$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa File: 7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa (raw, json) Hash identifier: vl3dri66rV0gDyv0xpO4nS51kYAey/ZQyzpDfVktxE8= Subject key identifier: D5:F3:F5:C7:20:67:4A:F0:D2:32:F1:07:63:A7:C4:30:6A:EC:7E:84 Certificate issuer: /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Certificate serial: 010D0C9F4328584B99D782CDA37CF400E8026ED0 Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 25945 IP address blocks: 162.253.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:82:cd:a3:7c:f4:00:e8:02:6e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=671c4029-6bfa-4484-a5b7-c0354af78571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:5c:c0:bc:fa:fb:ab:37:85:f2:08:00:f0: 58:70:61:93:21:f9:f1:64:69:52:32:f5:45:b8:40: 29:d3:b9:92:38:2b:59:bb:b2:60:b5:fe:a8:9e:f0: 1d:82:7b:bd:d3:c2:d0:b5:7e:fa:a1:c5:b4:30:2c: 38:1c:dd:c8:ca:71:8f:64:c2:1e:25:e8:3c:01:a4: dd:1e:26:9f:e4:91:f0:d0:4a:e9:6b:4a:0e:be:b7: 95:58:4e:8c:09:a4:ee:ad:5c:5a:4b:dc:47:b9:a0: 25:17:f8:71:fe:22:78:38:64:2f:9a:54:4d:b9:e0: 7e:de:c7:e7:f5:08:82:a6:55:07:5e:9c:e2:c6:78: 9b:e2:7e:7a:ff:72:ea:22:29:15:21:06:3f:1b:40: c5:ed:90:9a:96:89:61:0d:47:64:6a:d8:4d:e8:ea: 84:c5:ce:0b:97:6b:df:3f:9f:4a:18:2f:26:b9:62: 0a:30:99:ad:76:86:b1:ce:8e:28:70:06:22:6c:6b: 85:a7:57:3d:4c:e6:3c:20:79:24:c6:65:d2:31:e9: 4b:33:aa:65:79:ed:6b:fd:4d:5b:bf:c5:08:de:4f: ce:ef:fa:22:bf:a3:fa:d5:04:ed:c9:4c:d9:53:1b: 24:61:2d:db:32:9c:0d:da:4b:e7:cf:9e:db:5e:28: 7b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F3:F5:C7:20:67:4A:F0:D2:32:F1:07:63:A7:C4:30:6A:EC:7E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/7378ac25-a2c0-3d72-b4e3-c1f986e1cb8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl X509v3 Authority Key Identifier: keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer sbgp-ipAddrBlock: critical IPv4: 162.253.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e2:dd:71:bb:88:ce:79:23:7e:73:7c:b0:f7:c7:43:9d:af:7f: 8f:f7:09:29:a3:4b:69:fc:4b:18:ff:23:60:7f:e4:b1:f2:d9: 93:ea:7c:6b:64:88:28:e0:17:2e:8f:de:e2:4e:4f:71:e5:fb: 16:60:32:d0:9e:82:47:52:28:06:ac:f6:b5:9a:f0:b4:d5:a8: 91:40:c7:27:b0:cb:b1:d0:a5:23:27:59:d7:b3:72:6b:3b:57: 62:5c:21:87:8c:1f:a7:cb:1e:c7:44:1d:99:19:14:7a:f4:29: 4f:0b:1d:cb:e0:5a:14:d2:ee:fc:d3:01:2d:dc:b8:e7:0a:e3: f5:d2:7b:3f:70:5a:9f:f0:92:fc:f3:f2:fa:30:49:00:85:98: f5:ea:a1:0b:79:31:f8:55:3b:1f:49:37:9c:23:c8:0e:79:ad: b6:5c:96:1c:62:e7:8b:ae:09:ec:14:25:c6:8a:2e:9f:9a:7a: 4d:b6:79:29:23:a9:84:97:03:49:f1:b8:1c:a9:03:b8:d3:81: 62:43:2b:f1:a1:14:a9:5f:7f:0c:46:0c:de:d8:0a:3a:5f:ca: ea:dd:21:ff:35:45:4c:bf:a7:6c:00:74:79:73:f0:cf:76:13: f1:11:17:7f:9a:6f:fc:19:d6:5b:31:f0:fd:0c:36:3d:1d:f0: 4b:24:54:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14LNo3z0AOgCbtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgy ZDVhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjcxYzQwMjktNmJmYS00NDg0LWE1YjctYzAzNTRhZjc4NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fpcwLz6+6s3hfIIAPBYcGGTIfnxZGlSMvVF uEAp07mSOCtZu7Jgtf6onvAdgnu908LQtX76ocW0MCw4HN3IynGPZMIeJeg8AaTd Hiaf5JHw0Erpa0oOvreVWE6MCaTurVxaS9xHuaAlF/hx/iJ4OGQvmlRNueB+3sfn 9QiCplUHXpzixnib4n56/3LqIikVIQY/G0DF7ZCalolhDUdkathN6OqExc4Ll2vf P59KGC8muWIKMJmtdoaxzo4ocAYibGuFp1c9TOY8IHkkxmXSMelLM6plee1r/U1b v8UI3k/O7/oiv6P61QTtyUzZUxskYS3bMpwN2kvnz57bXih7CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXz9ccgZ0rw0jLxB2OnxDBq7H6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMz MDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvNzM3OGFjMjUtYTJjMC0z ZDcyLWI0ZTMtYzFmOTg2ZTFjYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzhjMzAxYWItN2QyMi00NmMzLTgy MTEtZjYzNzNlYzgyZDVhL2M4YzMwMWFiLTdkMjItNDZjMy04MjExLWY2MzczZWM4 MmQ1YS5jcmwwHwYDVR0jBBgwFoAUGxP8yGiVO1Oo/Oi5S4sEI5dKUtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3 M2VjODJkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOLdcbuIznkjfnN8sPfHQ52vf4/3CSmjS2n8Sxj/I2B/5LHy2ZPqfGtk iCjgFy6P3uJOT3Hl+xZgMtCegkdSKAas9rWa8LTVqJFAxyewy7HQpSMnWdezcms7 V2JcIYeMH6fLHsdEHZkZFHr0KU8LHcvgWhTS7vzTAS3cuOcK4/XSez9wWp/wkvzz 8vowSQCFmPXqoQt5MfhVOx9JN5wjyA55rbZclhxi54uuCewUJcaKLp+aek22eSkj qYSXA0nxuBypA7jTgWJDK/GhFKlffwxGDN7YCjpfyurdIf81RUy/p2wAdHlz8M92 E/ERF3+ab/wZ1lsx8P0MNj0d8EskVMA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:48 2025 by rpki-client