$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/e28e1a64-7c65-3f99-95b6-dffd19dbc52d.roa File: e28e1a64-7c65-3f99-95b6-dffd19dbc52d.roa (raw, json) Hash identifier: cbvoZ4/FuqCxl2z3Jr3dFwuy4f3NFETq1yZSYC8Yb88= Subject key identifier: 6F:F1:43:F3:40:1B:B3:7D:25:C4:74:4C:53:72:93:0D:B9:64:31:2F Certificate issuer: /CN=5028ee72-1629-4552-a11f-947b5a925519 Certificate serial: 010D0C9F4328584B64A8B9ACC7A8ABDE8E117BA0 Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/e28e1a64-7c65-3f99-95b6-dffd19dbc52d.roa Signing time: Thu 02 Oct 2025 23:48:30 +0000 ROA not before: Thu 02 Oct 2025 23:48:30 +0000 ROA not after: Thu 01 Jan 2026 00:48:30 +0000 asID: 399244 IP address blocks: 161.129.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:a8:b9:ac:c7:a8:ab:de:8e:11:7b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519 Validity Not Before: Oct 2 23:48:30 2025 GMT Not After : Jan 1 00:48:30 2026 GMT Subject: CN=c3ed0dc4-88bc-424a-9df6-51c05b7ed2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f9:49:9d:83:35:e9:fa:1f:7c:cd:f5:59:8e: 67:99:25:6a:13:84:4a:54:a1:ec:d5:3a:82:f7:5a: 39:30:6c:d7:b4:da:ca:56:dc:8b:36:52:6b:b3:aa: 0d:8f:10:4c:b8:8f:11:10:d6:39:5f:88:e7:5a:b3: 51:6e:ec:e4:fb:81:62:bc:fe:06:3a:02:ae:c4:51: ee:ab:f5:8d:94:ea:8d:b1:c8:78:36:b2:30:05:d5: 8f:6c:51:e7:36:2d:62:e5:0c:6f:85:4d:94:9e:be: 04:00:64:bc:7d:d0:2e:2a:13:7e:96:20:c2:83:3e: 43:48:23:08:1b:41:08:2e:04:9a:31:20:ba:59:72: 73:b0:cd:f3:09:37:90:a5:11:f5:e5:a4:c0:ad:6c: 97:06:12:0a:eb:5a:25:6d:b0:05:c5:13:c0:d6:92: 47:1d:ad:a8:ba:5a:5b:71:73:25:ee:62:d3:1e:6e: 76:48:b9:f3:f2:a6:cd:6f:44:ec:d0:33:60:88:82: 95:3d:dd:b2:b9:30:b7:45:45:c3:75:b4:ce:ba:d1: b8:11:e0:6c:20:b8:7f:aa:83:3b:33:22:b1:68:89: 9b:c3:0e:4e:4a:3c:2d:5d:3f:1c:bc:eb:8a:fb:04: d6:84:58:0e:0a:60:8e:2a:43:21:cd:e5:94:87:4b: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F1:43:F3:40:1B:B3:7D:25:C4:74:4C:53:72:93:0D:B9:64:31:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/e28e1a64-7c65-3f99-95b6-dffd19dbc52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl X509v3 Authority Key Identifier: keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer sbgp-ipAddrBlock: critical IPv4: 161.129.