$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa File: 94b598ca-650b-3b92-89a3-e0848c0cd981.roa (raw, json) Hash identifier: XwRjkCW2tCOXrxq98AxuQTdtRcSntD3N5EX0AzGKFTg= Subject key identifier: B8:A8:2F:2A:1A:64:FF:2C:D9:F4:81:E0:87:7E:94:F5:86:B6:FB:98 Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc Certificate serial: 010D0C9F4328584BB88D254E1566287AE44D4B80 Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 2734 IP address blocks: 162.216.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:25:4e:15:66:28:7a:e4:4d:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=e559cb07-1207-4816-9994-24e3267f2b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:bd:39:2c:c1:72:71:13:d1:88:09:9a:8b: 4f:32:71:1d:0e:4a:00:73:3e:ca:14:bd:95:f3:a9: db:fb:e4:15:02:38:0e:1f:f3:9a:d3:92:aa:78:2e: 8b:5e:01:df:02:1e:24:77:a9:3e:6b:dd:0e:34:08: 76:0b:cd:10:56:d4:d1:f1:3a:e7:04:fc:73:04:df: 61:81:9c:64:4c:b3:4a:61:19:62:09:19:ed:c6:f3: 02:d6:92:98:02:f3:33:a0:ee:4a:4d:88:c5:99:4a: cf:44:0c:c9:df:e9:b7:a0:cb:d1:e0:5d:47:fa:03: 74:d9:bc:c5:76:24:95:36:d8:03:1a:5d:fc:e2:84: 16:5c:d5:2b:c5:71:30:d9:9a:6f:0a:1a:27:d8:ca: 1b:1f:75:4a:70:83:55:1d:f2:1a:7d:ae:e2:48:4b: e4:b3:a5:00:f8:cc:f7:e5:a9:21:0a:e7:7c:5c:6f: ae:6f:0e:28:88:71:3b:0d:19:11:9f:20:f1:6e:b0: a1:17:59:41:c8:87:2b:d9:fc:09:28:e6:38:db:5f: cb:71:1d:b5:4c:5f:9b:58:9f:8f:dc:84:43:f8:94: 41:3b:56:e4:2c:1d:72:92:86:d3:0b:1e:c6:62:c8: 74:36:95:fa:86:78:9a:1b:ef:27:be:3b:9a:22:76: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A8:2F:2A:1A:64:FF:2C:D9:F4:81:E0:87:7E:94:F5:86:B6:FB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/94b598ca-650b-3b92-89a3-e0848c0cd981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl X509v3 Authority Key Identifier: keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer sbgp-ipAddrBlock: critical IPv4: 162.216.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c9:3e:0a:a7:dc:4a:c7:c2:df:0b:4e:e9:52:ab:fd:ad:de: 2f:7c:f2:9d:6a:17:82:3a:c6:94:0b:48:60:06:f6:d7:52:68: bf:22:9e:8c:9c:ae:ed:a2:d4:13:52:0c:bb:6d:07:44:3f:06: 57:d0:d6:0b:58:01:d8:0e:68:df:1b:1f:48:8c:43:a3:97:d8: 2e:4c:ed:61:8d:15:c5:95:db:4c:bc:40:38:19:63:d7:8b:85: 60:13:94:5c:48:e6:8d:a2:12:ce:e9:f2:b7:83:ad:81:28:2c: e3:b4:84:74:63:e1:f7:74:cc:46:9c:8d:92:20:b1:12:76:c7: 17:a9:41:f7:72:2a:83:1c:cf:22:a6:4a:e1:e2:6b:49:fd:4c: ca:06:c4:b7:3b:4f:68:29:cf:63:fb:a2:15:1d:7b:45:b7:d1: bc:c3:92:3e:02:68:ae:f3:ee:84:cd:f7:ea:4a:a7:e5:90:c0: c1:64:16:2f:e8:ee:c1:68:e1:f7:8f:28:27:a4:47:48:56:38: d9:6f:c7:c9:1e:0d:f2:74:8c:68:5b:f7:f9:85:af:ce:fa:71: fd:4f:cb:fe:4c:b3:d5:3a:7c:3c:ae:0c:49:11:b3:43:9d:da: 9d:21:40:6a:54:1d:a5:69:de:50:36:29:1d:59:58:2f:32:eb: 0a:10:e8:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSVOFWYoeuRNS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTI4Mzg1ZDctNzRjNS00MjRjLWEzMzctOTViOTkzNjIy ZmNjMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTU1OWNiMDctMTIwNy00ODE2LTk5OTQtMjRlMzI2N2YyYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoG9OSzBcnET0YgJmotPMnEdDkoAcz7KFL2V 86nb++QVAjgOH/Oa05KqeC6LXgHfAh4kd6k+a90ONAh2C80QVtTR8TrnBPxzBN9h gZxkTLNKYRliCRntxvMC1pKYAvMzoO5KTYjFmUrPRAzJ3+m3oMvR4F1H+gN02bzF diSVNtgDGl384oQWXNUrxXEw2ZpvChon2MobH3VKcINVHfIafa7iSEvks6UA+Mz3 5akhCud8XG+ubw4oiHE7DRkRnyDxbrChF1lByIcr2fwJKOY421/LcR21TF+bWJ+P 3IRD+JRBO1bkLB1ykobTCx7GYsh0NpX6hniaG+8nvjuaInZ2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLioLyoaZP8s2fSB4Id+lPWGtvuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Mjgz ODVkNy03NGM1LTQyNGMtYTMzNy05NWI5OTM2MjJmY2MvOTRiNTk4Y2EtNjUwYi0z YjkyLTg5YTMtZTA4NDhjMGNkOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTI4Mzg1ZDctNzRjNS00MjRjLWEz MzctOTViOTkzNjIyZmNjLzUyODM4NWQ3LTc0YzUtNDI0Yy1hMzM3LTk1Yjk5MzYy MmZjYy5jcmwwHwYDVR0jBBgwFoAUt2VLQgFBcelyzm0olqSTJdVYbsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MjgzODVkNy03NGM1LTQyNGMtYTMzNy05NWI5 OTM2MjJmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoth/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHJPgqn3ErHwt8LTulSq/2t3i988p1qF4I6xpQLSGAG9tdSaL8inoyc ru2i1BNSDLttB0Q/BlfQ1gtYAdgOaN8bH0iMQ6OX2C5M7WGNFcWV20y8QDgZY9eL hWATlFxI5o2iEs7p8reDrYEoLOO0hHRj4fd0zEacjZIgsRJ2xxepQfdyKoMczyKm SuHia0n9TMoGxLc7T2gpz2P7ohUde0W30bzDkj4CaK7z7oTN9+pKp+WQwMFkFi/o 7sFo4fePKCekR0hWONlvx8keDfJ0jGhb9/mFr876cf1Py/5Ms9U6fDyuDEkRs0Od 2p0hQGpUHaVp3lA2KR1ZWC8y6woQ6K4= -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:03 2025 by rpki-client