$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e323ec2-3e87-3260-b545-83f0b7a68c0c.roa File: 9e323ec2-3e87-3260-b545-83f0b7a68c0c.roa (raw, json) Hash identifier: EOUU3ohk6ppLCVpu4lqns2WRPQf7G3rCLioam8XqtLQ= Subject key identifier: 09:95:68:1A:DC:52:86:34:09:3D:6C:98:79:EE:23:6E:5F:52:7A:C4 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B004BECE9AF60E6450C238380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e323ec2-3e87-3260-b545-83f0b7a68c0c.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 852 IP address blocks: 161.184.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ec:e9:af:60:e6:45:0c:23:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=bf3eb19a-a4dc-4ef5-96a1-6789346077ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:dd:6d:46:59:b1:ae:10:98:f6:39:f9:03: f2:10:8b:25:70:92:3b:7c:c0:48:7c:32:6b:84:c1: f7:3c:33:cd:e3:3e:23:ce:81:e8:35:48:6a:a8:e4: 87:9c:15:85:71:83:1e:0d:58:55:a9:8c:23:8f:f1: fe:32:df:06:1e:0b:bd:17:42:0c:28:9a:c7:24:23: 99:3f:b6:f3:df:a4:6d:49:46:2c:60:40:55:e9:83: a3:c1:5a:da:bb:e0:0e:3d:11:d2:a8:0b:81:b8:33: cc:83:dd:32:15:b4:73:71:ef:76:3f:8b:f6:26:ff: 17:bf:31:b6:8a:7e:74:cb:29:9b:01:bd:c1:79:1e: e3:73:7a:b8:c3:54:06:18:16:ea:36:39:2e:e2:80: 23:80:e5:f1:60:c2:ad:18:a5:9e:5f:4b:01:44:fb: 7d:3d:63:73:43:b9:c2:85:5f:89:b0:0c:a1:93:d2: 9d:f3:7b:e7:d2:5b:02:ef:78:04:0a:81:02:32:6d: ee:20:e1:2e:0a:4d:21:13:a0:22:11:d3:fe:d5:ad: fa:7a:4e:a9:23:6f:c4:55:11:95:5d:70:2b:de:75: 7c:66:60:b5:b1:83:2d:b5:bc:ad:40:b8:58:d5:54: a7:4f:5e:44:93:3a:8a:53:27:a4:2d:98:5b:f5:9f: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:95:68:1A:DC:52:86:34:09:3D:6C:98:79:EE:23:6E:5F:52:7A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9e323ec2-3e87-3260-b545-83f0b7a68c0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 161.184.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:3c:73:86:b2:10:2e:d1:28:ec:02:65:e0:c6:f8:e4:8a:ce: 4c:ad:19:31:99:b5:25:48:6b:34:e4:85:1b:ad:64:cf:bf:8a: 5c:c4:67:1f:d1:f0:17:00:92:39:69:55:e5:21:1f:5a:c0:dc: 23:4d:eb:dc:df:57:cb:93:fc:0c:70:5b:77:e6:6f:5d:64:c8: 07:33:67:05:e5:33:f4:c0:37:96:cd:5e:5e:99:ba:47:16:f5: ea:a8:43:41:8d:ce:89:f6:7f:6b:cf:b7:54:db:b2:03:4b:2b: a2:e4:5a:89:db:12:1b:44:f1:71:c8:93:86:bb:c3:e5:ef:00: 45:14:99:58:be:fb:e9:61:2b:1a:29:60:a4:4a:a3:36:fe:a1: cc:85:67:39:46:25:ab:ce:3a:f9:63:cc:21:99:e8:70:a3:d2: 17:81:3e:35:cf:13:7d:92:ed:49:0e:55:5c:35:c1:9d:a4:df: f7:e9:ba:d2:7e:2c:52:fe:95:95:fd:88:45:c9:8a:97:c2:27: 33:55:7f:27:4b:67:5d:b5:ad:60:e9:23:74:3c:29:df:34:dd: 62:82:d2:bb:f3:4b:c2:85:ab:15:df:be:16:d3:1c:45:31:f5: 00:d0:9b:6b:e9:71:f3:93:1e:32:fd:81:40:5d:f6:22:84:cd: ad:c7:79:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+zpr2DmRQwjg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YmYzZWIxOWEtYTRkYy00ZWY1LTk2YTEtNjc4OTM0NjA3N2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnjdbUZZsa4QmPY5+QPyEIslcJI7fMBIfDJr hMH3PDPN4z4jzoHoNUhqqOSHnBWFcYMeDVhVqYwjj/H+Mt8GHgu9F0IMKJrHJCOZ P7bz36RtSUYsYEBV6YOjwVrau+AOPRHSqAuBuDPMg90yFbRzce92P4v2Jv8XvzG2 in50yymbAb3BeR7jc3q4w1QGGBbqNjku4oAjgOXxYMKtGKWeX0sBRPt9PWNzQ7nC hV+JsAyhk9Kd83vn0lsC73gECoECMm3uIOEuCk0hE6AiEdP+1a36ek6pI2/EVRGV XXAr3nV8ZmC1sYMttbytQLhY1VSnT15EkzqKUyekLZhb9Z9LnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmVaBrcUoY0CT1smHnuI25fUnrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOWUzMjNlYzItM2U4Ny0z MjYwLWI1NDUtODNmMGI3YTY4YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAobj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY8c4ayEC7RKOwCZeDG+OSKzkytGTGZtSVIazTkhRutZM+/ilzEZx/R 8BcAkjlpVeUhH1rA3CNN69zfV8uT/AxwW3fmb11kyAczZwXlM/TAN5bNXl6ZukcW 9eqoQ0GNzon2f2vPt1TbsgNLK6LkWonbEhtE8XHIk4a7w+XvAEUUmVi+++lhKxop YKRKozb+ocyFZzlGJavOOvljzCGZ6HCj0heBPjXPE32S7UkOVVw1wZ2k3/fputJ+ LFL+lZX9iEXJipfCJzNVfydLZ121rWDpI3Q8Kd803WKC0rvzS8KFqxXfvhbTHEUx 9QDQm2vpcfOTHjL9gUBd9iKEza3HebQ= -----END CERTIFICATE-----Generated at Mon Sep 8 22:26:23 2025 by rpki-client