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9d:25:14:23:90:a0:81:f4:57:6b:e9:dc:89:c9:7c:83:46: 74:04:3d:76:d5:43:da:7c:7d:2b:86:9d:e1:db:ed:a5:f0:96: 03:e8:bf:ea:67:31:98:60:be:09:a4:50:39:da:a8:44:f3:fa: 89:b1:41:19:29:49:28:29:e9:0f:f2:e7:18:d5:c9:2c:54:6c: 6d:d2:7e:0d:c3:fd:ae:9e:df:fc:bf:2f:81:13:4b:9c:46:f4: 59:ff:5d:16:9c:a1:8f:c8:a7:7e:3f:18:f6:8d:a6:25:12:32: 80:08:dd:ad:aa:5d:be:b8:6c:7a:19:b3:e7:11:0c:7a:6b:ce: e4:d8:6c:a4:e6:35:7a:0b:c3:d1:fb:1b:1a:da:c4:55:78:f8: 3f:bf:9d:24:53:c5:19:f6:51:a7:47:3b:34:ad:e3:59:5b:bf: 66:f1:ed:14:d2:a5:b4:91:6a:85:c8:b8:ed:62:08:31:9c:ab: e9:dd:a3:f5:13:85:a5:60:ca:1c:55:f3:fb:4a:bb:98:6a:09: cf:e9:54:e9:a0:d9:72:25:2b:65:4c:00:d8:b5:6e:a8:51:ff: c2:1a:86:7b:9d:f9:e4:cd:61:a4:2c:c4:9e:9b:60:ec:b1:7a: 55:e4:69:22:c0:d4:66:69:d8:d6:6e:2f:93:99:12:6e:f4:d5: 83:cb:f2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkqLmsx6ir3o4Re6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAyOGVlNzItMTYyOS00NTUyLWExMWYtOTQ3YjVhOTI1 NTE5MB4XDTI1MTAwMjIzNDgzMFoXDTI2MDEwMTAwNDgzMFowLzEtMCsGA1UEAxMk YzNlZDBkYzQtODhiYy00MjRhLTlkZjYtNTFjMDViN2VkMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPlJnYM16foffM31WY5nmSVqE4RKVKHs1TqC 91o5MGzXtNrKVtyLNlJrs6oNjxBMuI8RENY5X4jnWrNRbuzk+4FivP4GOgKuxFHu q/WNlOqNsch4NrIwBdWPbFHnNi1i5QxvhU2Unr4EAGS8fdAuKhN+liDCgz5DSCMI G0EILgSaMSC6WXJzsM3zCTeQpRH15aTArWyXBhIK61olbbAFxRPA1pJHHa2oulpb cXMl7mLTHm52SLnz8qbNb0Ts0DNgiIKVPd2yuTC3RUXDdbTOutG4EeBsILh/qoM7 MyKxaImbww5OSjwtXT8cvOuK+wTWhFgOCmCOKkMhzeWUh0tagQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/xQ/NAG7N9JcR0TFNykw25ZDEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MDI4 ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdiNWE5MjU1MTkvZTI4ZTFhNjQtN2M2NS0z Zjk5LTk1YjYtZGZmZDE5ZGJjNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTAyOGVlNzItMTYyOS00NTUyLWEx MWYtOTQ3YjVhOTI1NTE5LzUwMjhlZTcyLTE2MjktNDU1Mi1hMTFmLTk0N2I1YTky NTUxOS5jcmwwHwYDVR0jBBgwFoAUtUCIPF1c+2ZFhKxzVLTW+QgdeOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MDI4ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdi NWE5MjU1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYG1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKdJRQjkKCB9Fdr6dyJyXyDRnQEPXbVQ9p8fSuGneHb7aXwlgPov+pn MZhgvgmkUDnaqETz+omxQRkpSSgp6Q/y5xjVySxUbG3Sfg3D/a6e3/y/L4ETS5xG 9Fn/XRacoY/Ip34/GPaNpiUSMoAI3a2qXb64bHoZs+cRDHprzuTYbKTmNXoLw9H7 GxraxFV4+D+/nSRTxRn2UadHOzSt41lbv2bx7RTSpbSRaoXIuO1iCDGcq+ndo/UT haVgyhxV8/tKu5hqCc/pVOmg2XIlK2VMANi1bqhR/8Iahnud+eTNYaQsxJ6bYOyx elXkaSLA1GZp2NZuL5OZEm701YPL8qA= -----END CERTIFICATE-----Generated at Sat Oct 11 04:18:14 2025 by rpki-client