$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa File: 5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa (raw, json) Hash identifier: 2qAwrRd0zVM3J+MV/uTGbnA2WMEF5WlORQ/+3/Aefvc= Subject key identifier: 29:D5:B5:4E:57:70:F6:59:B1:93:18:59:3A:7E:46:FC:22:E0:D3:CE Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584B8BE225F93B45966F72B08500 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 29838 IP address blocks: 162.254.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:25:f9:3b:45:96:6f:72:b0:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=839a4c09-4678-42b0-9d96-3ded35ff0a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:11:43:ae:d2:da:8d:cd:4f:43:48:3f:3f: 16:6e:71:f1:51:d9:1f:9e:2b:19:0f:6b:dd:12:e6: 5f:4a:8b:c0:05:72:14:a4:a0:d4:52:8d:f3:ac:b4: a7:ca:3c:77:69:00:f0:d4:37:8d:55:a2:f7:4e:6f: e5:b4:47:b8:65:30:b1:3b:4b:28:f9:85:91:49:4a: 63:8f:08:2e:cc:bf:ca:55:3f:50:60:76:46:9a:c3: bc:0f:16:72:db:b3:25:c4:01:8a:83:ee:ec:57:be: ea:2b:63:7a:5e:5f:7c:29:4f:22:05:76:7f:6b:7f: df:16:c6:ec:90:f1:f3:3c:ff:52:95:f9:a9:b8:33: 87:53:67:1b:5c:bc:fa:b0:8d:7b:83:59:67:e1:ed: 9d:74:1f:6f:d5:d2:1d:13:6e:52:b5:96:82:ce:d1: 27:10:ce:94:0d:99:50:86:5d:fc:37:cc:07:12:a7: 3d:13:93:74:eb:01:5c:0e:da:e4:c8:25:92:7c:f6: 29:05:5d:c1:3f:ee:f2:5e:20:c7:88:da:1b:da:e2: 0d:e5:58:dd:8a:4a:5f:10:a2:5e:8b:39:ca:5a:4f: ac:88:39:b2:a9:74:66:4d:e7:ad:cd:39:45:eb:7e: 56:02:78:7b:1b:c9:8b:9e:70:52:64:24:43:6e:1a: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D5:B5:4E:57:70:F6:59:B1:93:18:59:3A:7E:46:FC:22:E0:D3:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/5d4ad354-dd38-3033-bd7d-0f275bf0baf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:31:11:71:2d:70:ad:4c:ed:a0:2a:ff:b4:eb:b8:03:78:ea: ba:e4:7e:ff:1f:8d:bd:62:dd:2a:75:75:1b:b8:85:27:bb:7f: cd:da:c1:f0:93:75:cb:ac:57:78:01:4e:15:d8:9d:78:fe:84: 18:12:fa:20:f7:b9:06:e6:e7:81:b5:42:dc:29:fe:93:33:e5: e5:bc:5e:dd:d0:68:8a:61:ff:ab:00:a7:8b:bf:75:12:c0:68: e9:98:9d:19:02:f9:08:08:a2:b9:d7:a9:84:f9:60:5d:1a:2d: 71:d0:e3:71:86:fd:88:4b:6f:0e:43:f8:e7:e9:e0:15:76:c6: ea:90:2d:d7:e3:6e:fc:3c:e4:aa:3f:bf:fc:7f:c0:69:4b:8f: 28:af:26:c3:9d:ac:69:ca:13:74:50:ce:ac:64:b6:2d:c1:6c: 47:54:4d:01:9c:47:c1:05:0f:f9:c6:fb:6d:c1:eb:69:22:ec: c3:d2:bc:84:26:a3:bc:20:16:ec:b7:6b:6f:2d:8b:97:1c:11: b6:e8:2f:0a:e9:1e:32:2a:96:8a:14:96:6f:a0:90:61:f5:b3: a0:f0:06:30:b0:a9:a7:c5:fa:d2:25:24:c0:46:56:ca:80:0a: ef:8a:bc:85:60:8b:89:fd:4c:d7:15:40:69:5e:67:1a:70:92: 82:f7:db:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iX5O0WWb3KwhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ODM5YTRjMDktNDY3OC00MmIwLTlkOTYtM2RlZDM1ZmYwYTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAcRQ67S2o3NT0NIPz8WbnHxUdkfnisZD2vd EuZfSovABXIUpKDUUo3zrLSnyjx3aQDw1DeNVaL3Tm/ltEe4ZTCxO0so+YWRSUpj jwguzL/KVT9QYHZGmsO8DxZy27MlxAGKg+7sV77qK2N6Xl98KU8iBXZ/a3/fFsbs kPHzPP9SlfmpuDOHU2cbXLz6sI17g1ln4e2ddB9v1dIdE25StZaCztEnEM6UDZlQ hl38N8wHEqc9E5N06wFcDtrkyCWSfPYpBV3BP+7yXiDHiNob2uIN5VjdikpfEKJe iznKWk+siDmyqXRmTeetzTlF635WAnh7G8mLnnBSZCRDbhpqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnVtU5XcPZZsZMYWTp+Rvwi4NPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNWQ0YWQzNTQtZGQzOC0z MDMzLWJkN2QtMGYyNzViZjBiYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYxEXEtcK1M7aAq/7TruAN46rrkfv8fjb1i3Sp1dRu4hSe7f83awfCT dcusV3gBThXYnXj+hBgS+iD3uQbm54G1Qtwp/pMz5eW8Xt3QaIph/6sAp4u/dRLA aOmYnRkC+QgIornXqYT5YF0aLXHQ43GG/YhLbw5D+Ofp4BV2xuqQLdfjbvw85Ko/ v/x/wGlLjyivJsOdrGnKE3RQzqxkti3BbEdUTQGcR8EFD/nG+23B62ki7MPSvIQm o7wgFuy3a28ti5ccEbboLwrpHjIqlooUlm+gkGH1s6DwBjCwqafF+tIlJMBGVsqA Cu+KvIVgi4n9TNcVQGleZxpwkoL3284= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:17 2025 by rpki-client