$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa File: 1c34de81-a92a-31ca-993f-2c9182338067.roa (raw, json) Hash identifier: KDSTk1+iGXtRyc67tSAbr6ST+t0tFEjEeqPSJsbGK4Q= Subject key identifier: 07:66:53:CC:8E:DC:6A:EB:53:C1:06:53:43:B2:5A:E9:31:A8:A8:4E Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F4328584B663200BC38E46D41798EF1E0 Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 8075 IP address blocks: 162.254.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:00:bc:38:e4:6d:41:79:8e:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=2a1bdaf3-2eda-44be-b474-75f4547374c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8d:e8:79:e5:f1:ea:d1:7d:da:7a:7a:ab:06: 6b:3b:6b:02:12:3a:22:50:66:e4:a5:c9:90:a5:3c: 6a:3c:34:d9:bf:6e:a6:3f:6a:b8:f1:50:4e:46:fd: 39:1e:bc:0b:71:dd:dc:e7:0e:c5:35:a7:08:79:de: bc:31:24:00:5c:8d:76:06:30:55:25:01:82:a6:e3: 5c:ef:26:d9:e6:b0:3b:8b:d8:e2:42:54:01:79:66: ba:b5:20:bb:5a:a5:ec:df:1e:5d:d4:15:94:04:a0: 74:14:49:2c:12:de:58:c4:7f:15:84:d6:64:97:f2: 14:66:fa:01:e8:2d:b9:b5:49:e0:79:af:07:e3:ce: 84:37:d0:60:85:29:56:7a:e6:b6:eb:6d:ca:25:98: 3d:bb:a9:7b:f2:c8:03:d5:59:2f:f6:74:d8:0d:54: e3:17:1a:6f:17:1f:cd:77:2e:03:d1:ce:b4:84:c5: 58:f2:57:40:01:7f:34:e7:c0:6e:96:0c:e3:f7:4f: a3:2a:5e:0f:19:45:dc:9a:6e:11:9c:9e:39:70:4a: 3f:ab:01:fc:38:ca:36:01:bc:1b:b4:20:cc:28:bc: aa:e1:05:2f:aa:1b:dd:82:40:83:3d:5a:10:22:d6: 27:89:86:e0:88:db:41:cb:9d:1c:4e:26:1f:0d:46: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:66:53:CC:8E:DC:6A:EB:53:C1:06:53:43:B2:5A:E9:31:A8:A8:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/1c34de81-a92a-31ca-993f-2c9182338067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: 162.254.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:51:52:6b:d6:4e:93:a4:b8:33:02:84:20:9d:14:33:0c:a0: 2e:4c:3b:e9:92:6d:2c:fe:87:a8:eb:34:69:5e:9f:46:4d:b3: ac:33:d3:fb:42:07:26:30:9d:73:d6:30:2f:0e:7e:81:bc:46: 35:ce:8d:4c:c9:04:6e:df:eb:30:00:11:3c:fb:37:aa:d9:a2: b8:43:0e:6c:cd:77:e3:4c:e9:60:15:34:fc:01:8e:80:90:12: 96:cf:f7:ed:b5:86:2d:9c:e3:2e:29:29:29:fd:dd:90:6f:5c: b8:e4:03:8e:ac:13:68:ce:b3:46:d3:2b:99:0b:f9:e4:b2:66: a7:a6:35:81:6f:a7:4f:88:d6:ce:e2:bf:d0:38:a3:e4:4e:6d: e7:c4:aa:bb:ca:c2:26:f3:9f:de:a4:b9:7c:1c:ce:97:e8:27: bb:1a:5f:dc:67:ad:66:61:ed:41:07:6b:0e:e4:4b:b7:07:0f: 94:9d:b3:3d:f7:bd:40:db:a0:ea:0d:e2:0a:22:0e:f1:ba:18: 7b:34:45:e7:ad:9a:b7:a9:e6:a0:4e:1c:19:64:91:a5:2a:98: e8:f6:5f:0a:09:e1:96:e2:00:3e:cd:e0:cd:06:66:ce:cf:12: 9d:6f:dc:5a:4d:22:1e:99:9a:b4:51:1a:43:a5:cf:9e:c4:59: eb:02:0f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgC8OORtQXmO8eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MmExYmRhZjMtMmVkYS00NGJlLWI0NzQtNzVmNDU0NzM3NGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr43oeeXx6tF92np6qwZrO2sCEjoiUGbkpcmQ pTxqPDTZv26mP2q48VBORv05HrwLcd3c5w7FNacIed68MSQAXI12BjBVJQGCpuNc 7ybZ5rA7i9jiQlQBeWa6tSC7WqXs3x5d1BWUBKB0FEksEt5YxH8VhNZkl/IUZvoB 6C25tUngea8H486EN9BghSlWeua2623KJZg9u6l78sgD1Vkv9nTYDVTjFxpvFx/N dy4D0c60hMVY8ldAAX8058Bulgzj90+jKl4PGUXcmm4RnJ45cEo/qwH8OMo2Abwb tCDMKLyq4QUvqhvdgkCDPVoQItYniYbgiNtBy50cTiYfDUbQHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdmU8yO3GrrU8EGU0OyWukxqKhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvMWMzNGRlODEtYTkyYS0z MWNhLTk5M2YtMmM5MTgyMzM4MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov71MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlRUmvWTpOkuDMChCCdFDMMoC5MO+mSbSz+h6jrNGlen0ZNs6wz0/tC ByYwnXPWMC8OfoG8RjXOjUzJBG7f6zAAETz7N6rZorhDDmzNd+NM6WAVNPwBjoCQ EpbP9+21hi2c4y4pKSn93ZBvXLjkA46sE2jOs0bTK5kL+eSyZqemNYFvp0+I1s7i v9A4o+RObefEqrvKwibzn96kuXwczpfoJ7saX9xnrWZh7UEHaw7kS7cHD5Sdsz33 vUDboOoN4goiDvG6GHs0Reetmrep5qBOHBlkkaUqmOj2XwoJ4ZbiAD7N4M0GZs7P Ep1v3FpNIh6ZmrRRGkOlz57EWesCD1I= -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:57 2025 by rpki-client