$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/85ad93df-d449-3700-80f8-7bf056787ba3.roa File: 85ad93df-d449-3700-80f8-7bf056787ba3.roa (raw, json) Hash identifier: +8VLzaa8bhwmOPhmSm8aeu09Xc86xSGvfuhX6woazMo= Subject key identifier: 96:B4:93:55:F5:03:4A:A5:D6:72:C5:CC:55:72:97:DB:63:B6:C9:44 Certificate issuer: /CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Certificate serial: 010D0C9F4328584B715CB75D0E3DE2F612BF1CD0 Authority key identifier: DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/85ad93df-d449-3700-80f8-7bf056787ba3.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 162.253.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:b7:5d:0e:3d:e2:f6:12:bf:1c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f012270b-0cc7-458a-a825-31a636e7ef1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:5f:e3:15:75:96:59:41:77:9d:0a:d2:40: 4b:91:96:5f:86:98:54:b6:c0:4e:a3:a5:f9:5f:ed: f7:46:43:9a:fe:78:f9:5c:fc:77:21:c4:e9:c7:e5: a1:cb:94:83:0b:f9:68:bd:23:dd:a7:8f:f8:97:61: 51:2a:e1:4a:ff:65:54:5e:55:87:5a:7d:13:60:8e: 2e:fb:ba:c9:4a:74:f1:a4:74:dc:19:90:43:f4:a9: 9d:e8:30:38:de:eb:41:25:1d:bd:9c:0a:42:db:e9: c0:60:0c:28:5d:9e:3a:92:c9:60:18:5d:5d:eb:96: 1c:8d:62:fd:ab:c3:70:0e:52:2e:68:dc:94:73:bc: 64:bf:cd:56:58:82:e2:85:2e:4c:43:b5:7e:9d:30: 3b:63:76:ec:7b:cc:4d:39:49:95:eb:07:df:76:e1: bf:77:ed:01:f1:c9:3d:f4:4b:d2:a7:53:8f:c5:05: 7e:94:91:ef:db:71:a5:52:5c:88:58:a6:79:6d:40: ea:f6:2f:a8:76:e5:fd:89:54:c5:38:ab:d6:10:4c: 7c:60:99:ff:92:3f:05:a9:ab:c8:43:38:ee:76:36: eb:bb:66:3f:cd:fe:ab:a8:53:38:f4:c5:18:6c:fa: 0d:09:04:ed:c4:97:7d:8f:46:64:76:b2:53:53:0b: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:93:55:F5:03:4A:A5:D6:72:C5:CC:55:72:97:DB:63:B6:C9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/85ad93df-d449-3700-80f8-7bf056787ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl X509v3 Authority Key Identifier: keyid:DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer sbgp-ipAddrBlock: critical IPv4: 162.253.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:20:62:94:c1:4d:69:0a:72:54:6e:22:ab:fb:e2:54:b0:32: 88:33:da:d2:bd:74:9e:f7:2a:97:49:f2:58:80:a7:a6:e5:91: cb:1e:1b:e2:4d:ed:b1:0d:83:74:0f:6e:d5:11:8e:f5:f4:3b: 1a:ae:82:d3:b4:99:28:73:f9:42:6b:60:bd:3c:99:e9:24:d4: ce:c1:07:79:fe:4e:99:70:b0:4b:12:f2:99:a6:b2:4c:60:e1: 2b:b4:54:ee:8c:36:0c:c0:8a:bf:e3:8e:c2:01:10:18:f3:46: 00:e6:34:c1:b9:77:5b:fd:10:9e:e3:6e:18:81:04:63:2f:db: 3b:ad:64:2f:e1:78:44:ba:51:d2:60:b0:55:2d:8f:43:09:3b: c7:28:38:36:f5:02:48:34:49:19:63:40:23:90:aa:8c:f5:45: 3d:6c:a6:2b:cf:2b:3e:84:64:b8:d2:61:77:00:47:cd:09:82: ab:41:98:cb:4c:a3:46:bc:f4:db:6a:0b:7d:17:d7:d3:40:d0: 17:e2:8e:9e:29:99:a4:ee:be:02:65:dc:d8:90:70:43:4b:87: bc:c2:29:a8:bc:c8:96:ec:cb:77:e3:97:fb:b9:28:d3:f9:d4: 92:7e:64:8d:32:e4:e7:59:0d:a3:32:d7:14:84:35:40:04:31: b3:f8:66:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLddDj3i9hK/HNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdkYTFmNGEtZGE3Yi00NGNmLTg0MjctYTc0NjE1ZDlh NTNlMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjAxMjI3MGItMGNjNy00NThhLWE4MjUtMzFhNjM2ZTdlZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorpf4xV1lllBd50K0kBLkZZfhphUtsBOo6X5 X+33RkOa/nj5XPx3IcTpx+Why5SDC/lovSPdp4/4l2FRKuFK/2VUXlWHWn0TYI4u +7rJSnTxpHTcGZBD9Kmd6DA43utBJR29nApC2+nAYAwoXZ46kslgGF1d65YcjWL9 q8NwDlIuaNyUc7xkv81WWILihS5MQ7V+nTA7Y3bse8xNOUmV6wffduG/d+0B8ck9 9EvSp1OPxQV+lJHv23GlUlyIWKZ5bUDq9i+oduX9iVTFOKvWEEx8YJn/kj8FqavI Qzjudjbru2Y/zf6rqFM49MUYbPoNCQTtxJd9j0ZkdrJTUwt1tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa0k1X1A0ql1nLFzFVyl9tjtslEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81N2Rh MWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2MTVkOWE1M2UvODVhZDkzZGYtZDQ0OS0z NzAwLTgwZjgtN2JmMDU2Nzg3YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTdkYTFmNGEtZGE3Yi00NGNmLTg0 MjctYTc0NjE1ZDlhNTNlLzU3ZGExZjRhLWRhN2ItNDRjZi04NDI3LWE3NDYxNWQ5 YTUzZS5jcmwwHwYDVR0jBBgwFoAU3FkuqnL/ai5aXRbcKWR980gMKgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81N2RhMWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2 MTVkOWE1M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKogYpTBTWkKclRuIqv74lSwMogz2tK9dJ73KpdJ8liAp6blkcseG+JN 7bENg3QPbtURjvX0OxqugtO0mShz+UJrYL08mekk1M7BB3n+TplwsEsS8pmmskxg 4Su0VO6MNgzAir/jjsIBEBjzRgDmNMG5d1v9EJ7jbhiBBGMv2zutZC/heES6UdJg sFUtj0MJO8coODb1Akg0SRljQCOQqoz1RT1spivPKz6EZLjSYXcAR80JgqtBmMtM o0a89NtqC30X19NA0Bfijp4pmaTuvgJl3NiQcENLh7zCKai8yJbsy3fjl/u5KNP5 1JJ+ZI0y5OdZDaMy1xSENUAEMbP4Zu4= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:06 2025 by rpki-client