$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/2a211500-b808-300b-9927-2076eca3b396.roa File: 2a211500-b808-300b-9927-2076eca3b396.roa (raw, json) Hash identifier: eN+pf7TsmV78XiJ0koxyCpuhKSa5RLbAxYGh45FBqzA= Subject key identifier: E1:CA:8C:D6:61:DD:70:1E:9F:C7:D6:9C:C2:61:70:10:D7:7E:B0:31 Certificate issuer: /CN=112c6636-0b34-4e47-95cc-29a6b53a3388 Certificate serial: 010D0C9F4328584B715CAB2528DCB7CD8FBC8200 Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/2a211500-b808-300b-9927-2076eca3b396.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 397641 IP address blocks: 161.195.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ab:25:28:dc:b7:cd:8f:bc:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=624cf7dc-4831-487f-a8b3-0c1083ac470b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:a3:4b:17:12:18:a2:a0:f6:67:5f:20:8d: 86:4b:32:2b:74:b9:2a:f7:94:6c:c7:ab:91:18:01: 98:02:f9:b2:a6:42:19:77:65:fd:24:74:9f:3c:f6: b3:59:fd:ca:0c:4b:62:4d:eb:6f:7c:13:0c:46:da: ca:4e:2d:76:a1:c5:5f:57:43:13:e1:a5:dc:69:d6: c1:ac:48:75:0e:af:bb:d2:58:4b:af:33:76:17:87: 90:6c:d7:9a:7c:c6:74:6f:e1:fa:ba:1b:6e:52:8e: fc:7a:d4:80:9f:83:40:6a:b5:81:12:eb:e8:0c:07: 11:b0:7f:79:c7:84:f5:b1:b9:10:97:f7:a4:23:ca: 3a:dc:5b:b0:91:a3:78:23:a8:71:72:97:2b:b1:e7: b8:7c:62:c9:63:bc:6d:25:79:c4:26:9f:6c:6b:53: 5b:be:65:27:47:89:58:16:08:5e:bf:87:e8:75:87: 23:3b:cb:cd:33:d4:12:6a:fa:60:08:6f:8f:ff:8e: d3:4f:6d:97:2d:cc:25:8d:a7:d6:e4:82:fd:12:cf: 07:86:90:72:aa:93:ea:60:1e:7a:b1:3f:a6:03:9e: 05:a2:e7:7b:5b:b1:ee:3d:c2:c3:d0:3c:6a:a9:15: 7c:8d:99:20:e5:68:68:94:d3:ef:b5:77:20:73:e1: b2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CA:8C:D6:61:DD:70:1E:9F:C7:D6:9C:C2:61:70:10:D7:7E:B0:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/2a211500-b808-300b-9927-2076eca3b396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl X509v3 Authority Key Identifier: keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer sbgp-ipAddrBlock: critical IPv4: 161.195.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cc:00:f2:c9:67:51:d8:b5:1e:43:a8:4f:a1:cb:5a:56:45: e4:69:68:d9:69:9b:8d:21:7f:a0:68:dd:7e:4d:b7:af:ce:e6: 78:be:db:72:00:b1:4a:7c:58:dd:e9:92:1d:fb:23:9b:c1:e0: 44:23:1d:58:15:26:01:19:9a:0c:c6:94:e1:ff:41:ed:3e:1a: 99:a3:dc:87:e6:93:d1:33:ac:6d:92:c6:42:7d:7a:10:94:14: f6:a9:20:11:23:ed:72:fd:65:d4:1f:93:5d:62:55:11:8e:3c: e5:62:10:73:34:53:52:f4:92:cb:fa:ce:4a:01:ea:2a:a7:86: eb:d2:3c:5f:fe:ab:dd:b5:87:78:8f:3b:a9:25:69:fd:a5:06: 33:aa:5f:66:c2:ad:91:e8:ee:26:cc:78:db:70:47:eb:a6:62: 33:da:54:07:45:d7:44:34:95:b5:2c:f1:e9:5f:ce:9c:da:76: 07:c1:b3:9c:fa:c2:e1:de:96:40:23:b6:03:9e:04:cb:13:bf: c7:9b:19:e0:77:89:34:5f:51:c3:0f:08:40:f7:59:0e:c9:c5: 4d:7f:28:c1:dc:75:96:89:a1:df:fb:e1:50:3e:9d:ba:2c:30: ba:50:39:0b:6a:6a:3f:b3:1e:4d:d7:1e:36:10:72:83:34:c2: b2:f2:f6:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKslKNy3zY+8ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTEyYzY2MzYtMGIzNC00ZTQ3LTk1Y2MtMjlhNmI1M2Ez Mzg4MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjI0Y2Y3ZGMtNDgzMS00ODdmLWE4YjMtMGMxMDgzYWM0NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBmjSxcSGKKg9mdfII2GSzIrdLkq95Rsx6uR GAGYAvmypkIZd2X9JHSfPPazWf3KDEtiTetvfBMMRtrKTi12ocVfV0MT4aXcadbB rEh1Dq+70lhLrzN2F4eQbNeafMZ0b+H6uhtuUo78etSAn4NAarWBEuvoDAcRsH95 x4T1sbkQl/ekI8o63FuwkaN4I6hxcpcrsee4fGLJY7xtJXnEJp9sa1NbvmUnR4lY Fghev4fodYcjO8vNM9QSavpgCG+P/47TT22XLcwljafW5IL9Es8HhpByqpPqYB56 sT+mA54Foud7W7HuPcLD0DxqqRV8jZkg5WholNPvtXcgc+Gy+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHKjNZh3XAen8fWnMJhcBDXfrAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJj NjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2YjUzYTMzODgvMmEyMTE1MDAtYjgwOC0z MDBiLTk5MjctMjA3NmVjYTNiMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTEyYzY2MzYtMGIzNC00ZTQ3LTk1 Y2MtMjlhNmI1M2EzMzg4LzExMmM2NjM2LTBiMzQtNGU0Ny05NWNjLTI5YTZiNTNh MzM4OC5jcmwwHwYDVR0jBBgwFoAU5SZko3dDzL1J1R4WQ4IVj9eHuuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJjNjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2 YjUzYTMzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCocPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzMAPLJZ1HYtR5DqE+hy1pWReRpaNlpm40hf6Bo3X5Nt6/O5ni+23IA sUp8WN3pkh37I5vB4EQjHVgVJgEZmgzGlOH/Qe0+Gpmj3Ifmk9EzrG2SxkJ9ehCU FPapIBEj7XL9ZdQfk11iVRGOPOViEHM0U1L0ksv6zkoB6iqnhuvSPF/+q921h3iP O6klaf2lBjOqX2bCrZHo7ibMeNtwR+umYjPaVAdF10Q0lbUs8elfzpzadgfBs5z6 wuHelkAjtgOeBMsTv8ebGeB3iTRfUcMPCED3WQ7JxU1/KMHcdZaJod/74VA+nbos MLpQOQtqaj+zHk3XHjYQcoM0wrLy9i4= -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:47 2025 by rpki-client