$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/28ff7c38-7edb-3215-bd95-9de310b80ea2.roa File: 28ff7c38-7edb-3215-bd95-9de310b80ea2.roa (raw, json) Hash identifier: fel9Ke1D3QmsS1egAjpi2Z8sTTSQ7G1Bw3KmmgdMLgk= Subject key identifier: 2A:A3:B4:2E:A2:57:99:47:B4:D6:16:E0:95:9D:30:74:8A:F6:B3:ED Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584BB2F8304F293461CA8874C2C0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/28ff7c38-7edb-3215-bd95-9de310b80ea2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 10753 IP address blocks: 162.33.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:30:4f:29:34:61:ca:88:74:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=81d8fb59-9788-4572-a83a-b3ca3d79006c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:d0:12:49:1d:4d:a1:4d:ad:0c:c1:57:3a: 3d:76:be:91:5d:ac:dd:30:2d:26:95:19:ac:b9:c9: a1:2f:f0:e6:7e:2a:86:19:01:ca:25:cd:97:5a:f9: 5f:18:71:af:38:90:d2:0c:77:f9:bd:5a:a8:ab:b6: 7e:3f:2f:de:33:ed:c6:96:83:7d:80:e5:a9:d5:a9: be:58:bd:de:7e:76:df:42:ed:50:d9:17:5b:98:71: 73:46:55:d7:a2:f2:82:9e:08:7b:06:2d:ef:f9:d4: 25:5a:9d:bc:30:48:0c:39:18:25:ab:b3:d5:6f:e9: 3f:e8:6d:25:af:55:b5:0c:00:53:2b:d8:95:90:f3: 5e:c1:d0:87:b3:73:a3:b6:71:fe:85:da:51:d4:c6: 59:94:79:7c:90:18:25:47:57:eb:20:a5:4e:d4:3a: 25:11:9f:0c:33:f3:41:31:c0:4a:9d:d0:50:59:b8: 11:7c:a4:92:03:28:ba:db:a2:55:18:35:93:83:f8: 72:20:f0:01:8d:9e:3f:55:89:b7:44:26:7d:b5:f6: 3f:ce:0d:10:e7:dc:a0:3e:08:72:c4:2e:2e:68:02: 9a:6c:77:47:01:0b:28:06:95:1d:9b:08:89:75:6e: 95:c8:51:64:72:e0:39:25:63:db:4b:84:64:84:15: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A3:B4:2E:A2:57:99:47:B4:D6:16:E0:95:9D:30:74:8A:F6:B3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/28ff7c38-7edb-3215-bd95-9de310b80ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 162.33.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e2:21:f1:e3:61:9a:d2:be:93:c9:63:bf:cb:5f:69:9a:2f: e4:87:81:0b:ec:a7:49:3d:c8:f2:18:ea:0e:4c:08:ce:5d:9b: 62:44:5c:83:d4:cf:23:15:ac:d8:37:81:a9:31:21:8c:d1:e1: cf:5b:df:bb:33:9e:9a:97:11:87:90:1a:7a:ef:72:6f:51:ab: 07:78:a0:80:d0:69:1d:ef:ff:e7:b0:08:89:95:b6:6a:81:d6: 17:83:6f:71:56:4e:fd:86:70:81:5b:cf:8e:75:8f:dc:52:9d: 9f:b1:df:7a:f5:b8:44:6f:40:90:e9:2a:09:46:a0:3e:89:be: 39:ab:04:80:6d:76:4b:a0:6c:59:54:5c:8f:f8:0d:17:25:ce: 45:cd:c5:1a:be:c0:4f:f4:3f:21:0f:eb:e6:6a:90:e4:7a:fa: 05:7e:cf:49:7c:40:dc:41:1f:b8:49:06:a7:d3:02:df:6e:46: 37:fa:7b:4e:33:38:ca:dc:9c:99:a7:e1:61:2a:1c:64:3e:cb: 6d:af:ab:9f:b8:8d:27:d0:2a:89:b9:48:79:91:d9:c4:bf:cf: e5:1b:c0:0b:9b:a0:e7:20:39:df:7f:2c:81:cc:00:36:71:99: 5d:7d:4d:d2:ec:75:13:bf:72:32:55:79:3f:00:65:71:7d:2d: 60:5c:12:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+DBPKTRhyoh0wsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ODFkOGZiNTktOTc4OC00NTcyLWE4M2EtYjNjYTNkNzkwMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoArQEkkdTaFNrQzBVzo9dr6RXazdMC0mlRms ucmhL/DmfiqGGQHKJc2XWvlfGHGvOJDSDHf5vVqoq7Z+Py/eM+3GloN9gOWp1am+ WL3efnbfQu1Q2RdbmHFzRlXXovKCngh7Bi3v+dQlWp28MEgMORglq7PVb+k/6G0l r1W1DABTK9iVkPNewdCHs3OjtnH+hdpR1MZZlHl8kBglR1frIKVO1DolEZ8MM/NB McBKndBQWbgRfKSSAyi626JVGDWTg/hyIPABjZ4/VYm3RCZ9tfY/zg0Q59ygPghy xC4uaAKabHdHAQsoBpUdmwiJdW6VyFFkcuA5JWPbS4RkhBXcswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqjtC6iV5lHtNYW4JWdMHSK9rPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMjhmZjdjMzgtN2VkYi0z MjE1LWJkOTUtOWRlMzEwYjgwZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiGlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALiIfHjYZrSvpPJY7/LX2maL+SHgQvsp0k9yPIY6g5MCM5dm2JEXIPU zyMVrNg3gakxIYzR4c9b37sznpqXEYeQGnrvcm9Rqwd4oIDQaR3v/+ewCImVtmqB 1heDb3FWTv2GcIFbz451j9xSnZ+x33r1uERvQJDpKglGoD6JvjmrBIBtdkugbFlU XI/4DRclzkXNxRq+wE/0PyEP6+ZqkOR6+gV+z0l8QNxBH7hJBqfTAt9uRjf6e04z OMrcnJmn4WEqHGQ+y22vq5+4jSfQKom5SHmR2cS/z+UbwAuboOcgOd9/LIHMADZx mV19TdLsdRO/cjJVeT8AZXF9LWBcElE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:22:33 2025 by rpki-client