$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa File: e9e5bca2-5780-3ae5-8904-89af2a588865.roa (raw, json) Hash identifier: XSrgDPY2MJseBagXjHlStK/9S/OXXVZSFTblQrAL3aw= Subject key identifier: 35:84:6E:A1:6C:CF:81:65:74:E0:A4:AE:67:8F:CA:A2:C0:87:4A:94 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584BA667ABA6FD0A3D8908FF4D80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 20253 IP address blocks: 162.222.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ab:a6:fd:0a:3d:89:08:ff:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=527015f2-7522-41ef-aa2b-1c165fbcf83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:99:dd:34:89:62:61:37:1c:52:b9:85:53: c1:5d:45:62:3a:03:e0:e0:a4:46:18:56:3d:20:db: a5:6b:17:79:85:fc:d7:28:50:0a:fa:ed:52:9a:f1: 9c:d2:58:75:e3:2f:e4:bf:9f:95:4a:a3:14:39:c5: 27:f8:14:6c:f8:b5:00:22:07:fd:04:4a:43:b8:68: ab:9f:01:91:e3:71:6e:5c:9d:9a:3f:9f:81:a3:4b: b5:03:c0:06:c5:36:60:2d:e1:bd:da:1a:d7:3f:8f: 40:e1:f8:9e:ee:4f:a3:75:62:5a:9a:88:37:50:27: 48:0f:4e:e6:5e:f8:54:e8:ec:95:36:83:d1:7d:cb: cf:b2:72:e7:6a:59:8c:88:94:e3:b1:25:78:f4:a6: 12:bf:5b:cd:46:f3:bb:85:3e:27:3f:fb:bf:af:bc: c0:d3:ec:9f:3e:12:d2:3a:2f:d3:1f:0a:92:d4:f4: de:0f:b9:99:fb:63:30:71:ce:11:17:88:a5:6f:6d: af:cb:03:29:d7:b9:17:f5:d8:83:ab:6b:e0:3c:26: 40:1f:dc:34:c3:8d:3d:2c:1d:18:c7:55:cf:8a:28: e0:1d:39:a4:74:66:49:29:19:42:e5:39:01:9d:8d: 9a:30:49:9a:38:f2:69:40:30:52:df:07:cd:46:8f: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:84:6E:A1:6C:CF:81:65:74:E0:A4:AE:67:8F:CA:A2:C0:87:4A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/e9e5bca2-5780-3ae5-8904-89af2a588865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv4: 162.222.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cb:dd:db:e5:37:d7:e8:f0:0f:55:33:cc:98:af:f7:84:02: 1d:80:ed:75:04:4a:cc:0b:1c:c5:d2:10:d7:86:76:c6:07:e8: 5f:6a:63:29:81:bd:02:fe:9d:b1:f8:93:9d:ec:5b:37:d1:53: f9:0b:4b:f5:1d:a8:bd:70:3e:57:b4:0a:ca:23:7e:64:b9:43: 84:c0:d1:13:5d:67:46:f6:13:b9:58:a7:99:68:de:89:ba:5c: 3b:57:03:7f:ef:5f:b0:94:7e:54:13:b2:e8:ce:b9:18:97:c1: 38:dd:44:56:e2:94:e7:ab:7e:fa:4c:5e:e1:4c:7f:ed:2e:3f: 3e:0b:1e:c9:b2:01:f9:44:51:fd:a3:8a:ce:b4:fc:1a:f4:c5: 10:29:b5:8c:a2:7c:34:71:6c:59:33:a9:27:76:a6:91:e6:c3: b5:23:b6:47:a2:df:5a:93:55:3c:a0:4d:82:d3:7e:f6:3a:4d: 9c:3c:2d:c7:c9:b5:84:68:ae:03:50:52:af:f1:87:b7:9f:be: e5:ee:1a:9e:40:ca:dc:15:29:c7:45:a7:b7:d3:2f:fa:ba:31: 19:fd:93:4d:f8:ba:c2:44:50:d9:28:ad:9f:66:32:f9:a3:53: 51:35:4c:e7:c3:ba:22:7c:a1:38:77:c9:6f:da:32:1f:00:fa: 94:42:8f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6um/Qo9iQj/TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NTI3MDE1ZjItNzUyMi00MWVmLWFhMmItMWMxNjVmYmNmODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw2Z3TSJYmE3HFK5hVPBXUViOgPg4KRGGFY9 INulaxd5hfzXKFAK+u1SmvGc0lh14y/kv5+VSqMUOcUn+BRs+LUAIgf9BEpDuGir nwGR43FuXJ2aP5+Bo0u1A8AGxTZgLeG92hrXP49A4fie7k+jdWJamog3UCdID07m XvhU6OyVNoPRfcvPsnLnalmMiJTjsSV49KYSv1vNRvO7hT4nP/u/r7zA0+yfPhLS Oi/THwqS1PTeD7mZ+2Mwcc4RF4ilb22vywMp17kX9diDq2vgPCZAH9w0w409LB0Y x1XPiijgHTmkdGZJKRlC5TkBnY2aMEmaOPJpQDBS3wfNRo89DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWEbqFsz4FldOCkrmePyqLAh0qUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZTllNWJjYTItNTc4MC0z YWU1LTg5MDQtODlhZjJhNTg4ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLL3dvlN9fo8A9VM8yYr/eEAh2A7XUESswLHMXSENeGdsYH6F9qYymB vQL+nbH4k53sWzfRU/kLS/UdqL1wPle0CsojfmS5Q4TA0RNdZ0b2E7lYp5lo3om6 XDtXA3/vX7CUflQTsujOuRiXwTjdRFbilOerfvpMXuFMf+0uPz4LHsmyAflEUf2j is60/Br0xRAptYyifDRxbFkzqSd2ppHmw7Ujtkei31qTVTygTYLTfvY6TZw8LcfJ tYRorgNQUq/xh7efvuXuGp5AytwVKcdFp7fTL/q6MRn9k034usJEUNkorZ9mMvmj U1E1TOfDuiJ8oTh3yW/aMh8A+pRCj2U= -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:25 2025 by rpki-client