$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ab58a002-4dea-38a2-a932-e9f3205d686d.roa File: ab58a002-4dea-38a2-a932-e9f3205d686d.roa (raw, json) Hash identifier: aflRGIRZlqLU44rviZsSSz36LDVAxmuBiz9+Bpfm1dw= Subject key identifier: 4B:4A:10:EB:4A:CC:68:9A:0B:20:2D:5D:12:92:4F:9C:3D:9B:B5:13 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584BB5C2662A27D0FC5AE32DBA00 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ab58a002-4dea-38a2-a932-e9f3205d686d.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 19886 IP address blocks: 171.162.186.0/23 maxlen: 23 171.162.186.0/24 maxlen: 24 171.162.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:66:2a:27:d0:fc:5a:e3:2d:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=58d6dc76-b24f-4ac5-8467-ab3b096b2325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:21:a1:0d:12:31:f6:2e:55:1e:c4:78:1c: 83:4f:c0:02:e9:ea:a4:72:d0:1c:f8:a6:db:c3:fb: fd:50:5a:1e:4c:47:5f:d6:c2:0d:d5:8e:48:33:64: c2:87:7e:cd:63:9f:6a:10:64:0a:f6:f2:76:d8:73: 66:f9:19:f3:8e:6a:f7:a8:ab:e7:48:58:b8:f6:a5: 16:98:e9:d0:07:6b:3a:c4:19:0d:a6:1c:f9:66:13: 24:cb:a5:3c:2d:c6:c2:f2:1b:33:e0:50:97:0a:84: 59:d8:bd:ea:1c:e9:61:1c:f3:4f:26:44:3f:a7:67: 41:e4:8d:38:75:21:39:19:62:93:82:ab:9e:9a:e7: 56:b8:94:14:bd:69:fd:07:7e:20:df:a0:7c:c3:4a: 88:c9:eb:ea:ac:3a:05:2b:97:27:74:4e:59:a6:a0: 61:f8:d5:86:bf:79:2d:de:39:64:49:83:3c:66:61: b6:51:cc:dd:44:1f:84:68:f2:c2:3d:d2:52:4b:72: 34:fd:ce:90:2f:25:2f:f6:40:b2:e4:d2:bc:9e:08: f7:4e:5e:62:90:4a:df:78:c3:2a:04:ce:a1:cd:08: 04:74:dd:20:9a:98:4a:32:7f:83:de:13:0d:32:bb: 81:94:f4:8d:3f:91:74:e2:dc:97:62:d8:85:06:9e: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4A:10:EB:4A:CC:68:9A:0B:20:2D:5D:12:92:4F:9C:3D:9B:B5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ab58a002-4dea-38a2-a932-e9f3205d686d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:74:24:60:e0:88:1e:73:36:f3:0b:7d:3d:68:5d:45:a5:62: 6e:6d:f1:17:b4:cb:3d:f2:42:b5:fa:89:2d:c8:18:0d:a1:8c: 9a:5f:11:9d:25:49:d3:58:45:2f:ae:b6:c1:8b:9a:4f:bd:ad: 00:25:4b:eb:fb:2e:66:97:d4:da:5d:98:3a:6d:53:47:de:7c: 4e:aa:54:fe:6a:cc:ff:be:cd:d7:a9:4a:42:ef:3c:cf:46:79: cd:b2:bb:7a:92:83:83:b2:0d:ae:11:9d:4e:3a:dc:1c:35:6a: b6:f9:f3:3f:28:2d:55:d5:8a:99:8a:11:de:c0:2a:a5:e5:0a: 4f:c8:fc:28:75:f8:26:43:00:05:8b:01:1e:45:89:fd:f0:19: c6:67:b2:73:53:96:77:3a:53:7f:38:51:2e:57:cf:d4:35:45: 39:c6:6d:2a:e9:c8:c5:42:e2:40:c1:d1:35:dd:7a:4a:d9:05: 4c:e7:a6:d6:a9:8f:e7:f0:3b:f2:da:94:8f:99:1c:bd:ba:82: b1:12:fd:0c:b1:ad:44:26:14:58:4a:8b:d6:0c:96:c2:12:e2: 9c:b3:e1:1e:3d:c2:22:d3:13:a0:3a:9f:05:21:24:47:bb:89: bf:4b:b2:66:e9:2b:c8:25:a0:23:22:c7:46:99:97:f9:11:3a: 6b:26:8c:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmYqJ9D8WuMtugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NThkNmRjNzYtYjI0Zi00YWM1LTg0NjctYWIzYjA5NmIyMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjokhoQ0SMfYuVR7EeByDT8AC6eqkctAc+Kbb w/v9UFoeTEdf1sIN1Y5IM2TCh37NY59qEGQK9vJ22HNm+Rnzjmr3qKvnSFi49qUW mOnQB2s6xBkNphz5ZhMky6U8LcbC8hsz4FCXCoRZ2L3qHOlhHPNPJkQ/p2dB5I04 dSE5GWKTgquemudWuJQUvWn9B34g36B8w0qIyevqrDoFK5cndE5ZpqBh+NWGv3kt 3jlkSYM8ZmG2UczdRB+EaPLCPdJSS3I0/c6QLyUv9kCy5NK8ngj3Tl5ikErfeMMq BM6hzQgEdN0gmphKMn+D3hMNMruBlPSNP5F04tyXYtiFBp5MTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtKEOtKzGiaCyAtXRKST5w9m7UTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYWI1OGEwMDItNGRlYS0z OGEyLWE5MzItZTlmMzIwNWQ2ODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6K6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN0JGDgiB5zNvMLfT1oXUWlYm5t8Re0yz3yQrX6iS3IGA2hjJpfEZ0l SdNYRS+utsGLmk+9rQAlS+v7LmaX1NpdmDptU0fefE6qVP5qzP++zdepSkLvPM9G ec2yu3qSg4OyDa4RnU463Bw1arb58z8oLVXVipmKEd7AKqXlCk/I/Ch1+CZDAAWL AR5Fif3wGcZnsnNTlnc6U384US5Xz9Q1RTnGbSrpyMVC4kDB0TXdekrZBUznptap j+fwO/LalI+ZHL26grES/QyxrUQmFFhKi9YMlsIS4pyz4R49wiLTE6A6nwUhJEe7 ib9LsmbpK8gloCMix0aZl/kROmsmjMg= -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:32 2025 by rpki-client