$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa File: d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa (raw, json) Hash identifier: 0LhCpoXvSKXAmhBOnfhCVG0wWKTb7Zh0cMdu6+sogoY= Subject key identifier: 52:C5:4F:0E:09:1E:AC:58:25:48:DA:31:38:07:3B:EA:C3:98:90:47 Certificate issuer: /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Certificate serial: 010D0C9F4328584BABFD05F40505FE22B5407900 Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 31898 IP address blocks: 162.253.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:05:f4:05:05:fe:22:b5:40:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=eb48b432-e0f6-48ad-b3ee-7f1d37cf0a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f9:b0:14:30:96:28:4d:06:89:6f:03:2b:04: 7f:45:ab:5e:91:3a:8c:cd:46:76:89:cf:96:54:69: ee:1c:49:3e:dc:85:2f:9f:21:77:e9:7e:d4:b2:40: 33:53:ab:40:b9:ec:1c:56:94:a5:20:47:e7:6d:40: 13:77:1b:a4:b5:ac:90:ad:1c:c7:88:f3:59:6e:fd: b8:75:7d:35:8a:c6:34:9a:49:89:84:1a:5e:b6:03: fd:77:45:0e:e2:a4:28:0d:2f:2a:f5:71:4c:96:52: a7:ef:5d:3d:56:68:5d:00:7f:f6:36:77:ce:00:a0: 00:81:b4:60:3f:d8:da:fe:67:38:de:49:5c:d1:f9: cd:d7:29:8d:b9:87:0c:e5:76:02:ae:e1:96:31:b7: fa:d5:b1:d6:d1:e0:ca:9b:3c:27:31:3f:7a:62:ff: 52:bb:cf:6d:cd:a4:63:e0:8c:3d:f1:3e:d7:c0:62: c0:ab:e8:50:8a:d8:64:ce:b6:50:e7:72:99:5a:7a: 0e:3c:f7:82:9c:d0:2b:d6:ec:71:fb:ef:66:57:68: ac:cb:ab:d8:17:c8:a2:18:41:5f:db:e7:aa:42:45: e5:96:73:72:cc:78:13:ec:aa:d1:e5:07:84:11:eb: 5e:0c:37:ae:7b:78:b9:74:cf:11:83:52:89:22:6c: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C5:4F:0E:09:1E:AC:58:25:48:DA:31:38:07:3B:EA:C3:98:90:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/d36a84d5-9e13-3436-a5f0-a0debb2f7a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl X509v3 Authority Key Identifier: keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer sbgp-ipAddrBlock: critical IPv4: 162.253.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a0:54:84:95:be:69:0f:cf:79:7a:fd:8d:5c:6a:9e:e5:29: d6:e6:f8:77:78:9f:d8:44:69:d7:91:d7:80:17:ef:55:52:f9: 57:a2:4c:1d:48:7c:42:59:6f:9d:4f:b6:e9:3f:4b:9a:ac:5e: f8:1f:83:96:34:28:4a:9a:88:1c:1a:d7:bb:01:ff:13:eb:a1: c0:fc:eb:d9:6d:5a:d4:1c:ce:20:fc:69:0f:62:44:63:d1:ec: 35:a1:29:34:37:f3:99:47:0c:68:f0:3a:15:c4:99:dd:b6:82: e2:e9:cd:78:02:92:09:75:90:dc:df:17:89:3f:00:99:f0:81: f8:97:32:f6:a3:76:9b:87:b6:e3:2a:b2:b8:3a:19:5d:f7:3b: af:c0:b8:a9:07:32:11:9b:4c:70:27:fe:6a:27:5c:f9:3d:d8: f3:de:2b:cd:68:5a:11:34:4e:c2:12:64:fc:ba:f5:40:ae:88: 13:6f:c8:f4:7c:45:af:7b:76:5d:b9:b6:3a:c7:e0:b0:4f:37: ac:6e:07:85:2a:01:d4:91:67:4b:bb:82:cb:c5:5a:74:d1:3f: 7c:5a:a4:b8:2d:87:33:e6:a1:31:ef:a2:62:71:3d:98:9c:63: cd:03:09:f1:3b:1c:4f:16:d3:fc:ef:ae:7c:05:5c:95:4e:a0: a5:52:e3:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QX0BQX+IrVAeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhjMzAxYWItN2QyMi00NmMzLTgyMTEtZjYzNzNlYzgy ZDVhMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZWI0OGI0MzItZTBmNi00OGFkLWIzZWUtN2YxZDM3Y2YwYTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/mwFDCWKE0GiW8DKwR/RatekTqMzUZ2ic+W VGnuHEk+3IUvnyF36X7UskAzU6tAuewcVpSlIEfnbUATdxuktayQrRzHiPNZbv24 dX01isY0mkmJhBpetgP9d0UO4qQoDS8q9XFMllKn7109VmhdAH/2NnfOAKAAgbRg P9ja/mc43klc0fnN1ymNuYcM5XYCruGWMbf61bHW0eDKmzwnMT96Yv9Su89tzaRj 4Iw98T7XwGLAq+hQithkzrZQ53KZWnoOPPeCnNAr1uxx++9mV2isy6vYF8iiGEFf 2+eqQkXllnNyzHgT7KrR5QeEEeteDDeue3i5dM8Rg1KJImyaqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLFTw4JHqxYJUjaMTgHO+rDmJBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMz MDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3M2VjODJkNWEvZDM2YTg0ZDUtOWUxMy0z NDM2LWE1ZjAtYTBkZWJiMmY3YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzhjMzAxYWItN2QyMi00NmMzLTgy MTEtZjYzNzNlYzgyZDVhL2M4YzMwMWFiLTdkMjItNDZjMy04MjExLWY2MzczZWM4 MmQ1YS5jcmwwHwYDVR0jBBgwFoAUGxP8yGiVO1Oo/Oi5S4sEI5dKUtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jOGMzMDFhYi03ZDIyLTQ2YzMtODIxMS1mNjM3 M2VjODJkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov1TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmgVISVvmkPz3l6/Y1cap7lKdbm+Hd4n9hEadeR14AX71VS+VeiTB1I fEJZb51Ptuk/S5qsXvgfg5Y0KEqaiBwa17sB/xProcD869ltWtQcziD8aQ9iRGPR 7DWhKTQ385lHDGjwOhXEmd22guLpzXgCkgl1kNzfF4k/AJnwgfiXMvajdpuHtuMq srg6GV33O6/AuKkHMhGbTHAn/monXPk92PPeK81oWhE0TsISZPy69UCuiBNvyPR8 Ra97dl25tjrH4LBPN6xuB4UqAdSRZ0u7gsvFWnTRP3xapLgthzPmoTHvomJxPZic Y80DCfE7HE8W0/zvrnwFXJVOoKVS4yU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:14:21 2025 by rpki-client