$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa File: 984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa (raw, json) Hash identifier: xUhcpLU6MvuHwoA2yPTlnnST+IC9/GUJPE3d6HCDL+Y= Subject key identifier: 67:A9:99:9A:2B:1B:14:D8:39:B7:69:7F:AD:56:55:9A:F4:10:F4:6B Certificate issuer: /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93 Certificate serial: 010D0C9F4328584B0CDC0F8BF7A140E15DFB6980 Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 393384 IP address blocks: 162.220.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0f:8b:f7:a1:40:e1:5d:fb:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=a1d9dd72-ca09-43cd-b610-7778ef8c5dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:c5:4c:40:5c:76:a5:b5:3a:76:3f:36:2d: d3:63:e0:c3:66:c8:bf:03:f6:3d:28:3d:7a:87:3c: 2c:0c:66:9a:f8:f9:e1:f1:af:fb:c5:76:c0:d6:09: 86:bf:54:13:7a:49:d2:b0:d1:4e:a9:18:f3:2d:1f: 3c:57:16:c5:93:13:94:bb:a5:e3:59:83:98:77:ac: 8a:44:48:5a:03:52:c7:ab:c1:cb:96:34:2a:14:36: d1:6b:44:b4:90:8b:61:84:5b:3d:4c:5d:30:4a:d7: 9c:3f:08:8a:7c:c1:74:28:d5:88:2c:c8:bd:48:59: a3:5d:82:38:a3:dd:ab:fe:da:2c:2c:ea:12:72:66: 22:90:bc:61:b9:e1:85:64:59:8a:09:ce:15:d5:35: f8:3c:be:7b:f2:ca:d4:b5:cc:b6:65:f9:cb:f8:60: 5f:c7:36:3b:9f:76:60:ee:7d:16:f6:f2:c8:b0:19: 1c:f0:3d:11:35:6d:4b:71:27:1a:0a:57:f2:7d:77: aa:f6:76:2e:6f:b0:a8:03:2d:bc:74:28:9f:2c:7d: 44:70:a3:a6:c6:ca:dc:2b:36:33:8e:91:18:66:66: 47:17:fc:f8:9e:ad:3e:2c:42:89:31:b3:50:07:b1: f3:42:05:fe:78:08:6f:98:4f:4c:78:5c:d7:3d:bc: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A9:99:9A:2B:1B:14:D8:39:B7:69:7F:AD:56:55:9A:F4:10:F4:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/984dc2f7-4046-3bd1-a3ca-44d8c8d720ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl X509v3 Authority Key Identifier: keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer sbgp-ipAddrBlock: critical IPv4: 162.220.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:09:4f:da:94:69:87:4f:8e:65:2d:61:00:f8:0a:1b:90:3e: 01:8b:1c:4a:39:6c:a5:5a:89:03:05:d6:4e:ea:81:03:54:c9: e1:33:33:3f:8e:49:4c:64:d8:d9:cf:26:7e:ba:c5:b9:63:e3: c3:9f:30:77:e4:22:1f:6c:cc:db:0e:48:27:15:34:5b:ed:58: 7a:92:64:bf:80:c7:28:8f:84:11:84:09:a7:03:b2:8a:df:51: 18:f0:f7:35:e0:e5:db:f5:47:58:c1:19:9b:f9:2e:bd:d7:74: 0c:2c:10:a6:6a:05:b7:21:a2:c6:c2:c4:b5:1a:56:72:96:99: 90:31:5a:27:b6:c8:5e:30:ad:4e:63:0b:78:21:f9:44:4a:c0: c6:63:02:d1:27:94:81:e5:a9:8d:96:ef:f0:d0:40:6e:26:ca: b2:53:d0:d6:ef:d0:16:13:d3:8f:8d:83:ef:c8:fa:fd:fc:64: 97:1c:5f:ee:7f:b8:28:4f:36:f3:07:e0:0e:c4:f9:04:b0:98: a9:0b:f1:20:51:87:20:38:05:ba:2a:5e:62:ef:01:4a:cb:85: 14:9d:cd:52:95:c7:2c:87:1f:c6:a0:52:31:89:43:e1:a2:32: 33:fc:94:8c:c8:04:34:77:25:08:a5:27:9d:44:99:8d:df:39: 1e:9f:46:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3A+L96FA4V37aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc3OWFkNWQtNWNhNy00YzIzLTkyOGYtMDkxZTBlMWEz ZjkzMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk YTFkOWRkNzItY2EwOS00M2NkLWI2MTAtNzc3OGVmOGM1ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG3FTEBcdqW1OnY/Ni3TY+DDZsi/A/Y9KD16 hzwsDGaa+Pnh8a/7xXbA1gmGv1QTeknSsNFOqRjzLR88VxbFkxOUu6XjWYOYd6yK REhaA1LHq8HLljQqFDbRa0S0kIthhFs9TF0wStecPwiKfMF0KNWILMi9SFmjXYI4 o92r/tosLOoScmYikLxhueGFZFmKCc4V1TX4PL578srUtcy2ZfnL+GBfxzY7n3Zg 7n0W9vLIsBkc8D0RNW1LcScaClfyfXeq9nYub7CoAy28dCifLH1EcKOmxsrcKzYz jpEYZmZHF/z4nq0+LEKJMbNQB7HzQgX+eAhvmE9MeFzXPbzRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGepmZorGxTYObdpf61WVZr0EPRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5 YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFlMGUxYTNmOTMvOTg0ZGMyZjctNDA0Ni0z YmQxLWEzY2EtNDRkOGM4ZDcyMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzc3OWFkNWQtNWNhNy00YzIzLTky OGYtMDkxZTBlMWEzZjkzLzM3NzlhZDVkLTVjYTctNGMyMy05MjhmLTA5MWUwZTFh M2Y5My5jcmwwHwYDVR0jBBgwFoAU3UBYo70iE7ShZ8UHLgPVQAuSHEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFl MGUxYTNmOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotx1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAJT9qUaYdPjmUtYQD4ChuQPgGLHEo5bKVaiQMF1k7qgQNUyeEzMz+O SUxk2NnPJn66xblj48OfMHfkIh9szNsOSCcVNFvtWHqSZL+AxyiPhBGECacDsorf URjw9zXg5dv1R1jBGZv5Lr3XdAwsEKZqBbchosbCxLUaVnKWmZAxWie2yF4wrU5j C3gh+URKwMZjAtEnlIHlqY2W7/DQQG4myrJT0Nbv0BYT04+Ng+/I+v38ZJccX+5/ uChPNvMH4A7E+QSwmKkL8SBRhyA4BboqXmLvAUrLhRSdzVKVxyyHH8agUjGJQ+Gi MjP8lIzIBDR3JQilJ51EmY3fOR6fRhg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:08:54 2025 by rpki-client