$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa File: 599a3cef-130f-3ac0-802b-3ae5797ea70e.roa (raw, json) Hash identifier: vIWmvrbJYLdcTjPyOsVvnhKlKrXZ4kO+9MbtZ+ezRCE= Subject key identifier: 2F:9D:8B:C8:0B:F2:4C:4D:C4:0D:C8:D3:98:64:3D:BE:74:05:17:18 Certificate issuer: /CN=c88386bc-096d-46b5-8278-7abb79f23665 Certificate serial: 010D0C9F4328584AF0F13BCA3C5E73A0F4472980 Authority key identifier: 7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 7311 IP address blocks: 161.129.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3b:ca:3c:5e:73:a0:f4:47:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88386bc-096d-46b5-8278-7abb79f23665 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=996fcb74-84d8-4771-ab37-d2c2d2a5804e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:ac:f4:48:e1:d6:da:68:2a:5c:04:67:72: 47:d7:d6:db:1f:f1:36:58:61:ce:c5:72:86:45:55: 80:61:98:bd:a3:26:04:85:ea:03:79:5f:85:1d:62: c0:4c:a6:93:17:6f:22:9a:4b:8f:0b:a7:28:de:51: 82:80:be:33:ed:7f:bd:90:22:70:d7:bf:88:3e:4d: 5f:1f:86:9c:ce:b2:d1:04:32:02:07:b7:ff:fe:08: 22:50:06:36:5b:2b:c7:11:d4:03:a7:89:12:6b:cc: fd:6a:c7:dd:9f:10:1b:4d:56:1c:1e:4d:90:7f:3a: 1d:f5:9f:76:c7:d5:82:b0:51:e5:40:55:fd:49:66: 3f:c7:6d:9a:2e:7a:69:46:b3:62:26:79:90:56:ce: 87:60:f7:af:94:2b:bd:f7:be:af:3b:17:9d:3c:58: 1c:7c:5c:0c:f7:06:b7:3b:f3:a9:d4:a6:c5:76:bf: c4:27:96:f2:36:18:68:8b:4b:03:34:41:b0:50:ab: 59:90:2c:47:54:af:76:a2:9c:a3:4a:94:ab:e6:ab: 05:6f:de:dd:6e:91:f4:c2:c8:ec:eb:4b:88:e1:00: 53:c6:77:1e:7d:7c:26:eb:5e:ba:0c:0b:d6:62:ee: 69:e6:96:51:e3:3e:03:f8:12:93:71:ff:7c:a1:d0: ee:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9D:8B:C8:0B:F2:4C:4D:C4:0D:C8:D3:98:64:3D:BE:74:05:17:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/599a3cef-130f-3ac0-802b-3ae5797ea70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665/c88386bc-096d-46b5-8278-7abb79f23665.crl X509v3 Authority Key Identifier: keyid:7D:3F:78:AA:D9:A1:EE:C4:6E:D8:24:9F:83:D2:8C:69:53:09:D2:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c88386bc-096d-46b5-8278-7abb79f23665.cer sbgp-ipAddrBlock: critical IPv4: 161.129.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:76:79:8c:4d:59:8a:ca:5d:b1:e2:98:c8:04:26:c5:ae:67: e8:0a:5c:a4:44:8d:f3:c1:5b:93:cc:51:61:6d:16:49:f8:8b: ba:a2:68:41:b7:8b:1c:c0:da:36:26:1b:e9:05:45:8f:58:37: a9:02:b6:93:e9:99:4d:f6:cc:1d:9b:27:df:56:37:98:80:a6: bd:a6:a8:d8:7f:e4:32:2c:b9:3e:0a:ff:d7:01:69:99:1f:a6: 10:d2:e5:01:83:09:51:e5:fb:b6:a9:38:63:04:b0:d0:ea:e1: 7c:e6:61:15:a6:de:9c:9f:8f:b6:d9:b9:02:a9:55:2c:96:e0: 7f:c7:63:36:33:9b:d7:36:de:0b:2f:91:b1:29:64:9c:2a:bd: 7a:7b:bc:a7:31:b8:6c:68:9b:9d:c3:11:98:94:33:3f:24:5d: e5:d3:3f:ba:1a:85:ca:c6:76:e9:5d:fe:ba:25:ad:22:be:ac: 40:e3:6d:41:52:b1:74:66:a4:94:fa:a4:1f:5a:9e:98:c6:6e: 9f:78:8b:cc:3b:00:cf:c5:70:56:17:27:70:20:97:d1:62:c8: f3:6a:49:89:db:56:62:b1:f7:fc:70:3c:2c:6a:1c:d0:b9:6c: 6a:b2:c9:3f:1b:8c:7e:4d:49:99:a5:2e:9d:d5:1d:0b:97:c3: 12:5a:36:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TvKPF5zoPRHKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4Mzg2YmMtMDk2ZC00NmI1LTgyNzgtN2FiYjc5ZjIz NjY1MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OTk2ZmNiNzQtODRkOC00NzcxLWFiMzctZDJjMmQyYTU4MDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpKs9Ejh1tpoKlwEZ3JH19bbH/E2WGHOxXKG RVWAYZi9oyYEheoDeV+FHWLATKaTF28imkuPC6co3lGCgL4z7X+9kCJw17+IPk1f H4aczrLRBDICB7f//ggiUAY2WyvHEdQDp4kSa8z9asfdnxAbTVYcHk2Qfzod9Z92 x9WCsFHlQFX9SWY/x22aLnppRrNiJnmQVs6HYPevlCu9976vOxedPFgcfFwM9wa3 O/Op1KbFdr/EJ5byNhhoi0sDNEGwUKtZkCxHVK92opyjSpSr5qsFb97dbpH0wsjs 60uI4QBTxncefXwm6166DAvWYu5p5pZR4z4D+BKTcf98odDugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+di8gL8kxNxA3I05hkPb50BRcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODgz ODZiYy0wOTZkLTQ2YjUtODI3OC03YWJiNzlmMjM2NjUvNTk5YTNjZWYtMTMwZi0z YWMwLTgwMmItM2FlNTc5N2VhNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg4Mzg2YmMtMDk2ZC00NmI1LTgy NzgtN2FiYjc5ZjIzNjY1L2M4ODM4NmJjLTA5NmQtNDZiNS04Mjc4LTdhYmI3OWYy MzY2NS5jcmwwHwYDVR0jBBgwFoAUfT94qtmh7sRu2CSfg9KMaVMJ0jowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODgzODZiYy0wOTZkLTQ2YjUtODI3OC03YWJi NzlmMjM2NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ2eYxNWYrKXbHimMgEJsWuZ+gKXKREjfPBW5PMUWFtFkn4i7qiaEG3 ixzA2jYmG+kFRY9YN6kCtpPpmU32zB2bJ99WN5iApr2mqNh/5DIsuT4K/9cBaZkf phDS5QGDCVHl+7apOGMEsNDq4XzmYRWm3pyfj7bZuQKpVSyW4H/HYzYzm9c23gsv kbEpZJwqvXp7vKcxuGxom53DEZiUMz8kXeXTP7oahcrGduld/rolrSK+rEDjbUFS sXRmpJT6pB9anpjGbp94i8w7AM/FcFYXJ3Agl9FiyPNqSYnbVmKx9/xwPCxqHNC5 bGqyyT8bjH5NSZmlLp3VHQuXwxJaNuU= -----END CERTIFICATE-----Generated at Mon Nov 3 04:31:34 2025 by rpki-client