$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa File: 09223a2e-2947-361f-938a-98cbd7de56d5.roa (raw, json) Hash identifier: UmDX+AF/YVeVkdiMxPuWaMzD4vlOV0VQ/bMDoeJ9vlQ= Subject key identifier: 05:8C:9B:FD:12:D5:53:46:49:7E:81:12:A6:3F:A5:0D:AF:77:08:F7 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B48E1B3E8D6EFCDAE3419FBC0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 1239 IP address blocks: 161.199.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b3:e8:d6:ef:cd:ae:34:19:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d806a9cd-5eb1-48f0-b411-5836a8244913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:fe:7a:e8:f2:ff:d3:85:6c:24:b3:76:ea: 31:d5:db:b5:f7:34:90:db:76:85:d6:a3:cd:2d:16: 4b:87:6d:73:d8:ff:a1:2b:d0:3d:04:eb:67:5c:8b: 13:58:0c:9d:c5:19:6f:4f:ea:ad:28:67:db:4d:97: 7c:1d:6c:5e:e3:74:80:4d:29:d0:a6:26:4b:20:d5: 82:91:70:6c:b7:5a:6f:dd:e8:0b:18:0a:86:a5:3c: 42:a2:e5:51:58:98:15:d7:3e:f9:c0:6a:98:64:09: 9c:3a:4f:46:27:a8:28:8f:01:e9:cf:1c:ac:cf:ae: d2:c5:4b:80:c1:cf:d3:58:34:4e:c1:b0:00:d7:50: 59:b2:fe:bc:da:b1:87:6c:10:9b:0b:70:9c:af:ec: 8f:26:18:86:be:73:7f:dd:c9:ce:25:91:f5:94:8a: 00:d7:a1:4e:f4:c2:86:ea:80:f9:e3:6b:d8:8e:30: 6d:13:38:5f:a7:c0:79:66:1d:d8:a3:ea:08:64:03: 23:b5:d0:83:b6:fb:38:0b:ec:95:a8:1b:27:1f:2d: a2:e7:6f:db:98:37:92:5b:20:13:c3:ce:31:6c:ec: 10:c2:d4:bf:da:e6:ba:53:e5:9f:a6:85:de:c4:ee: d4:23:25:68:a7:1f:d1:e2:b6:a4:6e:6b:48:4a:c1: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8C:9B:FD:12:D5:53:46:49:7E:81:12:A6:3F:A5:0D:AF:77:08:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/09223a2e-2947-361f-938a-98cbd7de56d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 161.199.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2b:1e:d0:26:67:2a:b5:08:d4:98:ac:b7:e9:0c:da:ac:20: c9:ba:11:bd:48:af:03:a9:70:11:58:4f:3d:83:17:aa:53:39: 09:01:74:14:5a:53:0d:9f:03:82:1d:aa:37:f3:67:f4:1a:df: ac:f0:be:78:d2:26:2f:59:5a:7a:54:1a:59:d3:b0:4e:13:cd: d3:bf:a0:47:78:94:e4:ba:47:9e:b0:04:a2:1c:be:6e:48:fd: cd:01:7b:95:9e:c4:8a:4a:6a:bc:bd:b1:5e:90:e8:a7:77:ee: 69:74:a0:7b:06:ce:85:f5:ee:26:04:20:b4:c6:2b:74:c8:29: 8b:dd:80:07:8e:18:e8:2f:44:ad:6a:21:7b:e3:20:61:31:ef: 35:ea:e3:84:b7:f6:23:80:4e:ef:47:be:8c:01:6b:b6:a8:f4: 47:6e:d7:4f:ba:87:f6:eb:f4:e6:95:43:d5:8d:a1:8c:86:53: 89:95:0a:81:12:2b:f3:07:2d:fb:ee:f7:fe:0e:76:f9:e3:ad: e3:5e:88:8c:d7:92:5d:ea:f2:44:52:3f:32:47:e9:59:48:24: 14:16:fe:90:dc:56:bd:32:2e:d9:26:80:d0:59:c4:96:f8:7e: 0e:9c:0a:b6:17:7b:b3:b7:53:90:7c:b8:14:e9:23:93:9b:d0: e0:16:fb:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bPo1u/NrjQZ+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDgwNmE5Y2QtNWViMS00OGYwLWI0MTEtNTgzNmE4MjQ0OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpj+eujy/9OFbCSzduox1du19zSQ23aF1qPN LRZLh21z2P+hK9A9BOtnXIsTWAydxRlvT+qtKGfbTZd8HWxe43SATSnQpiZLINWC kXBst1pv3egLGAqGpTxCouVRWJgV1z75wGqYZAmcOk9GJ6gojwHpzxysz67SxUuA wc/TWDROwbAA11BZsv682rGHbBCbC3Ccr+yPJhiGvnN/3cnOJZH1lIoA16FO9MKG 6oD542vYjjBtEzhfp8B5Zh3Yo+oIZAMjtdCDtvs4C+yVqBsnHy2i52/bmDeSWyAT w84xbOwQwtS/2ua6U+WfpoXexO7UIyVopx/R4rakbmtISsEy4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWMm/0S1VNGSX6BEqY/pQ2vdwj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDkyMjNhMmUtMjk0Ny0z NjFmLTkzOGEtOThjYmQ3ZGU1NmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocfjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMrHtAmZyq1CNSYrLfpDNqsIMm6Eb1IrwOpcBFYTz2DF6pTOQkBdBRa Uw2fA4IdqjfzZ/Qa36zwvnjSJi9ZWnpUGlnTsE4TzdO/oEd4lOS6R56wBKIcvm5I /c0Be5WexIpKary9sV6Q6Kd37ml0oHsGzoX17iYEILTGK3TIKYvdgAeOGOgvRK1q IXvjIGEx7zXq44S39iOATu9HvowBa7ao9Edu10+6h/br9OaVQ9WNoYyGU4mVCoES K/MHLfvu9/4OdvnjreNeiIzXkl3q8kRSPzJH6VlIJBQW/pDcVr0yLtkmgNBZxJb4 fg6cCrYXe7O3U5B8uBTpI5Ob0OAW+3w= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:57 2025 by rpki-client