$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/1de24369-f6cc-31b6-91a7-852f3529e65f.roa File: 1de24369-f6cc-31b6-91a7-852f3529e65f.roa (raw, json) Hash identifier: YDVGFTZLJccOq8VpwO6zGBNIIB3AzpyhxnlgFkiaufk= Subject key identifier: 9C:03:12:C3:E1:02:57:F8:C5:E1:FF:D5:2D:BF:DC:3D:A6:3F:91:8A Certificate issuer: /CN=ac448c7f-05bb-4802-8533-0aad8a69acb1 Certificate serial: 010D0C9F4328584B25FC40CF4B0378217574C9C0 Authority key identifier: 68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/1de24369-f6cc-31b6-91a7-852f3529e65f.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 400189 IP address blocks: 161.199.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:40:cf:4b:03:78:21:75:74:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac448c7f-05bb-4802-8533-0aad8a69acb1 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=fdc7dbed-9d85-4684-b882-5ff0af1b4b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:b4:09:08:6a:f1:8e:bd:9d:9d:50:5f:4e: 2c:1a:1b:54:13:2d:67:e2:bb:d9:e3:15:83:17:13: dd:66:61:42:f7:d4:b9:54:b3:6b:e2:84:ff:ca:c0: 62:43:83:16:8e:78:ad:67:6a:14:09:6a:2e:8a:be: e9:07:21:4b:d5:cb:46:31:d2:ef:07:4f:b5:7e:3e: a7:55:e0:10:b8:73:31:72:2e:03:8b:3d:70:2d:b4: d0:6e:59:b2:96:a5:6c:09:48:b4:44:74:5c:dd:b6: ef:e0:ed:5d:e9:b3:57:11:fb:5e:2e:0c:b4:1f:c8: 9b:ee:3b:c1:87:19:7f:7c:e7:82:d5:2c:e6:e0:dd: d6:ee:32:30:4b:2d:a1:96:34:13:5e:e4:2d:74:34: ab:a3:06:8c:a5:c0:60:f1:10:d1:6d:d8:a3:09:c3: 5c:48:8e:52:90:83:3e:69:a4:a0:68:8b:7f:17:2c: a3:bd:5d:e9:a9:1d:ce:66:c6:75:a0:19:4f:f9:7d: 07:89:fc:9c:71:1f:77:c8:90:9f:eb:ea:70:2c:35: 20:32:a6:87:36:9f:30:7c:1f:15:2c:70:a1:9e:b6: b0:02:63:c9:5b:d7:f2:4a:54:64:3d:b0:51:b3:6a: 83:cb:95:98:11:e9:5f:2e:3f:24:a5:23:35:de:7a: 8c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:03:12:C3:E1:02:57:F8:C5:E1:FF:D5:2D:BF:DC:3D:A6:3F:91:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/1de24369-f6cc-31b6-91a7-852f3529e65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.crl X509v3 Authority Key Identifier: keyid:68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer sbgp-ipAddrBlock: critical IPv4: 161.199.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e8:80:3d:6d:e5:63:6f:72:58:ad:e6:a7:d9:ed:2d:34:50: 76:03:f5:ff:c3:a1:ed:08:87:d6:e9:3d:c1:33:09:3b:ea:5a: 1e:62:69:d9:ec:f3:da:43:63:ea:5e:7a:d7:39:23:2c:ce:3d: b2:f4:bd:43:56:75:9c:ed:12:05:36:24:48:b4:2a:b2:da:57: 99:5d:a9:df:e1:46:26:1e:59:22:31:8d:7d:af:72:a4:d9:0c: a8:41:e7:33:a8:c3:35:6a:10:7d:04:9f:54:e7:7a:1a:8c:8e: ad:cf:67:93:95:4b:f9:0b:68:94:f1:9c:b9:21:59:c6:df:1a: 8b:66:94:8d:ab:39:a9:80:74:02:94:18:2c:5c:6d:a0:f4:17: 75:7b:80:10:53:fa:48:1e:4a:a8:43:51:29:5c:2a:93:35:45: b0:cd:2b:40:b4:82:68:b4:c5:f1:2a:84:1e:33:55:14:c8:b1: e8:65:8e:00:1c:6b:05:35:3d:9e:8a:41:3f:eb:04:25:f6:e4: 57:8c:a7:37:0b:06:ce:12:9e:eb:65:2a:1e:98:b5:20:4c:d5: dc:7f:e8:41:9f:1b:4a:23:da:29:61:35:c1:d3:c6:d2:2f:65: b8:52:da:c3:21:34:94:ed:7e:9c:8b:27:a7:1f:23:2e:cd:5b: c7:5f:ca:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EDPSwN4IXV0ycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM0NDhjN2YtMDViYi00ODAyLTg1MzMtMGFhZDhhNjlh Y2IxMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmRjN2RiZWQtOWQ4NS00Njg0LWI4ODItNWZmMGFmMWI0YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrW0CQhq8Y69nZ1QX04sGhtUEy1n4rvZ4xWD FxPdZmFC99S5VLNr4oT/ysBiQ4MWjnitZ2oUCWouir7pByFL1ctGMdLvB0+1fj6n VeAQuHMxci4Diz1wLbTQblmylqVsCUi0RHRc3bbv4O1d6bNXEfteLgy0H8ib7jvB hxl/fOeC1Szm4N3W7jIwSy2hljQTXuQtdDSrowaMpcBg8RDRbdijCcNcSI5SkIM+ aaSgaIt/FyyjvV3pqR3OZsZ1oBlP+X0HifyccR93yJCf6+pwLDUgMqaHNp8wfB8V LHChnrawAmPJW9fySlRkPbBRs2qDy5WYEelfLj8kpSM13nqMUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwDEsPhAlf4xeH/1S2/3D2mP5GKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYzQ0 OGM3Zi0wNWJiLTQ4MDItODUzMy0wYWFkOGE2OWFjYjEvMWRlMjQzNjktZjZjYy0z MWI2LTkxYTctODUyZjM1MjllNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWM0NDhjN2YtMDViYi00ODAyLTg1 MzMtMGFhZDhhNjlhY2IxL2FjNDQ4YzdmLTA1YmItNDgwMi04NTMzLTBhYWQ4YTY5 YWNiMS5jcmwwHwYDVR0jBBgwFoAUaBtsv2iA1nD9FEhu6Ys4ATqoS0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYzQ0OGM3Zi0wNWJiLTQ4MDItODUzMy0wYWFk OGE2OWFjYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoceQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzogD1t5WNvclit5qfZ7S00UHYD9f/Doe0Ih9bpPcEzCTvqWh5iadns 89pDY+peetc5IyzOPbL0vUNWdZztEgU2JEi0KrLaV5ldqd/hRiYeWSIxjX2vcqTZ DKhB5zOowzVqEH0En1TnehqMjq3PZ5OVS/kLaJTxnLkhWcbfGotmlI2rOamAdAKU GCxcbaD0F3V7gBBT+kgeSqhDUSlcKpM1RbDNK0C0gmi0xfEqhB4zVRTIsehljgAc awU1PZ6KQT/rBCX25FeMpzcLBs4SnutlKh6YtSBM1dx/6EGfG0oj2ilhNcHTxtIv ZbhS2sMhNJTtfpyLJ6cfIy7NW8dfyow= -----END CERTIFICATE-----Generated at Sat Oct 11 04:23:34 2025 by rpki-client