bb:2a:94:d6:eb:d7:34:7c:a6:d3: 66:aa:0c:1e:b3:97:5c:78:86:8a:be:db:41:ef:04: 5a:b1:17:31:00:b8:94:3c:ab:07:f3:5e:70:95:0d: 15:ed:c5:db:1c:af:40:7e:8a:11:47:36:2f:3a:7f: 73:f4:f2:a0:23:ff:7a:1c:ee:94:91:10:50:83:0a: ca:a5:96:4d:66:a9:bb:14:f1:90:3b:41:e0:14:5f: 11:3f:06:06:b2:92:3a:cd:f6:22:74:1c:c1:4f:af: 69:02:d4:5c:25:d2:3c:ac:77:89:0e:ab:87:ec:7b: d3:2a:ed:a3:47:31:de:fc:a4:fd:32:d7:ca:06:3c: a1:ae:bc:d9:af:94:2a:64:36:b2:f0:a6:43:b9:a5: 2b:8f:76:b2:aa:41:c7:d3:1f:af:47:d0:f0:7c:bd: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AB:1B:38:07:A5:15:E3:89:E1:29:13:E8:40:C8:F8:CE:32:17:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/80d79225-d47a-33b5-b17d-0e051345c7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.crl X509v3 Authority Key Identifier: keyid:C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer sbgp-ipAddrBlock: critical IPv4: 162.219.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:77:58:ba:8a:83:17:2f:fb:ce:fc:6e:5b:87:66:e8:8b:0a: 87:29:51:cf:b6:36:01:de:a3:e9:17:bf:7c:82:e4:91:1f:9b: 8e:a2:0c:b5:de:b8:f9:30:cb:ee:eb:63:3b:a8:34:8a:e4:37: 2b:3a:2d:41:3b:5d:73:a2:86:37:d3:a2:e6:72:28:b3:c8:31: f0:5c:11:8d:d4:96:f9:3d:c5:53:3b:35:29:cb:90:23:a0:29: 8c:05:9b:87:eb:8b:b5:a2:3a:15:6e:6b:a8:74:7f:cb:68:9a: 72:4a:58:9b:b4:d4:8b:6e:85:a6:38:06:1c:b6:c6:aa:e6:d6: c6:07:24:7f:95:14:56:5c:3d:74:1c:bc:45:b6:db:9e:df:d6: 7e:29:83:21:b1:d1:49:90:c2:10:ac:ab:93:03:7c:74:40:bf: e6:7b:38:ed:57:78:ca:78:29:31:ca:26:e2:82:9b:9d:b5:88: 9f:e8:01:d2:99:a6:0d:ac:74:6e:84:24:6f:9f:bd:25:c3:b8: f3:06:09:8c:61:5f:6b:25:d5:a5:5d:f7:72:6b:6a:ca:47:49: 75:24:3d:44:bc:9c:a8:87:ed:bc:f7:cc:ed:40:cc:62:27:97: ae:8b:da:2b:14:1a:be:8c:3f:bf:07:f9:e6:aa:58:f8:77:88: d1:a2:7c:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2BsXVS8xCKGBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZk NzRlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YjI1NWEzMWEtNTdkMC00N2RkLWI2ZDktNzFkYTVlYTc1MzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxh57xjdxZOjDnHAsOBWcRAZ2aI3yEelFZex lmiIFA+OAYo6rzKyjPkCaqpkUcgN73WfUjyDR2UrvRh7e0sVHio3IkeSQlZYwrLt jNA6c4UZo/XDHEm8QtV4VnY8M7sqlNbr1zR8ptNmqgwes5dceIaKvttB7wRasRcx ALiUPKsH815wlQ0V7cXbHK9AfooRRzYvOn9z9PKgI/96HO6UkRBQgwrKpZZNZqm7 FPGQO0HgFF8RPwYGspI6zfYidBzBT69pAtRcJdI8rHeJDquH7HvTKu2jRzHe/KT9 MtfKBjyhrrzZr5QqZDay8KZDuaUrj3ayqkHH0x+vR9DwfL1K+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+rGzgHpRXjieEpE+hAyPjOMhfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRi N2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvODBkNzkyMjUtZDQ3YS0z M2I1LWIxN2QtMGUwNTEzNDVjN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0YjdlMWItMWMyOS00MzMxLWIw ZjUtY2E5ZTIyMGZkNzRlLzMyNGI3ZTFiLTFjMjktNDMzMS1iMGY1LWNhOWUyMjBm ZDc0ZS5jcmwwHwYDVR0jBBgwFoAUxBmuPYfOYCcT0oopfHUQ97gwPoQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTll MjIwZmQ3NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx3WLqKgxcv+878bluHZuiLCocpUc+2NgHeo+kXv3yC5JEfm46iDLXe uPkwy+7rYzuoNIrkNys6LUE7XXOihjfTouZyKLPIMfBcEY3Ulvk9xVM7NSnLkCOg KYwFm4fri7WiOhVua6h0f8tomnJKWJu01ItuhaY4Bhy2xqrm1sYHJH+VFFZcPXQc vEW2257f1n4pgyGx0UmQwhCsq5MDfHRAv+Z7OO1XeMp4KTHKJuKCm521iJ/oAdKZ pg2sdG6EJG+fvSXDuPMGCYxhX2sl1aVd93JraspHSXUkPUS8nKiH7bz3zO1AzGIn l66L2isUGr6MP78H+eaqWPh3iNGifLw= -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:05 2025 by rpki-client