$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa File: bfad3b88-3220-3c11-abe6-986866e4db67.roa (raw, json) Hash identifier: HZ5fkyimyuBtEgG/Rv4vISOE7LwX5Dd60oJY4LCOBVc= Subject key identifier: A2:09:49:18:55:A1:54:0A:1C:AD:53:DC:D3:38:19:F5:C3:08:D7:D3 Certificate issuer: /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Certificate serial: 010D0C9F4328584BA0D257E405BF371922613C80 Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14434 IP address blocks: 162.247.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:57:e4:05:bf:37:19:22:61:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=fb81c141-6083-412d-88b2-32cfa1c0f8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:82:cc:59:34:fc:47:88:8d:74:9f:7b:3d: 24:9b:a1:29:32:9f:f2:0c:67:28:8a:9b:0a:3c:e4: 3b:c7:38:0b:5d:01:6c:6d:eb:3f:e0:44:6a:ca:3f: 14:2a:83:73:67:7a:43:1b:8b:c4:bc:8a:7c:7e:27: 10:6c:ba:e0:78:0b:82:ef:56:65:98:d6:21:30:56: 33:e5:7f:07:58:c4:23:72:be:1c:8c:a3:08:2c:1d: 55:4f:04:5e:7c:9f:b3:8e:77:07:e9:cb:f4:57:8c: 98:4b:9e:29:6d:e5:63:42:09:cd:6b:8b:41:80:a7: a5:23:f4:2f:a1:a7:dd:84:e0:18:a1:00:c8:f8:a7: 9f:08:47:1f:f5:6b:c3:8c:2b:0f:6f:34:56:5b:59: 39:eb:5a:01:a1:e2:5d:db:5d:6a:bb:d2:7e:2b:99: 93:e7:f1:04:1f:90:ae:3b:68:38:e1:29:80:dc:e0: db:ef:82:5a:08:30:4f:b3:58:15:07:66:8b:e1:b5: 73:9e:5b:be:0d:a1:75:79:d5:54:f3:f5:9f:51:e0: dd:cc:d1:5c:8a:5b:33:3d:9f:1b:02:41:35:dd:df: dd:9a:e7:e0:5d:9a:6b:87:89:87:27:c2:b2:5a:16: 3f:67:ac:97:18:2e:84:aa:8d:2b:d0:0b:0c:be:55: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:09:49:18:55:A1:54:0A:1C:AD:53:DC:D3:38:19:F5:C3:08:D7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/bfad3b88-3220-3c11-abe6-986866e4db67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl X509v3 Authority Key Identifier: keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer sbgp-ipAddrBlock: critical IPv4: 162.247.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c6:e6:d4:34:64:ef:0d:a4:a2:5f:15:e5:72:d9:6c:60:4d: cd:14:99:c1:c6:50:05:8f:3e:9d:74:5e:15:f6:6e:cb:62:fc: d3:7b:5e:f2:3a:94:8c:1f:2b:ff:fc:d9:18:c4:78:bc:d2:ef: a2:56:41:8b:db:17:08:6b:bf:1f:68:79:85:10:ce:19:69:cc: 67:3c:ce:2d:1c:2b:84:0e:bc:e5:da:98:01:36:dc:b3:51:e7: 1c:e2:52:a8:bf:83:af:cc:45:4a:65:1b:93:ed:90:86:03:87: 77:d9:00:c2:1c:2b:2d:da:fc:a5:ac:1e:a0:43:9e:bb:1b:9a: 3c:28:09:cd:0f:ed:87:29:6c:d6:12:9f:ef:9c:0e:3f:39:d0: 99:66:53:9c:87:5f:28:10:8d:89:6a:08:96:5c:ea:53:8a:2f: 9b:c1:d9:94:e6:f9:4e:b5:3c:1a:07:6e:12:31:dc:81:1d:f0: 36:a8:a1:e9:db:09:3b:ce:1c:2a:43:f5:64:aa:8e:8d:0d:bd: 8c:c9:e2:9f:80:83:d5:1a:72:c1:e0:87:00:a8:fa:c9:25:24: 0e:99:79:4b:ba:d3:4d:37:06:76:cc:8e:76:96:64:9b:36:d7: 26:3f:50:5e:ab:0f:d8:29:e1:fe:b4:7a:cd:27:fc:15:69:42: 18:8f:1d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lfkBb83GSJhPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4 YzQ0MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZmI4MWMxNDEtNjA4My00MTJkLTg4YjItMzJjZmExYzBmOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBGCzFk0/EeIjXSfez0km6EpMp/yDGcoipsK POQ7xzgLXQFsbes/4ERqyj8UKoNzZ3pDG4vEvIp8ficQbLrgeAuC71ZlmNYhMFYz 5X8HWMQjcr4cjKMILB1VTwRefJ+zjncH6cv0V4yYS54pbeVjQgnNa4tBgKelI/Qv oafdhOAYoQDI+KefCEcf9WvDjCsPbzRWW1k561oBoeJd211qu9J+K5mT5/EEH5Cu O2g44SmA3ODb74JaCDBPs1gVB2aL4bVznlu+DaF1edVU8/WfUeDdzNFcilszPZ8b AkE13d/dmufgXZprh4mHJ8KyWhY/Z6yXGC6Eqo0r0AsMvlXEqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIJSRhVoVQKHK1T3NM4GfXDCNfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvYmZhZDNiODgtMzIyMC0z YzExLWFiZTYtOTg2ODY2ZTRkYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1 OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw YzZlNThjNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPG5tQ0ZO8NpKJfFeVy2WxgTc0UmcHGUAWPPp10XhX2bsti/NN7XvI6 lIwfK//82RjEeLzS76JWQYvbFwhrvx9oeYUQzhlpzGc8zi0cK4QOvOXamAE23LNR 5xziUqi/g6/MRUplG5PtkIYDh3fZAMIcKy3a/KWsHqBDnrsbmjwoCc0P7YcpbNYS n++cDj850JlmU5yHXygQjYlqCJZc6lOKL5vB2ZTm+U61PBoHbhIx3IEd8Daooenb CTvOHCpD9WSqjo0NvYzJ4p+Ag9UacsHghwCo+sklJA6ZeUu60003BnbMjnaWZJs2 1yY/UF6rD9gp4f60es0n/BVpQhiPHQ4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:01 2025 by rpki-client