$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/170cecee-fa43-3758-a742-614283780433.roa File: 170cecee-fa43-3758-a742-614283780433.roa (raw, json) Hash identifier: lDUQOD555qFtRMHBr+5Po+7EV/8y2d01PGKp0WkyQd8= Subject key identifier: E6:24:B6:A3:C5:BF:03:8F:C6:88:CD:49:C5:88:14:05:13:74:FE:B8 Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Certificate serial: 010D0C9F4328584B41E7100D42E1CBB6F4C4F840 Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/170cecee-fa43-3758-a742-614283780433.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 62592 IP address blocks: 161.199.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:10:0d:42:e1:cb:b6:f4:c4:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=9b7bd05c-f4a6-4eac-8201-5788e0a884f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:57:58:49:0f:7c:e8:7d:3c:03:b1:32:88:97: 03:a7:86:36:ca:a9:51:d8:cb:d0:ac:c8:5a:1b:c0: b9:76:eb:0d:b5:fc:17:e3:8c:d9:61:e1:ac:5c:ea: 33:c8:f8:44:97:8c:52:28:ca:45:5f:40:16:e2:72: 10:8d:c6:a1:aa:cc:63:ac:a4:6d:0f:30:42:22:6f: a1:c4:a4:21:f4:57:60:23:28:90:06:c0:7e:91:85: 5e:57:ee:48:b1:a7:d3:b5:c3:ce:b4:ed:d3:57:13: ea:2d:9f:d3:0d:12:ee:4c:d0:bb:67:58:d0:46:32: 4f:a0:76:fc:74:7b:ad:9f:88:5e:cb:46:95:cd:6d: 28:1e:61:7a:a4:6f:78:76:0f:b7:f5:80:73:7c:6a: ba:bb:32:f8:cc:58:bc:8f:df:29:f8:39:5f:2f:30: f1:9c:4a:c5:b5:60:ff:4f:e1:3a:da:95:36:14:6a: 68:0d:a3:c1:27:ac:41:49:c3:00:19:d4:4c:14:d7: be:0a:c5:0a:73:e1:42:35:f1:ec:31:2c:87:f3:6d: 68:1d:dd:c2:52:20:1f:a3:e4:f3:b8:3f:dc:a9:a9: f1:b7:29:ba:ab:79:af:85:42:d9:7a:61:02:ce:90: d0:2b:8b:05:23:0f:66:0f:c0:07:b9:28:5a:66:63: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:24:B6:A3:C5:BF:03:8F:C6:88:CD:49:C5:88:14:05:13:74:FE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/170cecee-fa43-3758-a742-614283780433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl X509v3 Authority Key Identifier: keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer sbgp-ipAddrBlock: critical IPv4: 161.199.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:18:68:c4:4f:c0:b0:41:8d:b0:f8:14:a0:52:30:e3:da:53: f3:a6:20:6f:06:e0:f5:68:da:f9:85:44:f1:a8:91:28:1f:bb: 90:d1:f1:11:cc:e5:c6:89:f7:7e:1b:41:f5:ff:56:de:68:9f: bc:e1:77:b5:18:ca:5d:cc:be:3f:a6:b9:af:a6:6d:a0:4d:a1: 17:2c:21:6a:17:01:d0:31:b3:48:ae:53:b3:69:86:a5:c0:b9: b5:02:53:19:7b:8d:b1:b2:d7:ea:fb:35:37:85:1e:31:c5:b0: 83:8b:a7:61:e0:20:81:dd:f3:a5:91:7c:51:b3:cb:75:b1:69: 00:55:39:d7:bf:67:67:46:ee:84:0f:de:ac:aa:4f:75:f1:3a: 3c:d3:3d:de:47:25:cc:0f:fc:12:e0:7f:89:84:91:ea:66:28: 4b:e6:01:00:93:05:17:a6:5b:34:1f:e3:0e:e9:b2:62:3a:ba: 9a:23:6d:ec:8f:6a:d8:6c:35:a7:02:28:27:46:c2:47:5b:c1: 6d:74:07:10:b0:b9:86:35:14:09:76:5e:7b:27:d3:bf:e0:4e: 79:29:0e:66:74:ed:e3:68:c6:36:32:56:0b:53:d7:f6:1c:b1: 06:3d:cd:d1:2f:24:7d:49:cc:e7:9f:15:2b:0d:c6:17:c1:c9: 24:fe:64:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xANQuHLtvTE+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw MTE0MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OWI3YmQwNWMtZjRhNi00ZWFjLTgyMDEtNTc4OGUwYTg4NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FdYSQ986H08A7EyiJcDp4Y2yqlR2MvQrMha G8C5dusNtfwX44zZYeGsXOozyPhEl4xSKMpFX0AW4nIQjcahqsxjrKRtDzBCIm+h xKQh9FdgIyiQBsB+kYVeV+5IsafTtcPOtO3TVxPqLZ/TDRLuTNC7Z1jQRjJPoHb8 dHutn4hey0aVzW0oHmF6pG94dg+39YBzfGq6uzL4zFi8j98p+DlfLzDxnErFtWD/ T+E62pU2FGpoDaPBJ6xBScMAGdRMFNe+CsUKc+FCNfHsMSyH821oHd3CUiAfo+Tz uD/cqanxtym6q3mvhULZemECzpDQK4sFIw9mD8AHuShaZmORNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYktqPFvwOPxojNScWIFAUTdP64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1 OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMTcwY2VjZWUtZmE0My0z NzU4LWE3NDItNjE0MjgzNzgwNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4 N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCocc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8YaMRPwLBBjbD4FKBSMOPaU/OmIG8G4PVo2vmFRPGokSgfu5DR8RHM 5caJ934bQfX/Vt5on7zhd7UYyl3Mvj+mua+mbaBNoRcsIWoXAdAxs0iuU7NphqXA ubUCUxl7jbGy1+r7NTeFHjHFsIOLp2HgIIHd86WRfFGzy3WxaQBVOde/Z2dG7oQP 3qyqT3XxOjzTPd5HJcwP/BLgf4mEkepmKEvmAQCTBRemWzQf4w7psmI6upojbeyP athsNacCKCdGwkdbwW10BxCwuYY1FAl2Xnsn07/gTnkpDmZ07eNoxjYyVgtT1/Yc sQY9zdEvJH1JzOefFSsNxhfByST+ZDg= -----END CERTIFICATE-----Generated at Fri Oct 17 16:05:30 2025 by rpki-client