$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa File: 61ae1195-4b8c-307c-a787-334864a9e04b.roa (raw, json) Hash identifier: 6dsOgdNJHHbCp37DN+U6RStpV/wwY+JoHbsAOCmLNiI= Subject key identifier: AC:54:10:60:45:72:D9:63:E4:83:17:15:98:01:A6:83:D6:0F:16:D8 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584AF95142ABA22AB5CD5C42F7C0 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 6079 IP address blocks: 163.123.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:42:ab:a2:2a:b5:cd:5c:42:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=7e175c08-2442-4958-8f80-6abc04d0ba4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:0b:e9:7f:62:07:d8:36:35:ab:31:4e:1b: 8d:f8:ac:34:b7:04:65:fd:b9:1f:00:f7:23:ab:46: 0e:5c:54:b2:6e:77:c1:47:eb:5b:e9:30:fc:96:90: f4:ce:22:e4:b5:8f:e0:1f:12:03:d6:d8:7e:be:94: 30:3c:08:df:12:02:11:c4:f8:b6:4d:78:78:5d:e6: 24:01:24:51:91:99:90:35:25:09:36:39:03:11:ef: 10:58:29:f1:18:a9:ca:38:f4:c7:f7:cf:96:41:58: 6b:e2:80:00:87:4f:cf:0d:6c:50:92:b4:09:77:8f: b5:74:72:e5:8d:05:60:9e:e2:32:bd:c0:de:64:75: f2:00:38:b8:b8:95:45:db:d2:ed:e6:0b:a0:bf:4a: f9:81:81:89:59:9f:13:4b:71:5b:39:2a:43:90:f8: e3:f0:38:bf:84:34:bf:3d:b8:af:e9:dd:01:ad:ef: fc:9b:75:80:3c:39:c6:c9:25:d8:2a:31:f1:44:12: 78:53:94:a2:0a:a6:b0:4d:2f:40:9f:78:63:7b:fb: 70:9b:69:43:90:af:24:f4:7a:bb:8b:ff:ff:c1:9f: 20:9d:bb:04:87:37:3f:9b:da:01:01:c4:d6:55:14: 98:bf:dc:ec:65:87:cf:db:15:93:52:97:8d:bf:ce: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:54:10:60:45:72:D9:63:E4:83:17:15:98:01:A6:83:D6:0F:16:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/61ae1195-4b8c-307c-a787-334864a9e04b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 163.123.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bd:4d:d4:78:0b:dc:4b:06:90:29:1b:bb:8f:f3:88:14:aa: f7:67:26:46:3d:3f:51:87:eb:b9:64:0b:74:a4:ba:94:bd:39: fe:fe:65:9b:8b:bf:e0:3b:1b:30:f5:46:8c:59:fa:49:5d:03: c5:38:8d:e9:ab:b7:8a:b1:a9:14:48:ce:f7:b1:e0:f4:ff:e6: 44:e7:ed:c7:7e:4d:53:7d:dd:5d:3a:45:1c:44:a8:5c:34:ca: 19:a8:13:af:98:45:4f:a5:a8:7e:45:62:ba:bb:b9:16:c5:66: 64:5c:f9:94:36:29:f2:45:dd:21:08:16:53:c7:32:bd:59:43: c2:32:ac:d6:60:3f:26:f7:a3:02:46:b9:73:df:5a:f8:2f:6a: 8d:bd:bb:4a:70:1e:d8:4d:fe:25:28:5c:21:34:16:da:9b:8c: 0c:58:38:1e:85:d6:e6:26:b6:6d:0e:55:95:95:f9:d2:60:db: 6c:10:97:e1:43:26:c5:06:31:11:5d:70:cc:c7:af:c6:0a:4e: 30:7e:3d:2f:76:2e:ed:2e:a5:8d:a7:9b:77:e7:3a:22:ed:8e: bf:9d:71:69:2b:e8:3b:1c:1b:10:ee:73:24:24:d2:12:44:00: c2:d1:0b:98:42:01:8c:52:dc:e8:9f:a9:af:2b:eb:cc:67:02: 72:2b:f2:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUKroiq1zVxC98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk N2UxNzVjMDgtMjQ0Mi00OTU4LThmODAtNmFiYzA0ZDBiYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4IL6X9iB9g2NasxThuN+Kw0twRl/bkfAPcj q0YOXFSybnfBR+tb6TD8lpD0ziLktY/gHxID1th+vpQwPAjfEgIRxPi2TXh4XeYk ASRRkZmQNSUJNjkDEe8QWCnxGKnKOPTH98+WQVhr4oAAh0/PDWxQkrQJd4+1dHLl jQVgnuIyvcDeZHXyADi4uJVF29Lt5gugv0r5gYGJWZ8TS3FbOSpDkPjj8Di/hDS/ Pbiv6d0Bre/8m3WAPDnGySXYKjHxRBJ4U5SiCqawTS9An3hje/twm2lDkK8k9Hq7 i///wZ8gnbsEhzc/m9oBAcTWVRSYv9zsZYfP2xWTUpeNv851bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxUEGBFctlj5IMXFZgBpoPWDxbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvNjFhZTExOTUtNGI4Yy0z MDdjLWE3ODctMzM0ODY0YTllMDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo3vIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+9TdR4C9xLBpApG7uP84gUqvdnJkY9P1GH67lkC3SkupS9Of7+ZZuL v+A7GzD1RoxZ+kldA8U4jemrt4qxqRRIzvex4PT/5kTn7cd+TVN93V06RRxEqFw0 yhmoE6+YRU+lqH5FYrq7uRbFZmRc+ZQ2KfJF3SEIFlPHMr1ZQ8IyrNZgPyb3owJG uXPfWvgvao29u0pwHthN/iUoXCE0FtqbjAxYOB6F1uYmtm0OVZWV+dJg22wQl+FD JsUGMRFdcMzHr8YKTjB+PS92Lu0upY2nm3fnOiLtjr+dcWkr6DscGxDucyQk0hJE AMLRC5hCAYxS3Oifqa8r68xnAnIr8mo= -----END CERTIFICATE-----Generated at Sun Sep 7 12:32:52 2025 by rpki-client