$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa File: 3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa (raw, json) Hash identifier: XbUFb13zv3J58P6v21Yy2wV2lveov4YlKzXKxwHxSWc= Subject key identifier: 87:C4:E9:71:F8:8C:33:40:ED:DE:06:F1:41:FA:98:5E:30:98:1B:55 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584B1C36CBC0C151860003257080 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 161.221.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:cb:c0:c1:51:86:00:03:25:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=7de31426-dd41-4f8e-bb72-fd196cc19d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:95:54:73:04:3b:65:6a:1b:71:c5:72:75: a9:9d:58:8f:05:f4:fc:d3:9a:c0:05:12:e6:ae:54: 25:9c:89:e5:de:80:16:f7:b4:d1:7e:50:c0:f2:6f: c8:a5:9d:24:f8:ee:bd:2c:df:fd:9f:4b:0f:f3:49: 47:5a:dc:ed:05:69:25:39:1c:54:a3:8f:42:60:23: 22:d8:2b:42:39:7b:03:2f:7a:6e:3e:d7:26:67:c8: 7a:82:03:9b:1c:04:29:dc:98:75:28:ab:7d:33:1d: a7:d4:0a:0c:7f:81:24:91:f0:a0:ab:9d:87:24:6e: 7c:47:db:2a:cb:53:5e:d6:13:3f:2f:30:53:03:bd: 49:0c:11:b2:1e:a7:a5:cb:60:2f:b0:2f:71:d8:e4: 42:92:ef:71:b0:92:b3:65:cb:05:22:46:8b:5c:51: 2b:88:ad:86:26:28:9a:07:74:e4:1c:08:f0:86:bd: d8:ef:60:e3:8d:39:41:14:75:32:66:5e:bd:1e:0b: e8:cc:8a:08:32:bc:4f:dc:7d:8b:92:a6:8f:87:49: 67:02:a2:eb:4f:63:f5:16:7f:9e:68:aa:ab:b3:ce: ed:aa:ec:f6:4b:c4:26:0a:31:84:8d:70:2e:3d:cc: 6b:1d:79:b8:0a:4a:6f:c3:8c:bf:1a:26:81:fb:43: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C4:E9:71:F8:8C:33:40:ED:DE:06:F1:41:FA:98:5E:30:98:1B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3e:4f:3d:f6:a7:d0:24:6a:99:c4:86:17:26:a8:34:67:eb: ee:86:49:4c:30:35:74:79:e9:54:36:f2:46:b3:27:04:e3:df: 04:38:d7:dd:47:9d:1a:a1:56:f8:2b:c5:30:16:3f:14:d3:97: 29:20:35:20:34:fb:9d:92:90:67:4b:35:a2:e8:b4:48:5c:5c: 29:ac:1c:96:59:d7:b7:1b:c8:52:fd:6d:01:c5:24:41:c1:54: 63:90:af:2b:17:da:56:30:97:8e:f8:40:0f:74:09:9f:9f:fb: 99:52:c9:08:60:24:ea:7f:05:7b:fa:15:5a:97:b8:65:aa:3f: 37:31:4d:c3:4e:99:e6:a9:f2:00:0f:5f:a9:db:c9:a0:93:5d: d5:e3:9e:23:e3:4d:ac:eb:b2:20:c6:5b:53:fc:cb:83:a2:ad: fe:e2:b6:69:7b:8d:a9:1f:25:ef:d4:bf:da:57:1b:9f:92:c8: 5d:b3:86:18:ec:e6:2c:f2:f7:80:6d:66:40:9d:ad:ff:12:b7: d6:cc:59:04:80:f3:6b:33:b8:fd:b9:13:65:4e:8c:6a:81:d9: f8:08:70:0c:60:02:81:37:1f:d4:1b:a4:4d:c8:72:37:da:73: 5b:c7:5f:8b:5f:68:b9:bb:63:de:a8:de:5a:9f:5c:83:a4:4f: 08:fa:1f:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsvAwVGGAAMlcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk N2RlMzE0MjYtZGQ0MS00ZjhlLWJiNzItZmQxOTZjYzE5ZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiECVVHMEO2VqG3HFcnWpnViPBfT805rABRLm rlQlnInl3oAW97TRflDA8m/IpZ0k+O69LN/9n0sP80lHWtztBWklORxUo49CYCMi 2CtCOXsDL3puPtcmZ8h6ggObHAQp3Jh1KKt9Mx2n1AoMf4EkkfCgq52HJG58R9sq y1Ne1hM/LzBTA71JDBGyHqely2AvsC9x2ORCku9xsJKzZcsFIkaLXFEriK2GJiia B3TkHAjwhr3Y72DjjTlBFHUyZl69HgvozIoIMrxP3H2LkqaPh0lnAqLrT2P1Fn+e aKqrs87tquz2S8QmCjGEjXAuPcxrHXm4Ckpvw4y/GiaB+0NinwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfE6XH4jDNA7d4G8UH6mF4wmBtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvM2ZhNzJkMTYtZWJkNy0z ZjkyLTgyZDQtNTM5ZjNhYmU3OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg+Tz32p9AkapnEhhcmqDRn6+6GSUwwNXR56VQ28kazJwTj3wQ4191H nRqhVvgrxTAWPxTTlykgNSA0+52SkGdLNaLotEhcXCmsHJZZ17cbyFL9bQHFJEHB VGOQrysX2lYwl474QA90CZ+f+5lSyQhgJOp/BXv6FVqXuGWqPzcxTcNOmeap8gAP X6nbyaCTXdXjniPjTazrsiDGW1P8y4Oirf7itml7jakfJe/Uv9pXG5+SyF2zhhjs 5izy94BtZkCdrf8St9bMWQSA82szuP25E2VOjGqB2fgIcAxgAoE3H9QbpE3Icjfa c1vHX4tfaLm7Y96o3lqfXIOkTwj6H0Y= -----END CERTIFICATE-----Generated at Sun Sep 7 16:11:05 2025 by rpki-client