$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa File: 67f904de-0911-32b9-bf9c-27f543b6f323.roa (raw, json) Hash identifier: n/H1YkXNyQ+rmMue57Z4FB3CCrUumWvf6+AAd5tbqCc= Subject key identifier: BD:EE:5C:DD:79:24:9C:FF:37:00:7A:ED:D0:E5:5E:63:5C:2A:04:6A Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584B21CC172BDE9C98D01CA41020 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 162.247.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:17:2b:de:9c:98:d0:1c:a4:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=6839334f-f0d5-42eb-ab45-fa2187572e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:93:05:84:c0:7e:70:1e:25:b5:79:3f:7a: 72:9b:aa:16:0d:f0:e7:00:b7:93:49:05:d1:c1:c1: 97:7c:c5:43:30:4c:05:4c:a6:8f:c4:15:85:ed:47: af:27:cd:92:17:bc:be:b5:55:00:24:a3:66:98:a8: 7c:bb:14:87:f5:3e:18:b6:75:2c:9e:92:d3:61:7a: 06:68:94:d4:ac:ba:a2:35:3f:96:dd:b7:91:f1:cf: c9:34:2d:18:b0:fc:d4:84:06:34:27:52:de:59:1d: b5:61:6a:0f:ff:62:53:ec:c1:2a:98:c4:6d:15:56: 0c:84:16:fc:77:4b:22:4b:e8:82:82:dd:5e:66:56: 74:8b:1f:83:1e:b8:05:a0:d0:b7:fa:72:fd:31:7a: 63:bf:c9:0e:ea:0a:30:4c:c0:3d:1d:42:22:66:e0: 82:9a:79:ea:b5:ee:43:12:62:05:7b:aa:c5:fe:06: 91:2b:65:ef:72:dc:b5:42:3b:a4:7d:d3:32:ba:1c: 37:33:12:33:ce:65:66:cd:e1:08:61:c6:2c:fc:b6: 5a:7f:f2:72:a6:97:57:a0:67:54:70:66:35:54:00: 81:03:35:ab:b6:5c:c3:78:0b:d7:6a:a2:ce:9a:1f: 01:5f:d9:48:6f:1a:08:8e:cf:1b:a4:b6:cd:16:2a: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EE:5C:DD:79:24:9C:FF:37:00:7A:ED:D0:E5:5E:63:5C:2A:04:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:46:26:2d:aa:48:6f:b9:a2:7c:2f:7c:8a:07:13:4e:53:4d: a6:cd:d2:f9:34:d6:49:b8:c7:ec:86:31:cd:d5:97:d8:e5:e2: c5:14:5d:15:6e:50:f5:64:5b:b7:e3:98:d0:d3:20:b9:3c:2e: b0:f6:c9:be:56:9b:38:20:94:70:46:d5:73:5e:b4:e0:d2:b2: b4:d6:b0:43:96:00:0b:86:79:7a:3b:73:ce:b3:4d:e9:2b:44: 4f:5a:f1:62:b9:24:8f:f0:8a:95:87:06:06:99:3b:6a:ae:1a: 9c:ae:40:54:f6:dc:42:36:39:bc:d0:df:27:a2:c0:1d:5a:cf: 2c:ed:cb:96:0b:cd:e6:f4:c7:a1:9f:fe:3d:d9:94:ac:69:04: b8:60:56:ce:70:cc:85:5b:86:c1:9c:cc:6c:27:09:1a:e5:72: b5:e6:8f:7a:23:23:8a:0e:e9:cd:24:15:60:9c:6a:48:11:b2: 75:b4:16:45:22:99:0f:01:da:ae:12:a4:92:98:70:fa:e4:33: 2d:09:42:81:b2:76:46:f9:3b:36:aa:25:36:bd:e5:35:40:46: a5:f7:22:00:42:ad:61:cc:ce:8b:59:1a:77:02:0b:51:34:91: b3:9b:b8:dc:1a:b9:d0:9a:12:1a:fc:34:35:52:f1:3e:c4:35: ea:a4:ff:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBcr3pyY0BykECAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NjgzOTMzNGYtZjBkNS00MmViLWFiNDUtZmEyMTg3NTcyZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw2TBYTAfnAeJbV5P3pym6oWDfDnALeTSQXR wcGXfMVDMEwFTKaPxBWF7UevJ82SF7y+tVUAJKNmmKh8uxSH9T4YtnUsnpLTYXoG aJTUrLqiNT+W3beR8c/JNC0YsPzUhAY0J1LeWR21YWoP/2JT7MEqmMRtFVYMhBb8 d0siS+iCgt1eZlZ0ix+DHrgFoNC3+nL9MXpjv8kO6gowTMA9HUIiZuCCmnnqte5D EmIFe6rF/gaRK2Xvcty1QjukfdMyuhw3MxIzzmVmzeEIYcYs/LZaf/JyppdXoGdU cGY1VACBAzWrtlzDeAvXaqLOmh8BX9lIbxoIjs8bpLbNFio4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3uXN15JJz/NwB67dDlXmNcKgRqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNjdmOTA0ZGUtMDkxMS0z MmI5LWJmOWMtMjdmNTQzYjZmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExGJi2qSG+5onwvfIoHE05TTabN0vk01km4x+yGMc3Vl9jl4sUUXRVu UPVkW7fjmNDTILk8LrD2yb5WmzgglHBG1XNetODSsrTWsEOWAAuGeXo7c86zTekr RE9a8WK5JI/wipWHBgaZO2quGpyuQFT23EI2ObzQ3yeiwB1azyzty5YLzeb0x6Gf /j3ZlKxpBLhgVs5wzIVbhsGczGwnCRrlcrXmj3ojI4oO6c0kFWCcakgRsnW0FkUi mQ8B2q4SpJKYcPrkMy0JQoGydkb5OzaqJTa95TVARqX3IgBCrWHMzotZGncCC1E0 kbObuNwaudCaEhr8NDVS8T7ENeqk/4k= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:19 2025 by rpki-client