$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/0674063d-4a03-388e-bee7-c7108766d522.roa File: 0674063d-4a03-388e-bee7-c7108766d522.roa (raw, json) Hash identifier: 74adYjUFJ+zmHuM9NW7Z2W9KEMeHAuXjU7G6BAgUPZg= Subject key identifier: A8:4A:30:12:14:F5:4E:E5:84:47:EC:9A:22:F4:4A:61:F4:D7:98:0D Certificate issuer: /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Certificate serial: 010D0C9F4328584B99D78390D2A7D37583C6B880 Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/0674063d-4a03-388e-bee7-c7108766d522.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 25945 IP address blocks: 162.253.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:83:90:d2:a7:d3:75:83:c6:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=0083782c-2313-41c4-ae2d-5b95c93ca773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3f:fb:59:5d:a4:c0:56:ee:fa:04:e2:24:d6: 66:a7:bd:8e:48:60:a2:37:83:c9:50:c2:64:6a:95: c3:c2:dd:28:f4:24:c2:4d:ea:36:d6:e4:8c:74:81: f7:65:1a:1b:40:2e:71:40:1f:a2:1f:24:47:4f:30: 90:ea:06:74:06:eb:6f:fe:bd:10:53:4d:7e:a4:2b: c7:88:6e:e3:de:80:00:0f:5c:ad:14:31:65:d4:cc: 41:27:65:c6:ac:fb:bd:c3:18:0b:bb:f7:6f:63:f6: 4e:70:7e:a5:43:15:65:88:99:69:3e:cd:a9:1a:3a: 4c:d0:78:17:58:39:47:d4:88:cb:5f:cb:46:7b:9b: fd:5b:63:4c:8f:dc:4f:c5:1b:0e:0a:95:be:17:db: f1:bc:ec:88:df:db:30:87:5d:52:6f:25:d7:89:62: e7:f0:25:ec:1b:cd:34:2b:6b:d6:fa:ee:8f:b9:94: 42:f8:55:33:6a:b6:13:60:3f:af:96:3c:a6:22:6d: 2b:d7:82:d7:90:ca:00:9b:01:b2:8d:1c:aa:7d:f3: aa:60:a3:6b:d6:74:3e:8e:82:ec:74:13:89:5d:55: 98:7e:ad:94:4a:c7:54:1b:7b:98:d5:20:18:ca:9a: a5:59:17:a8:d9:e0:35:35:33:3d:27:fd:9c:f6:0e: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:30:12:14:F5:4E:E5:84:47:EC:9A:22:F4:4A:61:F4:D7:98:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/0674063d-4a03-388e-bee7-c7108766d522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl X509v3 Authority Key Identifier: keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer sbgp-ipAddrBlock: critical IPv4: 162.253.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:c3:a5:69:a9:e0:5f:60:4d:e9:62:73:69:28:86:4d:2d:29: 5d:18:c8:c4:62:68:a9:68:1f:b4:2a:cd:b6:11:89:70:7d:44: 30:fe:3b:7d:5a:ec:0a:4a:d3:04:94:08:55:d9:06:ec:3c:54: a2:73:7f:c9:70:fe:2e:58:61:23:f6:37:67:c7:5c:4f:63:da: c8:20:ae:04:1f:dc:4c:c4:a8:60:5b:40:73:bc:28:ee:98:fa: 34:9b:f3:67:b3:dd:2e:e1:35:65:8b:0c:90:a6:6f:32:1a:61: 6b:aa:ab:75:b2:b1:d8:41:7a:8f:db:36:1c:05:5d:36:b5:54: cf:dc:18:93:32:4d:21:1e:1c:42:19:4f:ac:10:e6:7a:ae:70: 43:f0:b4:fc:bd:25:14:70:8b:36:32:ff:ee:98:5c:2f:94:17: 7d:97:9c:4c:c0:60:e7:21:c1:d0:2b:43:22:e3:46:1e:f3:63: fa:56:ac:c3:cd:d3:89:de:d8:f1:f1:78:18:20:61:f0:96:19: 10:c1:53:23:19:72:29:b0:93:e8:94:f0:40:1f:bf:c7:1d:92: 9c:20:8d:3e:8b:6a:4e:81:32:22:e5:31:34:ed:30:8a:44:a3: bf:9c:5f:1b:17:3b:91:cd:50:36:71:ac:58:d0:82:c1:1a:37: e0:42:e4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14OQ0qfTdYPGuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgy ZDVhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDA4Mzc4MmMtMjMxMy00MWM0LWFlMmQtNWI5NWM5M2NhNzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj/7WV2kwFbu+gTiJNZmp72OSGCiN4PJUMJk apXDwt0o9CTCTeo21uSMdIH3ZRobQC5xQB+iHyRHTzCQ6gZ0Butv/r0QU01+pCvH iG7j3oAAD1ytFDFl1MxBJ2XGrPu9wxgLu/dvY/ZOcH6lQxVliJlpPs2pGjpM0HgX WDlH1IjLX8tGe5v9W2NMj9xPxRsOCpW+F9vxvOyI39swh11SbyXXiWLn8CXsG800 K2vW+u6PuZRC+FUzarYTYD+vljymIm0r14LXkMoAmwGyjRyqffOqYKNr1nQ+joLs dBOJXVWYfq2USsdUG3uY1SAYypqlWReo2eA1NTM9J/2c9g56/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhKMBIU9U7lhEfsmiL0SmH015gNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMz MDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvMDY3NDA2M2QtNGEwMy0z ODhlLWJlZTctYzcxMDg3NjZkNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzhjMzAxYWItN2QyMi00NmMzLTgy MTEtZjYzNzNlYzgyZDVhL2M4YzMwMWFiLTdkMjItNDZjMy04MjExLWY2MzczZWM4 MmQ1YS5jcmwwHwYDVR0jBBgwFoAUGxP8yGiVO1Oo/Oi5S4sEI5dKUtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3 M2VjODJkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANrDpWmp4F9gTelic2kohk0tKV0YyMRiaKloH7QqzbYRiXB9RDD+O31a 7ApK0wSUCFXZBuw8VKJzf8lw/i5YYSP2N2fHXE9j2sggrgQf3EzEqGBbQHO8KO6Y +jSb82ez3S7hNWWLDJCmbzIaYWuqq3WysdhBeo/bNhwFXTa1VM/cGJMyTSEeHEIZ T6wQ5nqucEPwtPy9JRRwizYy/+6YXC+UF32XnEzAYOchwdArQyLjRh7zY/pWrMPN 04ne2PHxeBggYfCWGRDBUyMZcimwk+iU8EAfv8cdkpwgjT6Lak6BMiLlMTTtMIpE o7+cXxsXO5HNUDZxrFjQgsEaN+BC5B8= -----END CERTIFICATE-----Generated at Wed Nov 5 23:04:27 2025 by rpki-client