$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa File: 8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa (raw, json) Hash identifier: H9IfgqGL+AR+0CwsBQtU/Loa1SYTDIP9jYdjb36uSdk= Subject key identifier: A0:24:4C:BD:18:5D:55:2F:4B:B5:7C:33:2E:18:38:30:0E:91:94:82 Certificate issuer: /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Certificate serial: 010D0C9F4328584B99D783A70EBDEC527AE57800 Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 31898 IP address blocks: 162.253.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:83:a7:0e:bd:ec:52:7a:e5:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=4fed6941-24cd-4c76-870c-5f4bafcdaa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:f0:cc:80:8b:b3:3d:50:7c:17:54:18:1a: 2b:78:e3:79:77:10:f4:87:8b:eb:25:d3:ab:4c:f2: 71:cf:24:c8:14:f8:33:75:5b:46:34:bc:f6:48:5a: 7a:a2:af:6c:08:16:24:34:bb:22:e2:bd:e9:23:34: d2:6e:90:6c:96:41:5f:58:e3:66:9f:21:8d:3e:0f: 27:f6:e6:57:7e:43:18:b6:6c:68:16:3e:cd:eb:6a: 0f:42:69:e1:d4:83:dd:c2:c5:71:05:7f:58:3a:c9: 8b:55:d6:92:c7:5a:18:dd:ea:9c:4f:3d:90:e2:ac: 63:1f:fa:38:bd:c5:67:f5:3a:70:66:66:71:6a:d3: c5:6e:3c:21:33:cb:a4:ca:54:aa:f5:6d:91:9d:5b: 56:88:4b:57:29:5c:60:3e:26:a1:35:81:3f:2d:d2: e1:0f:86:ee:66:6d:f1:3f:a5:3d:0b:86:89:f7:9d: 6f:f7:6d:f9:2a:73:93:06:17:1f:c3:1d:be:90:fb: 5e:bc:49:a6:62:50:72:99:4b:d9:d4:c3:cc:0f:e6: 5d:3d:06:fe:b7:0f:c6:be:37:c8:f0:4d:65:57:d9: 8b:89:6c:48:79:af:23:b8:fe:cb:b9:f2:74:a2:09: b6:df:37:f0:0f:eb:ed:9c:77:6d:8d:af:d5:3b:a5: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:24:4C:BD:18:5D:55:2F:4B:B5:7C:33:2E:18:38:30:0E:91:94:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/8794b7a4-0a6d-318f-ac9e-441081c6f07f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl X509v3 Authority Key Identifier: keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer sbgp-ipAddrBlock: critical IPv4: 162.253.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ec:bf:ae:f1:a0:61:39:ab:4d:df:a4:12:70:7b:8a:c6:95: e2:be:35:7e:7d:81:6a:b3:15:ee:77:8a:b3:3d:a9:a0:5e:5b: 6a:de:6a:50:6e:1f:4e:54:5e:da:33:e1:78:4a:77:78:ae:d5: db:89:90:9a:5f:f9:d4:16:48:e8:77:56:0c:3b:1f:f8:32:5d: 81:9b:c4:b9:2e:77:3c:32:a2:ee:5e:d3:1c:f1:9b:79:88:e2: fe:c0:28:07:90:c2:12:25:b8:2d:39:b5:0a:fd:82:ab:d3:c0: 29:f0:70:12:1a:59:b9:92:19:55:33:72:42:aa:4b:06:4d:79: e7:9a:7a:c9:e2:47:db:de:ff:87:49:c6:3c:07:4e:b9:86:ae: ff:73:f6:ba:4d:38:ac:33:17:61:31:98:32:ca:cb:2e:3d:7b: c9:1d:4e:be:82:e2:5e:19:3e:89:bb:7b:58:2f:09:74:1a:80: 04:0d:b6:f6:7e:c6:40:51:0e:f7:9a:c2:0c:b8:83:a0:6c:6f: 4a:d4:2a:40:80:eb:f9:da:98:40:a8:5f:fd:ab:d1:f5:7b:0f: bd:e7:69:98:51:16:66:d3:bb:ca:16:4e:21:2c:df:98:5b:72: e9:23:44:95:5b:23:3a:a3:42:ae:96:e2:d6:b7:96:73:82:07: e7:1f:e4:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14OnDr3sUnrleAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgy ZDVhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NGZlZDY5NDEtMjRjZC00Yzc2LTg3MGMtNWY0YmFmY2RhYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6nwzICLsz1QfBdUGBoreON5dxD0h4vrJdOr TPJxzyTIFPgzdVtGNLz2SFp6oq9sCBYkNLsi4r3pIzTSbpBslkFfWONmnyGNPg8n 9uZXfkMYtmxoFj7N62oPQmnh1IPdwsVxBX9YOsmLVdaSx1oY3eqcTz2Q4qxjH/o4 vcVn9TpwZmZxatPFbjwhM8ukylSq9W2RnVtWiEtXKVxgPiahNYE/LdLhD4buZm3x P6U9C4aJ951v9235KnOTBhcfwx2+kPtevEmmYlBymUvZ1MPMD+ZdPQb+tw/GvjfI 8E1lV9mLiWxIea8juP7LufJ0ogm23zfwD+vtnHdtja/VO6Vo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAkTL0YXVUvS7V8My4YODAOkZSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMz MDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvODc5NGI3YTQtMGE2ZC0z MThmLWFjOWUtNDQxMDgxYzZmMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzhjMzAxYWItN2QyMi00NmMzLTgy MTEtZjYzNzNlYzgyZDVhL2M4YzMwMWFiLTdkMjItNDZjMy04MjExLWY2MzczZWM4 MmQ1YS5jcmwwHwYDVR0jBBgwFoAUGxP8yGiVO1Oo/Oi5S4sEI5dKUtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3 M2VjODJkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXsv67xoGE5q03fpBJwe4rGleK+NX59gWqzFe53irM9qaBeW2realBu H05UXtoz4XhKd3iu1duJkJpf+dQWSOh3Vgw7H/gyXYGbxLkudzwyou5e0xzxm3mI 4v7AKAeQwhIluC05tQr9gqvTwCnwcBIaWbmSGVUzckKqSwZNeeeaesniR9ve/4dJ xjwHTrmGrv9z9rpNOKwzF2ExmDLKyy49e8kdTr6C4l4ZPom7e1gvCXQagAQNtvZ+ xkBRDveawgy4g6Bsb0rUKkCA6/namECoX/2r0fV7D73naZhRFmbTu8oWTiEs35hb cukjRJVbIzqjQq6W4ta3lnOCB+cf5Gg= -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:45 2025 by rpki-client