$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa File: a19e3195-8a84-3cd1-96c4-4347391db867.roa (raw, json) Hash identifier: i46JaKUM7uqGjW6UistExixsSka5ZKQ3+L3ZVcgOOKs= Subject key identifier: 2D:7A:45:A2:28:02:BC:90:50:7E:C8:DF:07:49:F1:5C:BD:33:42:B8 Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F4328584AF5214C35BA2C7E4D899D5740 Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 8075 IP address blocks: 162.254.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4c:35:ba:2c:7e:4d:89:9d:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=d63e0a00-ee9e-455d-93ee-a4f95218ad45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:9a:e3:3e:f7:65:19:6e:23:d6:47:22:6f: 40:72:18:b9:f2:d1:cc:c6:31:ed:8d:33:ea:92:d9: f7:ce:e3:1d:68:ff:e3:66:1b:39:e6:6d:62:c4:11: df:6b:bd:d7:18:8e:31:e4:1d:07:a4:d4:ec:a2:b6: 8e:15:0b:9d:26:74:93:1d:d3:65:75:ed:64:33:74: c8:5d:de:ad:3c:9e:39:f5:b9:26:42:b2:bb:4a:b1: 6d:70:ee:45:be:24:4d:1d:08:a7:bf:a9:90:2e:e7: ad:7c:80:80:3b:42:f2:b9:ff:75:b3:c0:cd:cf:42: 76:66:7c:9a:ad:9a:44:c4:59:ad:53:19:cb:ec:e3: 57:68:95:77:9b:25:5d:53:4a:8d:c7:9e:42:cb:0d: d2:aa:17:5f:f6:a9:98:09:18:c5:fa:7b:2c:ed:0b: 6e:67:8b:c1:23:ca:06:f7:80:a0:d4:27:fa:dc:ad: 05:ae:7c:61:c6:83:3a:66:aa:d9:ef:98:0d:b9:e1: 57:e9:9c:00:d1:cb:d0:13:76:c5:c4:24:12:e3:2d: f4:a2:ef:ed:d7:3c:01:ae:77:a5:79:b2:1f:d1:53: 6e:9d:56:5f:8f:17:ef:50:6c:60:4e:43:46:62:98: ae:81:99:3d:cc:01:0c:5c:79:21:2f:e0:68:30:e1: c6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7A:45:A2:28:02:BC:90:50:7E:C8:DF:07:49:F1:5C:BD:33:42:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/a19e3195-8a84-3cd1-96c4-4347391db867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: 162.254.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:59:89:01:e5:e7:f0:b4:3c:53:38:4a:84:a0:b7:d3:15:69: 29:6b:88:a6:31:23:60:02:28:f0:d9:01:06:43:57:fc:b4:bf: 3d:37:b9:21:c1:56:44:85:b7:65:f7:c4:78:ea:8a:de:f1:15: 4e:17:f9:8a:89:6c:d1:4b:5d:95:67:67:d3:ad:9a:f9:ba:60: 3c:08:72:3e:87:45:04:f5:60:17:8f:8d:86:2f:40:3f:97:7d: 96:15:cc:71:09:dd:32:49:a1:1c:75:35:e5:25:e0:df:d5:df: ea:27:67:4a:ff:8b:49:e6:8b:26:16:2a:1a:e2:bb:96:f0:5a: a5:81:79:a4:6f:8b:46:91:ff:8b:1b:40:27:6c:91:5d:90:72: c6:23:09:3e:3c:53:87:2e:8a:13:fa:45:53:3b:be:d9:04:0b: 56:05:a4:dd:6f:b6:98:13:76:1d:e8:25:f2:8f:3d:1d:fa:1e: 28:7d:61:67:69:a2:db:b8:4e:fc:cf:4d:e7:a4:74:d6:48:7c: 9d:87:9e:87:01:53:7f:7e:65:cb:4e:2d:f4:62:b3:d1:8f:60: 81:7c:df:49:0c:c9:e4:be:81:8f:77:98:d0:10:87:34:3a:5f: e7:52:3e:43:ce:5a:ca:db:79:bc:3f:4d:df:06:a2:3e:72:dc: 49:69:c4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUw1uix+TYmdV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDYzZTBhMDAtZWU5ZS00NTVkLTkzZWUtYTRmOTUyMThhZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Ca4z73ZRluI9ZHIm9Achi58tHMxjHtjTPq ktn3zuMdaP/jZhs55m1ixBHfa73XGI4x5B0HpNTsoraOFQudJnSTHdNlde1kM3TI Xd6tPJ459bkmQrK7SrFtcO5FviRNHQinv6mQLuetfICAO0Lyuf91s8DNz0J2Znya rZpExFmtUxnL7ONXaJV3myVdU0qNx55Cyw3Sqhdf9qmYCRjF+nss7QtuZ4vBI8oG 94Cg1Cf63K0FrnxhxoM6ZqrZ75gNueFX6ZwA0cvQE3bFxCQS4y30ou/t1zwBrnel ebIf0VNunVZfjxfvUGxgTkNGYpiugZk9zAEMXHkhL+BoMOHGdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC16RaIoAryQUH7I3wdJ8Vy9M0K4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvYTE5ZTMxOTUtOGE4NC0z Y2QxLTk2YzQtNDM0NzM5MWRiODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov73MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtZiQHl5/C0PFM4SoSgt9MVaSlriKYxI2ACKPDZAQZDV/y0vz03uSHB VkSFt2X3xHjqit7xFU4X+YqJbNFLXZVnZ9Otmvm6YDwIcj6HRQT1YBePjYYvQD+X fZYVzHEJ3TJJoRx1NeUl4N/V3+onZ0r/i0nmiyYWKhriu5bwWqWBeaRvi0aR/4sb QCdskV2QcsYjCT48U4cuihP6RVM7vtkEC1YFpN1vtpgTdh3oJfKPPR36Hih9YWdp otu4TvzPTeekdNZIfJ2HnocBU39+ZctOLfRis9GPYIF830kMyeS+gY93mNAQhzQ6 X+dSPkPOWsrbebw/Td8Goj5y3ElpxNk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:11:17 2025 by rpki-client