$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa File: aff2f39e-faa0-3953-afbf-237b8e2372fa.roa (raw, json) Hash identifier: FQfAI15t0tZktVzZBG+Kegmln/lXvgOtpg3LtcEz5Tw= Subject key identifier: D2:6C:91:A1:0B:0C:3D:75:74:4F:F7:37:F7:FB:3C:D7:A7:AF:DB:C7 Certificate issuer: /CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9 Certificate serial: 010D0C9F4328584B92DD91ABF366FE502F0E63C0 Authority key identifier: 2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22616 IP address blocks: 162.82.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:91:ab:f3:66:fe:50:2f:0e:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=692c20d3-af0b-401c-adc2-8b03f3da8cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:db:2c:58:aa:cd:76:19:e5:2e:62:39:a2:d0: 79:4b:be:16:4a:2f:fc:a0:9f:72:dd:64:28:7d:0d: 51:37:25:45:c7:57:d3:c3:b3:1e:6b:50:76:d1:d5: 89:e2:19:75:75:da:57:6b:ba:fe:72:16:91:45:e6: 01:35:00:10:d4:ad:e1:7f:40:99:c9:b7:5a:b0:07: d3:42:a9:16:00:b6:6c:25:65:b3:ce:88:06:ae:ef: 0a:da:59:f6:5b:b0:6f:23:91:4c:03:d1:0c:4e:84: 4b:2b:c9:cd:72:75:24:d9:d4:3a:cd:6b:82:dc:b9: 6b:7f:0e:41:d4:32:82:66:f8:61:b6:d8:55:64:fc: 10:5e:d6:91:e4:28:22:13:9f:95:a8:2d:1e:71:7f: e7:c8:16:12:13:45:11:38:5f:22:0d:d1:9a:7c:af: 4f:ec:89:6a:ef:56:b9:36:52:f7:48:fc:14:13:ec: e4:9a:0e:85:b0:38:eb:c7:e4:df:65:56:86:fe:51: 78:a9:0e:54:a7:98:5a:20:22:64:28:d5:3c:b6:bf: 71:07:2b:59:60:34:33:6c:a8:b9:ef:bb:46:3a:5b: 3b:0c:d1:75:35:b9:d0:06:f9:a4:a4:fc:11:7e:f0: 0f:c5:f1:24:ba:0c:fd:c4:37:db:fa:31:25:f4:82: 0a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6C:91:A1:0B:0C:3D:75:74:4F:F7:37:F7:FB:3C:D7:A7:AF:DB:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/aff2f39e-faa0-3953-afbf-237b8e2372fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl X509v3 Authority Key Identifier: keyid:2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer sbgp-ipAddrBlock: critical IPv4: 162.82.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1f:b3:44:bd:82:d7:d6:63:72:a8:d4:e3:40:03:20:22:8f: b8:67:84:8c:b2:a3:7a:0d:8d:7d:a4:2d:0b:76:9b:a7:88:c7: b1:9d:55:87:ac:d0:d1:8a:f1:ce:c8:09:56:04:28:da:02:64: f9:f4:52:0e:a8:75:ae:bd:94:75:0e:32:69:d3:18:f0:42:85: 92:bd:cd:df:d4:6e:07:bf:9e:78:eb:34:88:f7:f7:aa:9a:43: 2a:5c:f3:1f:24:10:ca:41:8a:53:ba:73:db:6c:0e:58:1a:64: 59:9d:5f:0c:e8:7e:37:32:4a:02:ed:d6:e5:c5:b0:87:4f:64: a8:41:c0:f1:b2:fe:18:2d:2b:25:d2:85:f3:2c:3d:4a:26:cf: 8f:fe:77:37:93:fa:a0:7a:60:a8:72:08:9c:a7:a9:0a:d4:b4: af:fe:86:69:c4:4a:21:39:0d:64:e2:fd:52:17:14:f4:ac:70: 5a:4e:41:37:dd:2d:af:03:7d:ed:b3:f1:ea:01:5f:10:b1:8d: 22:dd:e6:09:ba:48:f1:9b:11:aa:19:e7:e9:0c:db:29:ae:e3: 41:e6:27:ab:70:55:68:e6:71:ea:0d:67:61:51:34:e0:3b:b9: 2b:56:7f:53:98:e2:80:f0:56:a2:e2:97:e1:d4:35:23:a2:8f: 24:92:e5:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZGr82b+UC8OY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmJlY2UxMjQtMzM4MC00Y2I0LTg2NTEtYWQ1ZTFlMjdm M2Y5MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NjkyYzIwZDMtYWYwYi00MDFjLWFkYzItOGIwM2YzZGE4Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tssWKrNdhnlLmI5otB5S74WSi/8oJ9y3WQo fQ1RNyVFx1fTw7Mea1B20dWJ4hl1ddpXa7r+chaRReYBNQAQ1K3hf0CZybdasAfT QqkWALZsJWWzzogGru8K2ln2W7BvI5FMA9EMToRLK8nNcnUk2dQ6zWuC3Llrfw5B 1DKCZvhhtthVZPwQXtaR5CgiE5+VqC0ecX/nyBYSE0UROF8iDdGafK9P7Ilq71a5 NlL3SPwUE+zkmg6FsDjrx+TfZVaG/lF4qQ5Up5haICJkKNU8tr9xBytZYDQzbKi5 77tGOls7DNF1NbnQBvmkpPwRfvAPxfEkugz9xDfb+jEl9IIKLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJskaELDD11dE/3N/f7PNenr9vHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYmVj ZTEyNC0zMzgwLTRjYjQtODY1MS1hZDVlMWUyN2YzZjkvYWZmMmYzOWUtZmFhMC0z OTUzLWFmYmYtMjM3YjhlMjM3MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmJlY2UxMjQtMzM4MC00Y2I0LTg2 NTEtYWQ1ZTFlMjdmM2Y5L2JiZWNlMTI0LTMzODAtNGNiNC04NjUxLWFkNWUxZTI3 ZjNmOS5jcmwwHwYDVR0jBBgwFoAUL2Epco6jsKmajtRB8Duci45lErIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYmVjZTEyNC0zMzgwLTRjYjQtODY1MS1hZDVl MWUyN2YzZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAolL+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcfs0S9gtfWY3Ko1ONAAyAij7hnhIyyo3oNjX2kLQt2m6eIx7GdVYes 0NGK8c7ICVYEKNoCZPn0Ug6oda69lHUOMmnTGPBChZK9zd/Ubge/nnjrNIj396qa Qypc8x8kEMpBilO6c9tsDlgaZFmdXwzofjcySgLt1uXFsIdPZKhBwPGy/hgtKyXS hfMsPUomz4/+dzeT+qB6YKhyCJynqQrUtK/+hmnESiE5DWTi/VIXFPSscFpOQTfd La8Dfe2z8eoBXxCxjSLd5gm6SPGbEaoZ5+kM2ymu40HmJ6twVWjmceoNZ2FRNOA7 uStWf1OY4oDwVqLil+HUNSOijySS5TM= -----END CERTIFICATE-----Generated at Wed Nov 5 20:53:30 2025 by rpki-client