$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa File: 04baf0fa-6a1d-3766-a496-ca289440ff8c.roa (raw, json) Hash identifier: VP4v51zKhTmNMNFXfNxUEqXt1hBKBdoqhmgVglGIJLs= Subject key identifier: 29:E1:27:FC:FA:28:81:7F:17:B6:71:CC:4E:31:0B:6D:01:8C:A9:B0 Certificate issuer: /CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Certificate serial: 010D0C9F4328584B1D9CB7E91650377694613000 Authority key identifier: 5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 29900 IP address blocks: 162.218.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:b7:e9:16:50:37:76:94:61:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9441892-5f50-4eb3-a218-8dada1be8f65 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=a49ae193-e8dd-4ec0-846d-35fc1c98cc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:c5:7a:c7:88:48:6e:b0:be:5e:1b:aa:e8: 74:4c:d2:8c:90:ed:a0:1a:41:01:b4:1b:67:53:90: 43:4e:39:3c:fa:db:75:e6:d6:6c:92:f2:ba:3f:15: 70:0d:79:0c:62:67:e2:3a:14:42:35:87:7e:de:18: fd:58:88:cd:88:e3:b9:62:80:6e:fc:89:db:e0:d0: 9e:49:bc:64:0f:b0:2d:19:40:75:65:28:73:32:5a: 53:a6:b4:a7:9f:20:fe:e4:7e:68:6f:a4:0a:d2:f0: 94:37:69:50:d3:87:3a:4c:f9:e7:4f:93:0f:68:88: d0:f9:e6:a8:df:70:c2:d7:5e:08:88:85:ad:4f:50: 2a:ae:68:bb:25:fc:80:2e:2e:8f:89:5b:e9:42:e1: 1e:34:f8:60:bc:47:da:91:e2:bb:4e:b3:8c:f5:9d: 92:de:fa:27:f6:40:00:7b:94:17:db:7f:a4:1b:81: fa:57:27:1d:b0:fe:a9:22:e1:cd:cd:64:8e:76:56: ab:95:0c:43:55:0b:73:bd:a2:d1:89:78:07:f7:71: a2:71:24:69:a3:48:d6:e4:ae:db:fb:40:c8:cf:c5: d5:c5:6b:fd:41:2a:1b:f3:07:dc:97:f3:61:1c:40: 98:47:ab:91:82:b0:31:f5:7a:b1:da:e5:65:37:6c: 13:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E1:27:FC:FA:28:81:7F:17:B6:71:CC:4E:31:0B:6D:01:8C:A9:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/04baf0fa-6a1d-3766-a496-ca289440ff8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.crl X509v3 Authority Key Identifier: keyid:5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer sbgp-ipAddrBlock: critical IPv4: 162.218.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:95:ad:70:d0:dd:3c:fc:73:bd:a6:94:af:e9:a4:ea:d4:fd: 50:3e:59:c3:a9:a3:00:7d:5e:9d:58:0f:ff:b7:f2:40:71:61: b9:b0:ea:a3:57:d3:a1:71:8d:6e:1c:1d:60:3d:6a:87:f1:bc: 30:ac:26:2a:ce:29:e6:d4:5f:f3:70:f1:4a:74:f1:65:74:a7: 69:ce:60:a5:07:02:c9:0a:20:66:9a:26:64:41:da:da:e1:d3: b4:71:4f:0b:ee:3b:41:89:45:6d:a1:b0:7c:ad:5a:11:87:8e: f5:32:28:8b:d4:2c:7d:7a:6a:3c:a8:4f:d2:9d:73:8d:6c:1c: 20:3b:fc:50:44:27:f0:dd:ee:1a:4a:bd:e4:f2:0a:2a:98:74: ac:48:c5:19:d6:76:8f:ec:85:85:ef:de:7c:a4:45:2b:d4:75: 6a:06:bd:d5:81:b0:95:42:3b:7d:41:d8:e3:05:d1:c6:31:72: 49:7f:dc:83:1f:ec:b2:6a:b8:6c:8e:b5:4f:58:5e:ee:8d:27: 65:eb:f3:f8:3b:ac:ed:42:b6:3c:26:b3:80:b9:0a:ef:f1:13: 0d:b6:6c:fa:dd:8c:aa:71:35:12:dd:f2:68:25:64:d5:17:d0: 65:ec:99:39:fb:f1:e4:cc:30:f2:fa:74:db:c2:7a:4c:0a:1a: 8c:0f:3b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnLfpFlA3dpRhMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk0NDE4OTItNWY1MC00ZWIzLWEyMTgtOGRhZGExYmU4 ZjY1MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YTQ5YWUxOTMtZThkZC00ZWMwLTg0NmQtMzVmYzFjOThjYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHzFeseISG6wvl4bquh0TNKMkO2gGkEBtBtn U5BDTjk8+tt15tZskvK6PxVwDXkMYmfiOhRCNYd+3hj9WIjNiOO5YoBu/Inb4NCe SbxkD7AtGUB1ZShzMlpTprSnnyD+5H5ob6QK0vCUN2lQ04c6TPnnT5MPaIjQ+eao 33DC114IiIWtT1Aqrmi7JfyALi6PiVvpQuEeNPhgvEfakeK7TrOM9Z2S3von9kAA e5QX23+kG4H6VycdsP6pIuHNzWSOdlarlQxDVQtzvaLRiXgH93GicSRpo0jW5K7b +0DIz8XVxWv9QSob8wfcl/NhHECYR6uRgrAx9Xqx2uVlN2wT5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnhJ/z6KIF/F7ZxzE4xC20BjKmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0 MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFkYTFiZThmNjUvMDRiYWYwZmEtNmExZC0z NzY2LWE0OTYtY2EyODk0NDBmZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjk0NDE4OTItNWY1MC00ZWIzLWEy MTgtOGRhZGExYmU4ZjY1L2Y5NDQxODkyLTVmNTAtNGViMy1hMjE4LThkYWRhMWJl OGY2NS5jcmwwHwYDVR0jBBgwFoAUWhK/TXP9mEBgMFbXtjy8njeqs8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mOTQ0MTg5Mi01ZjUwLTRlYjMtYTIxOC04ZGFk YTFiZThmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotrHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECVrXDQ3Tz8c72mlK/ppOrU/VA+WcOpowB9Xp1YD/+38kBxYbmw6qNX 06FxjW4cHWA9aofxvDCsJirOKebUX/Nw8Up08WV0p2nOYKUHAskKIGaaJmRB2trh 07RxTwvuO0GJRW2hsHytWhGHjvUyKIvULH16ajyoT9Kdc41sHCA7/FBEJ/Dd7hpK veTyCiqYdKxIxRnWdo/shYXv3nykRSvUdWoGvdWBsJVCO31B2OMF0cYxckl/3IMf 7LJquGyOtU9YXu6NJ2Xr8/g7rO1Ctjwms4C5Cu/xEw22bPrdjKpxNRLd8mglZNUX 0GXsmTn78eTMMPL6dNvCekwKGowPO+c= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:28 2025 by rpki-client