$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa File: f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa (raw, json) Hash identifier: 90uAyc/YOLtM2sESdKqrWQ9LTYs0S4n8VZI3Sm3UIrs= Subject key identifier: 3D:13:A4:2F:15:A9:D6:61:4F:DC:46:61:2C:C9:AC:3A:D5:A6:86:59 Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0 Certificate serial: 010D0C9F4328584B3DB70450E0934404AED3EE00 Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 40916 IP address blocks: 163.123.152.0/24 maxlen: 24 163.123.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:04:50:e0:93:44:04:ae:d3:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b8f8fe5f-5566-4a36-a518-2f9dd5461658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:4f:2b:00:e1:95:d2:bf:bb:3d:d0:5e:9e: 46:6d:73:df:5b:00:68:e4:ee:3a:4f:2d:bf:e0:8b: 9d:60:1f:74:94:4d:63:b1:f7:08:a0:69:00:10:64: 83:30:82:49:f8:e4:5f:cf:11:2b:9a:96:49:d9:9d: 56:0a:34:08:a8:4c:45:6a:11:0f:41:d9:6d:06:2d: df:6c:56:5c:d5:51:da:f6:fd:05:a8:63:d3:22:31: 7d:25:16:8e:25:1b:0c:bc:a1:48:ea:52:37:69:20: 43:5d:52:ef:3d:0c:e4:6e:d1:fc:99:17:44:0b:7e: 80:fe:93:06:6c:17:f2:b0:b8:58:a9:29:53:ad:aa: 05:8b:ed:59:ce:5d:30:9a:58:85:7e:f0:88:37:b4: ed:2a:65:10:41:13:e9:4a:7f:01:43:a1:86:6d:40: c4:85:32:6b:47:2a:bf:1e:24:5b:38:e8:1d:1a:b1: 65:64:83:78:74:5f:cd:a3:b1:2f:bb:93:32:9d:80: 8a:37:a0:5b:8f:5e:e2:88:e1:80:8d:ec:c4:d1:56: 46:af:d7:b5:55:b9:a7:74:a1:cb:1f:53:80:24:8b: 0c:14:15:e9:60:5e:94:b1:9b:fe:c4:1c:cd:ed:c3: 57:a8:b9:4e:47:88:03:6f:27:40:77:79:71:13:47: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:A4:2F:15:A9:D6:61:4F:DC:46:61:2C:C9:AC:3A:D5:A6:86:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl X509v3 Authority Key Identifier: keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer sbgp-ipAddrBlock: critical IPv4: 163.123.152.0/24 163.123.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f0:54:d6:3d:a3:26:c5:26:44:0f:3d:ab:b4:de:91:39:d6: 49:e5:02:d9:f4:58:d2:e8:b8:cb:88:47:26:0b:f6:b5:9c:65: d4:d1:95:10:c5:27:2b:69:a9:94:4d:c5:68:a6:ff:bf:cc:f3: 02:88:ae:b0:d1:73:f7:5f:34:83:ff:ea:ea:25:32:dc:bb:e5: d2:4b:e5:30:ae:ed:f6:6b:15:8a:6b:68:bc:74:d7:8c:56:6d: 0d:95:91:e1:9b:f1:11:2d:f9:70:46:f1:7f:6a:1a:ef:6c:1e: c8:a7:0c:a0:eb:7a:c2:c7:70:e6:8d:a8:2c:a4:c3:63:c8:38: dd:42:7c:fb:1a:2a:68:61:c5:6f:2f:b3:85:57:61:13:c8:fa: 4d:bd:21:73:1f:0f:4c:db:43:e7:22:6f:c8:85:aa:c3:3b:34: 4d:50:b9:c1:87:d7:b4:55:f6:d7:90:97:95:52:3a:90:f8:8a: 74:86:c0:5f:3a:b0:8e:31:02:3d:b1:70:3d:37:52:89:6a:f4: 10:64:63:65:a1:00:21:4a:fc:34:f2:0e:cb:94:cd:c0:ad:1e: 44:ab:91:a5:2f:09:d5:c6:a4:f1:3c:38:2e:62:c3:45:11:d0: 1d:16:48:db:3f:42:7b:05:df:bf:b6:3a:15:7a:05:99:e3:da: 74:6b:7c:d3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs9twRQ4JNEBK7T7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5 ZmUwMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjhmOGZlNWYtNTU2Ni00YTM2LWE1MTgtMmY5ZGQ1NDYxNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrpPKwDhldK/uz3QXp5GbXPfWwBo5O46Ty2/ 4IudYB90lE1jsfcIoGkAEGSDMIJJ+ORfzxErmpZJ2Z1WCjQIqExFahEPQdltBi3f bFZc1VHa9v0FqGPTIjF9JRaOJRsMvKFI6lI3aSBDXVLvPQzkbtH8mRdEC36A/pMG bBfysLhYqSlTraoFi+1Zzl0wmliFfvCIN7TtKmUQQRPpSn8BQ6GGbUDEhTJrRyq/ HiRbOOgdGrFlZIN4dF/No7Evu5MynYCKN6Bbj17iiOGAjezE0VZGr9e1VbmndKHL H1OAJIsMFBXpYF6UsZv+xBzN7cNXqLlOR4gDbydAd3lxE0ePewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD0TpC8VqdZhT9xGYSzJrDrVpoZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1 NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvZjIxZjEwZjAtZGEyZi0z N2M1LTk5ZDUtMDkzNWEyZDc0YWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1 OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh ZmMwNTlmZTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAo3uYAwQA o3uaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE7wVNY9oybFJkQPPau03pE51knlAtn0WNLouMuIRyYL9rWc ZdTRlRDFJytpqZRNxWim/7/M8wKIrrDRc/dfNIP/6uolMty75dJL5TCu7fZrFYpr aLx014xWbQ2VkeGb8REt+XBG8X9qGu9sHsinDKDresLHcOaNqCykw2PION1CfPsa KmhhxW8vs4VXYRPI+k29IXMfD0zbQ+cib8iFqsM7NE1QucGH17RV9teQl5VSOpD4 inSGwF86sI4xAj2xcD03Uolq9BBkY2WhACFK/DTyDsuUzcCtHkSrkaUvCdXGpPE8 OC5iw0UR0B0WSNs/QnsF37+2OhV6BZnj2nRrfNM= -----END CERTIFICATE-----Generated at Tue Nov 4 17:20:19 2025 by rpki-client