$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/212a0ab7-29e0-38c1-898a-18f324ed9e64.roa File: 212a0ab7-29e0-38c1-898a-18f324ed9e64.roa (raw, json) Hash identifier: pVYZdo499B90aA0PQiBZmcofVMAoQN2hphVDUzD7EII= Subject key identifier: F4:AF:D5:23:50:D6:AD:1F:6D:94:98:B1:48:48:E8:B6:96:C3:F5:9E Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584B2A2C24F7CF16FBD2104BFAA0 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/212a0ab7-29e0-38c1-898a-18f324ed9e64.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 46841 IP address blocks: 162.210.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:24:f7:cf:16:fb:d2:10:4b:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=a14e5d4e-ce9f-474e-9167-4337312bcf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:72:78:6d:83:78:2a:bc:4b:92:35:95:8a: 2d:9e:00:bb:64:fa:0d:e1:d2:c5:1e:82:84:27:4b: fe:72:88:f9:7c:ac:56:fe:31:17:c3:b1:34:6c:9a: 02:c4:7e:c2:73:ab:86:f9:f5:11:05:e8:18:50:85: 77:86:07:1b:5a:51:58:77:96:ea:9c:e8:da:a4:90: 40:e1:db:fc:8e:6f:0c:e9:c1:bf:48:66:ae:49:32: 9f:c1:03:f5:19:f9:ca:bc:f1:41:60:13:57:a7:e2: ad:4d:cb:4b:e3:a8:34:db:ab:7f:e1:cd:99:b3:f1: 20:63:0b:24:8e:9a:52:a2:4e:d3:63:1c:dd:87:52: 7e:78:73:23:7d:14:b8:cb:d5:fc:36:51:94:a3:ff: 5a:f2:ca:02:a8:10:39:9d:2e:91:ed:cb:24:d6:ef: 94:2f:9e:a7:fa:69:16:2b:12:a5:d5:c2:e3:c3:f3: 5a:8c:b3:66:42:28:e4:62:c2:a0:b5:c9:79:81:67: 7f:bd:08:6f:11:c9:96:04:56:e0:5a:12:c7:d5:67: db:6d:d4:4f:4b:67:64:45:fd:9c:7c:2c:ea:24:be: 30:7d:d6:56:c7:83:5f:c6:23:79:1c:04:6b:6d:a1: 2a:7c:7a:b6:f4:33:8d:c0:ba:a9:31:fb:2b:a5:4c: e4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AF:D5:23:50:D6:AD:1F:6D:94:98:B1:48:48:E8:B6:96:C3:F5:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/212a0ab7-29e0-38c1-898a-18f324ed9e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 162.210.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ed:81:6b:f2:7d:e0:56:44:d5:b8:9c:d1:d2:02:4a:1f:ee: e3:ac:c0:70:ba:9e:19:58:c8:44:57:4b:2f:c5:09:70:0f:37: c9:f7:04:cf:91:06:70:91:60:a5:4a:4c:31:9c:9b:42:eb:a3: 6a:8a:82:f6:5e:69:03:8d:cd:ab:79:16:73:13:41:67:55:9e: a1:2e:6d:06:04:c9:c4:42:73:cd:c0:51:73:4c:c2:1a:9e:ce: 60:8f:cb:e9:e4:e6:f0:81:59:43:73:2f:aa:35:2d:d9:fc:a1: ca:e4:b8:2f:8d:ca:ae:5f:65:eb:33:5c:99:0c:b9:5c:31:78: 62:40:50:92:da:3d:05:4b:0d:ad:22:6d:78:90:55:0c:18:a9: a0:e5:4d:97:46:80:3c:6c:30:f8:e0:af:b7:84:51:b2:4d:86: ee:63:25:21:2d:9e:80:7a:62:bf:39:da:4e:d3:cd:1c:a0:44: 7a:07:35:d3:fe:96:2e:fc:34:8c:39:d6:3e:e4:f5:e0:07:88: ea:90:7b:0e:35:2f:de:8c:bd:a8:88:33:49:37:ad:82:9e:fe: 29:b3:21:c7:00:8b:77:41:48:69:14:b4:bd:31:8a:6d:a1:7b: a4:46:b3:fd:76:e6:b6:5b:88:30:e8:75:f4:cd:b2:96:f2:8b: d1:a8:cc:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLCT3zxb70hBL+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk YTE0ZTVkNGUtY2U5Zi00NzRlLTkxNjctNDMzNzMxMmJjZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI1yeG2DeCq8S5I1lYotngC7ZPoN4dLFHoKE J0v+coj5fKxW/jEXw7E0bJoCxH7Cc6uG+fURBegYUIV3hgcbWlFYd5bqnOjapJBA 4dv8jm8M6cG/SGauSTKfwQP1GfnKvPFBYBNXp+KtTctL46g026t/4c2Zs/EgYwsk jppSok7TYxzdh1J+eHMjfRS4y9X8NlGUo/9a8soCqBA5nS6R7csk1u+UL56n+mkW KxKl1cLjw/NajLNmQijkYsKgtcl5gWd/vQhvEcmWBFbgWhLH1WfbbdRPS2dkRf2c fCzqJL4wfdZWx4NfxiN5HARrbaEqfHq29DONwLqpMfsrpUzk+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSv1SNQ1q0fbZSYsUhI6LaWw/WeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvMjEyYTBhYjctMjllMC0z OGMxLTg5OGEtMThmMzI0ZWQ5ZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHtgWvyfeBWRNW4nNHSAkof7uOswHC6nhlYyERXSy/FCXAPN8n3BM+R BnCRYKVKTDGcm0Lro2qKgvZeaQONzat5FnMTQWdVnqEubQYEycRCc83AUXNMwhqe zmCPy+nk5vCBWUNzL6o1Ldn8ocrkuC+Nyq5fZeszXJkMuVwxeGJAUJLaPQVLDa0i bXiQVQwYqaDlTZdGgDxsMPjgr7eEUbJNhu5jJSEtnoB6Yr852k7TzRygRHoHNdP+ li78NIw51j7k9eAHiOqQew41L96MvaiIM0k3rYKe/imzIccAi3dBSGkUtL0xim2h e6RGs/125rZbiDDodfTNspbyi9GozLc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:56 2025 by rpki-client