$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa File: eb949189-8271-3567-ac4e-0031c3fec821.roa (raw, json) Hash identifier: hxmp1eXGS7bSrleGdBBEtQVGGvuIQGrJGyYwjLIjEkQ= Subject key identifier: 3F:86:79:3B:2C:77:96:54:39:50:C3:6D:30:AB:26:A6:F1:34:B0:68 Certificate issuer: /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Certificate serial: 010D0C9F4328584B76F22ABD2374A7924DDC3500 Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 398697 IP address blocks: 161.199.203.0/24 maxlen: 24 161.199.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2a:bd:23:74:a7:92:4d:dc:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=21b8a8b1-ed79-43de-a1bf-efed2322ae1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:6d:7a:42:ae:f6:5e:a7:48:1b:93:60:83: 82:74:9c:6b:67:21:fa:0a:32:5d:b1:e3:bc:33:29: 72:47:f1:f2:4b:a6:c9:f3:dd:d9:97:76:82:b4:2e: ff:fe:97:e6:53:1a:a2:a1:40:c7:17:c7:53:90:cd: 09:f9:1b:08:07:83:1b:c2:b9:ad:0f:43:ba:15:6e: e1:8c:b4:86:2f:15:8a:0b:c3:d9:3d:30:0e:c5:43: 5d:9c:24:cf:91:d1:85:43:ca:85:d2:27:1c:36:ec: 62:10:55:b9:40:8b:03:79:16:9e:c5:b2:88:0a:de: 7f:99:06:d3:51:a5:84:15:80:89:b8:00:54:ab:1d: 64:f0:22:66:93:b5:70:90:0c:15:d3:7d:28:85:a9: df:cd:fd:d5:30:42:3d:13:67:65:2d:bd:4f:65:3a: c5:d1:51:4b:7c:65:d0:b6:57:8e:27:b8:44:09:e3: 14:f1:31:f2:57:4c:1c:bb:af:ba:87:6d:8e:32:ea: 16:d2:6b:18:80:93:b3:a6:46:36:08:6d:18:4b:31: 2b:1f:b8:d5:af:10:49:07:dd:2a:2e:0f:d4:95:36: 17:40:27:9e:0a:92:45:3a:dd:43:4f:ab:29:ee:c3: 45:38:78:ab:49:67:f7:01:e9:d0:d8:06:60:31:16: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:86:79:3B:2C:77:96:54:39:50:C3:6D:30:AB:26:A6:F1:34:B0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl X509v3 Authority Key Identifier: keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer sbgp-ipAddrBlock: critical IPv4: 161.199.203.0/24 161.199.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fd:fe:ae:22:1f:01:5c:4e:1c:6c:38:b7:85:ad:33:9d:ba: 71:be:e3:ba:8f:f3:eb:19:df:2b:db:ce:f2:da:9d:ab:eb:e6: 58:e0:95:b2:98:52:76:62:61:12:65:14:5a:d3:76:15:9e:71: b4:21:dc:b1:24:82:84:a3:9f:94:9a:3a:5e:6f:e6:fe:d2:4e: 52:9d:0d:20:c6:e4:f2:8b:fc:22:ba:a4:50:ea:85:6e:0d:02: f4:ac:10:f4:73:b3:19:b7:3b:68:d7:c0:55:16:ec:ff:1b:18: 3a:51:8a:b6:f3:ec:de:6b:44:87:c9:36:e7:5b:eb:b2:7e:99: a3:06:db:81:21:3f:dc:25:d3:56:e2:42:48:c2:37:1d:6e:e7: 44:6c:62:ed:ff:c1:80:af:7b:77:99:77:43:d8:d1:22:58:a7: a3:9c:05:6f:52:9a:2f:8b:98:6c:06:fd:74:92:fa:23:d1:17: 74:a1:5f:73:11:3c:c7:a4:a6:24:f0:18:a0:a6:cd:3c:10:3c: f7:4d:e4:17:fc:ca:85:92:ae:9c:23:e1:4c:e3:f1:33:c1:62: 3c:03:03:48:23:4b:9d:43:9b:b4:39:2e:5d:fc:d4:70:b0:69: 8f:07:46:f5:b2:3a:d0:0a:18:f1:1a:5d:f7:c0:34:66:b8:0b: ae:9f:06:7b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt28iq9I3Snkk3cNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MDI3ZTktMDUxNy00Nzc1LWE2YzQtMzU1MjJlNjVl NGFkMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjFiOGE4YjEtZWQ3OS00M2RlLWExYmYtZWZlZDIzMjJhZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoixtekKu9l6nSBuTYIOCdJxrZyH6CjJdseO8 MylyR/HyS6bJ893Zl3aCtC7//pfmUxqioUDHF8dTkM0J+RsIB4MbwrmtD0O6FW7h jLSGLxWKC8PZPTAOxUNdnCTPkdGFQ8qF0iccNuxiEFW5QIsDeRaexbKICt5/mQbT UaWEFYCJuABUqx1k8CJmk7VwkAwV030ohanfzf3VMEI9E2dlLb1PZTrF0VFLfGXQ tleOJ7hECeMU8THyV0wcu6+6h22OMuoW0msYgJOzpkY2CG0YSzErH7jVrxBJB90q Lg/UlTYXQCeeCpJFOt1DT6sp7sNFOHirSWf3AenQ2AZgMRYaTQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD+GeTssd5ZUOVDDbTCrJqbxNLBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Yjkw MjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2NWU0YWQvZWI5NDkxODktODI3MS0z NTY3LWFjNGUtMDAzMWMzZmVjODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGI5MDI3ZTktMDUxNy00Nzc1LWE2 YzQtMzU1MjJlNjVlNGFkLzRiOTAyN2U5LTA1MTctNDc3NS1hNmM0LTM1NTIyZTY1 ZTRhZC5jcmwwHwYDVR0jBBgwFoAUaAaXzMELbzFO2zE1+i0H8zBpTwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUy MmU2NWU0YWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAocfLAwQA ocfmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFT9/q4iHwFcThxsOLeFrTOdunG+47qP8+sZ3yvbzvLanavr 5ljglbKYUnZiYRJlFFrTdhWecbQh3LEkgoSjn5SaOl5v5v7STlKdDSDG5PKL/CK6 pFDqhW4NAvSsEPRzsxm3O2jXwFUW7P8bGDpRirbz7N5rRIfJNudb67J+maMG24Eh P9wl01biQkjCNx1u50RsYu3/wYCve3eZd0PY0SJYp6OcBW9Smi+LmGwG/XSS+iPR F3ShX3MRPMekpiTwGKCmzTwQPPdN5Bf8yoWSrpwj4Uzj8TPBYjwDA0gjS51Dm7Q5 Ll381HCwaY8HRvWyOtAKGPEaXffANGa4C66fBns= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:39 2025 by rpki-client