$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/22b2c353-054d-3452-921d-8e3bcce0ab92.roa File: 22b2c353-054d-3452-921d-8e3bcce0ab92.roa (raw, json) Hash identifier: ag825N7/6pu/Eq+B+S79fqlRt7Bd9o98CArczto8lAE= Subject key identifier: 04:D2:35:95:74:FD:AD:0D:66:96:33:13:21:03:6C:86:6B:C9:15:1C Certificate issuer: /CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899 Certificate serial: 010D0C9F4328584BB02CFB0311C12DE9F51AE340 Authority key identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/22b2c353-054d-3452-921d-8e3bcce0ab92.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 53428 IP address blocks: 204.12.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fb:03:11:c1:2d:e9:f5:1a:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=1e40797a-931a-4dfe-9c47-76c64fd3e771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:76:55:5d:a8:6f:97:f4:10:1f:46:fa:56:5c: 03:de:7b:3f:70:a0:d2:72:6c:a3:96:77:97:4f:f7: 95:59:38:e2:a7:0e:ba:2a:41:db:7a:41:86:82:53: e7:a2:18:ea:6d:3b:29:cc:b2:37:c9:7f:7d:36:91: 09:fa:1b:67:72:e7:ee:eb:fa:91:e4:a3:4c:6f:d8: b9:65:63:18:70:d5:be:58:6c:12:02:e1:9a:d3:b0: f0:e9:56:58:bd:4d:40:04:2f:cf:c3:1b:22:32:4b: de:53:99:e3:bd:8f:38:49:42:32:f1:16:bd:91:b6: 81:41:b9:73:be:87:d3:0a:12:ec:e9:d1:8b:a7:86: 48:75:b2:1a:4b:06:41:dc:4a:55:52:2d:e7:87:25: 3e:5d:48:b5:a9:86:aa:38:53:c4:2d:52:fb:3a:54: d2:eb:3d:51:88:41:ab:98:ba:ee:56:a8:7c:26:34: 72:7a:0f:74:e9:44:0b:81:22:32:58:5a:96:58:8e: 9c:15:20:db:d0:7a:01:c7:24:2e:50:d7:bd:6b:fd: 70:a6:fb:39:52:39:c9:f9:29:ab:0f:7a:f7:4d:bc: 96:fa:09:04:d1:62:d9:c7:c3:4b:ee:e3:ea:74:75: d0:38:02:aa:ad:ff:70:59:46:02:1a:86:ad:2a:a4: 12:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:35:95:74:FD:AD:0D:66:96:33:13:21:03:6C:86:6B:C9:15:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/22b2c353-054d-3452-921d-8e3bcce0ab92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl X509v3 Authority Key Identifier: keyid:D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer sbgp-ipAddrBlock: critical IPv4: 204.12.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:57:da:69:f1:34:42:b0:9e:7c:e5:f5:09:00:b2:32:c5:18: 28:da:dd:f5:b7:99:dc:f2:a9:1c:a4:8e:2a:a7:b6:1f:82:69: af:75:44:9e:cc:ba:c5:57:c3:c1:e6:ee:67:d2:42:37:b2:5e: 0b:15:04:aa:d3:71:51:4b:d0:3b:95:5b:1d:a0:3b:e3:59:a2: 69:a3:8e:4d:ac:73:fe:0a:48:b1:12:69:30:7c:74:fd:60:1e: 1b:b7:76:80:e3:85:c4:1a:82:f3:a9:2b:e8:ef:9c:db:c1:b1: 6e:f9:3a:52:fc:2d:e9:de:e1:12:ea:52:a5:70:50:03:2a:83: 9e:d1:bb:cb:44:e2:a2:85:69:b7:5b:ad:56:77:16:63:e8:91: 3a:38:46:77:b8:c1:e0:3a:6f:16:c6:ad:05:47:f4:6f:b7:8c: 83:fa:f5:59:8a:1e:71:4e:71:5d:d0:4d:66:43:02:cd:63:1e: 11:e2:04:5c:67:02:a4:2a:65:f2:9a:6c:9e:6a:77:ac:3e:a9: 8e:2f:43:83:8d:7f:73:32:f3:28:fc:04:be:25:c5:eb:3f:6e: a6:03:34:7f:89:3a:17:60:58:c1:0e:6a:af:6b:34:e8:1e:eb: c4:29:85:a3:e9:1f:a8:86:6a:09:35:b3:7d:0f:08:dc:6a:4a: a5:02:2c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLPsDEcEt6fUa40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2ZjAxYjgtMTNhZC00Yzc5LWFhNzItNjVjZjBkZWRk ODk5MB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MWU0MDc5N2EtOTMxYS00ZGZlLTljNDctNzZjNjRmZDNlNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnZVXahvl/QQH0b6VlwD3ns/cKDScmyjlneX T/eVWTjipw66KkHbekGGglPnohjqbTspzLI3yX99NpEJ+htncufu6/qR5KNMb9i5 ZWMYcNW+WGwSAuGa07Dw6VZYvU1ABC/PwxsiMkveU5njvY84SUIy8Ra9kbaBQblz vofTChLs6dGLp4ZIdbIaSwZB3EpVUi3nhyU+XUi1qYaqOFPELVL7OlTS6z1RiEGr mLruVqh8JjRyeg906UQLgSIyWFqWWI6cFSDb0HoBxyQuUNe9a/1wpvs5UjnJ+Smr D3r3TbyW+gkE0WLZx8NL7uPqdHXQOAKqrf9wWUYCGoatKqQSxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATSNZV0/a0NZpYzEyEDbIZryRUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZm MDFiOC0xM2FkLTRjNzktYWE3Mi02NWNmMGRlZGQ4OTkvMjJiMmMzNTMtMDU0ZC0z NDUyLTkyMWQtOGUzYmNjZTBhYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGY2ZjAxYjgtMTNhZC00Yzc5LWFh NzItNjVjZjBkZWRkODk5LzhmNmYwMWI4LTEzYWQtNGM3OS1hYTcyLTY1Y2YwZGVk ZDg5OS5jcmwwHwYDVR0jBBgwFoAU0YPLdcSP3cpqvpY0LsdsUQ43/gMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZmMDFiOC0xM2FkLTRjNzktYWE3Mi02NWNm MGRlZGQ4OTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJX2mnxNEKwnnzl9QkAsjLFGCja3fW3mdzyqRykjiqnth+Caa91RJ7M usVXw8Hm7mfSQjeyXgsVBKrTcVFL0DuVWx2gO+NZommjjk2sc/4KSLESaTB8dP1g Hhu3doDjhcQagvOpK+jvnNvBsW75OlL8Lene4RLqUqVwUAMqg57Ru8tE4qKFabdb rVZ3FmPokTo4Rne4weA6bxbGrQVH9G+3jIP69VmKHnFOcV3QTWZDAs1jHhHiBFxn AqQqZfKabJ5qd6w+qY4vQ4ONf3My8yj8BL4lxes/bqYDNH+JOhdgWMEOaq9rNOge 68QphaPpH6iGagk1s30PCNxqSqUCLL0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:45:56 2025 by rpki-client