$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e175a636-b034-37f5-bd1d-f993b958b0b3.roa File: e175a636-b034-37f5-bd1d-f993b958b0b3.roa (raw, json) Hash identifier: dC1N3s7xstXSDJsdk/1zMBCgowkDZsl5aNmAJbJ7v4E= Subject key identifier: 47:E9:02:44:B5:49:49:46:37:A9:B1:21:10:A2:20:3E:FC:07:08:21 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B477C78C56D78180533F7C9D8 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e175a636-b034-37f5-bd1d-f993b958b0b3.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 174 IP address blocks: 161.199.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:78:c5:6d:78:18:05:33:f7:c9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=9d7c5b0f-d3bc-48ff-8e24-d31fe197a82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:4e:2b:6c:bd:bd:26:46:74:16:9d:a7:fe: a6:7b:7f:23:8d:b2:1f:a8:7a:0f:d6:be:88:2d:ce: 21:d9:30:fa:c7:28:bc:fd:7f:75:62:41:a0:24:d5: b3:57:1d:48:c3:4c:c1:33:85:e3:c4:e1:c6:65:7e: 96:c2:be:d8:a1:db:fb:19:f9:5b:a8:71:5b:e1:35: a6:be:a3:a1:e5:93:f1:1b:a5:91:44:09:86:4c:c9: 72:35:cc:a1:6c:1e:fa:d3:1d:6a:f9:8a:96:76:0d: 11:11:bd:c8:b4:5c:38:34:18:1f:d1:6f:25:d3:0d: b8:ac:33:60:70:ef:cd:a6:16:e4:6f:64:31:63:76: e4:61:40:3a:af:a6:de:df:77:1c:23:b0:91:d1:e5: df:33:36:91:23:77:fb:87:d4:ba:f7:0f:9e:07:93: 09:10:20:b6:92:5d:da:f6:0d:9e:07:db:e5:5d:3d: 5f:7f:10:57:7a:cc:68:8f:4a:d2:3b:51:fe:06:47: 8c:a7:16:ef:4f:91:99:3f:5a:d1:33:28:9f:af:46: 11:81:59:ee:38:22:e7:5e:fc:30:c8:2e:f4:70:2a: 6b:d7:bd:a8:1e:8a:77:4e:cf:0a:19:f3:8e:ef:f0: 14:30:c2:3c:25:1b:71:69:c1:86:03:b1:58:91:43: 0d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E9:02:44:B5:49:49:46:37:A9:B1:21:10:A2:20:3E:FC:07:08:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/e175a636-b034-37f5-bd1d-f993b958b0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 161.199.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:eb:8d:7d:c3:ec:90:f6:ac:50:df:d6:73:da:f6:5a:3c:a9: bc:9c:f0:35:1b:51:2e:9a:06:58:fe:0b:92:7a:ea:9e:7b:23: d2:a8:ac:ab:fa:af:a5:25:3b:b8:de:22:9d:ec:c3:68:5b:e6: fd:3b:0a:1e:82:16:ec:65:32:47:50:f3:38:a8:ca:72:f7:f1: fd:09:e7:ea:40:a6:36:5c:e1:4b:d1:a0:6b:b8:17:88:44:23: bd:91:42:7a:b2:3e:0f:18:b4:3b:f7:7b:90:90:81:c4:68:56: f5:0b:22:8c:6e:20:cf:f5:a8:91:21:b4:fb:33:d7:1a:a3:38: 18:e2:d2:28:1e:13:54:2b:16:83:4e:dc:a8:d1:23:64:03:eb: ec:37:65:53:c7:40:71:e3:45:6e:6b:ad:76:60:42:59:c6:7e: 09:53:71:96:35:b4:d5:68:d1:bb:69:28:df:2f:17:3d:57:c5: 97:81:fd:32:ed:e3:e0:00:6d:08:df:6d:9b:ab:25:3a:e8:2a: ed:9f:fd:d8:1a:72:5c:ff:51:97:ed:e4:f7:96:0c:8b:be:2d: b7:ef:9a:24:18:bc:ab:0f:92:47:76:30:8a:33:49:4e:74:c9: d2:c4:70:05:8c:05:77:7f:3f:63:34:33:77:7a:f0:46:56:e7: 71:e1:e6:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHjFbXgYBTP3ydgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OWQ3YzViMGYtZDNiYy00OGZmLThlMjQtZDMxZmUxOTdhODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHdOK2y9vSZGdBadp/6me38jjbIfqHoP1r6I Lc4h2TD6xyi8/X91YkGgJNWzVx1Iw0zBM4XjxOHGZX6Wwr7Yodv7GflbqHFb4TWm vqOh5ZPxG6WRRAmGTMlyNcyhbB760x1q+YqWdg0REb3ItFw4NBgf0W8l0w24rDNg cO/Nphbkb2QxY3bkYUA6r6be33ccI7CR0eXfMzaRI3f7h9S69w+eB5MJECC2kl3a 9g2eB9vlXT1ffxBXesxoj0rSO1H+BkeMpxbvT5GZP1rRMyifr0YRgVnuOCLnXvww yC70cCpr172oHop3Ts8KGfOO7/AUMMI8JRtxacGGA7FYkUMNJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfpAkS1SUlGN6mxIRCiID78BwghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZTE3NWE2MzYtYjAzNC0z N2Y1LWJkMWQtZjk5M2I5NThiMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocfjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzrjX3D7JD2rFDf1nPa9lo8qbyc8DUbUS6aBlj+C5J66p57I9KorKv6 r6UlO7jeIp3sw2hb5v07Ch6CFuxlMkdQ8zioynL38f0J5+pApjZc4UvRoGu4F4hE I72RQnqyPg8YtDv3e5CQgcRoVvULIoxuIM/1qJEhtPsz1xqjOBji0igeE1QrFoNO 3KjRI2QD6+w3ZVPHQHHjRW5rrXZgQlnGfglTcZY1tNVo0btpKN8vFz1XxZeB/TLt 4+AAbQjfbZurJTroKu2f/dgaclz/UZft5PeWDIu+LbfvmiQYvKsPkkd2MIozSU50 ydLEcAWMBXd/P2M0M3d68EZW53Hh5uc= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:47 2025 by rpki-client