$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa File: 2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa (raw, json) Hash identifier: lFT7glMpKUR+pVLYKoLisvxV69I1wZKGFs+N+HCIRw0= Subject key identifier: B3:B6:5D:F5:17:E9:72:56:F5:27:C7:3C:18:34:F3:20:CA:48:6E:CC Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F4328584B21CC1931076240A2DDD0B670 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 32329 IP address blocks: 162.218.224.0/22 maxlen: 24 164.152.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:19:31:07:62:40:a2:dd:d0:b6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=22ba33e9-f379-430b-ba63-f1da92acb30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:0a:74:e8:be:b6:35:c3:85:5e:f7:3e:b7: 61:0c:f6:6b:12:b8:2c:7b:ad:0a:ad:d5:7a:1c:48: c0:38:ff:72:f6:c4:4f:47:98:5e:ae:de:df:85:2b: f8:d8:15:48:1e:f1:3f:95:9a:87:3f:15:1c:95:f2: f6:8e:e8:16:23:44:41:e9:fc:22:5d:6b:da:3d:17: 15:1a:e2:02:27:27:11:3d:17:8e:26:71:86:6c:96: 9b:57:3f:fa:c2:07:27:30:1a:7d:da:33:2e:a0:6f: 9d:0c:1f:01:ea:54:90:77:6a:72:00:04:d9:2d:62: 9e:dd:e9:39:63:f8:e4:5b:98:d4:8f:38:c6:77:30: 2e:f3:f4:76:57:1b:03:43:0c:44:14:21:52:71:4d: 20:ea:7a:27:04:6f:68:fd:fa:fb:e8:df:5e:6c:11: 5b:a2:0c:67:b4:2e:55:34:8b:6b:b8:0a:15:02:a0: 87:68:ad:67:67:57:03:0a:18:aa:5e:98:0c:6d:9c: a7:1b:90:9e:0b:cc:ea:1f:1d:20:95:04:4e:8c:4f: 36:08:9c:a6:e3:d7:ee:b5:ab:5c:82:34:58:c1:eb: f0:12:a7:13:99:2f:6b:13:95:a5:d9:6a:8e:b7:20: 93:da:32:c5:2e:fc:57:e9:1d:05:9a:22:84:a1:bb: 35:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:5D:F5:17:E9:72:56:F5:27:C7:3C:18:34:F3:20:CA:48:6E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/2473d6ba-3fb9-3582-8ccc-3c19554cff7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 162.218.224.0/22 164.152.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ac:55:43:0a:a5:82:59:6a:c7:96:c9:55:a2:db:a1:b5:2a: e3:91:bd:25:d9:cd:35:48:92:a2:2a:1b:54:72:14:52:d1:fe: 2b:04:fe:f3:5c:94:e2:47:5e:22:5a:27:cf:a7:4e:82:93:6b: fc:25:c3:53:ff:c3:58:0a:c1:c3:27:0b:a8:db:bf:00:e1:9d: 43:03:62:e6:32:d8:0b:45:a0:5d:7e:e2:f2:e0:41:03:c4:38: eb:9e:93:00:ae:af:8e:64:f5:48:15:d2:ff:7e:6c:68:5b:24: b0:95:43:7f:88:48:7d:e2:d1:70:1c:ca:ef:c0:3b:7c:71:69: d2:4c:b3:c7:de:d3:fa:ba:f5:57:9a:46:6e:bd:dd:33:ce:6d: 74:f5:3c:87:c2:72:e2:b6:d4:10:74:66:ad:51:f3:fb:35:43: e8:0a:21:f2:2c:4d:79:82:a6:d0:20:c4:e7:57:c1:cb:0f:44: be:7e:5b:61:62:ba:88:7d:73:35:ab:b6:92:1a:0e:37:04:ce: 7c:36:ff:22:40:5c:86:20:e6:26:69:11:fd:cd:99:20:d5:29: e0:24:15:50:36:ab:ed:c3:ce:42:95:1b:9d:fc:e3:2f:5b:0d: 35:26:60:33:11:1d:c9:0d:c9:a7:e9:c8:1a:b7:3d:8b:d5:32: d9:b7:08:2a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEshzBkxB2JAot3QtnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk MjJiYTMzZTktZjM3OS00MzBiLWJhNjMtZjFkYTkyYWNiMzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil0KdOi+tjXDhV73PrdhDPZrErgse60KrdV6 HEjAOP9y9sRPR5hert7fhSv42BVIHvE/lZqHPxUclfL2jugWI0RB6fwiXWvaPRcV GuICJycRPReOJnGGbJabVz/6wgcnMBp92jMuoG+dDB8B6lSQd2pyAATZLWKe3ek5 Y/jkW5jUjzjGdzAu8/R2VxsDQwxEFCFScU0g6nonBG9o/fr76N9ebBFbogxntC5V NItruAoVAqCHaK1nZ1cDChiqXpgMbZynG5CeC8zqHx0glQROjE82CJym49futatc gjRYwevwEqcTmS9rE5Wl2WqOtyCT2jLFLvxX6R0FmiKEobs1LQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLO2XfUX6XJW9SfHPBg08yDKSG7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvMjQ3M2Q2YmEtM2ZiOS0z NTgyLThjY2MtM2MxOTU1NGNmZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCotrgAwQD pJiIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHasVUMKpYJZaseWyVWi26G1KuORvSXZzTVIkqIqG1RyFFLR /isE/vNclOJHXiJaJ8+nToKTa/wlw1P/w1gKwcMnC6jbvwDhnUMDYuYy2AtFoF1+ 4vLgQQPEOOuekwCur45k9UgV0v9+bGhbJLCVQ3+ISH3i0XAcyu/AO3xxadJMs8fe 0/q69VeaRm693TPObXT1PIfCcuK21BB0Zq1R8/s1Q+gKIfIsTXmCptAgxOdXwcsP RL5+W2Fiuoh9czWrtpIaDjcEznw2/yJAXIYg5iZpEf3NmSDVKeAkFVA2q+3DzkKV G5384y9bDTUmYDMRHckNyafpyBq3PYvVMtm3CCo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:49:02 2025 by rpki-client