$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa File: 4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa (raw, json) Hash identifier: Uio8wCZJ2J6Y75AeMjnhiXY5XBD3tHdwngJ1yZvX2AI= Subject key identifier: D6:25:17:53:10:9B:C8:A3:13:62:F8:C6:F9:D6:19:82:34:24:80:6F Certificate issuer: /CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5 Certificate serial: 010D0C9F4328584AF52155EBCF9EC95AF78895C0 Authority key identifier: FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 21743 IP address blocks: 163.123.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:55:eb:cf:9e:c9:5a:f7:88:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=7be49ed1-4504-4092-9979-ed8405f01c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:df:9f:03:43:29:28:69:e1:83:81:db:80:41: 26:05:2c:f1:e4:fa:01:63:6b:72:eb:99:80:ab:12: 07:58:16:a0:15:13:b0:5b:9e:9f:7e:55:67:04:ea: 95:3b:14:c9:fc:d1:9b:cf:50:a8:ed:95:74:61:b1: 73:1e:a5:1c:e6:fc:d5:29:27:68:c4:86:c6:c5:32: 43:45:28:05:68:25:2e:b7:f5:1c:73:57:a9:05:52: 3c:42:cc:fb:f6:b9:07:ae:6a:af:fa:e6:7d:b2:65: 87:d3:25:06:78:68:66:4f:80:0d:fe:f2:1d:af:77: 23:99:f1:e6:68:15:0c:1b:5e:d7:ea:37:c7:bc:4c: c8:4a:bb:c6:22:0f:20:6c:fd:1d:18:26:63:9e:21: 28:86:f4:11:be:26:66:60:5b:3e:ac:4f:ed:b1:5d: 09:9b:d8:b7:87:15:41:d5:e6:b3:29:2c:fe:d9:4a: 9c:c7:0e:31:07:4f:b8:d9:49:e6:28:1b:bf:79:d6: d0:67:0c:d1:1c:e1:bd:b0:39:ff:6a:ff:66:6d:7b: 87:6c:fa:6c:46:50:53:7a:df:a6:e3:8b:47:d8:fa: 30:1e:b8:b6:ae:6f:92:a6:f5:0a:dc:a1:67:83:d6: 4d:9b:b8:52:64:c0:85:5c:44:5f:e9:b0:1d:a1:12: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:25:17:53:10:9B:C8:A3:13:62:F8:C6:F9:D6:19:82:34:24:80:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl X509v3 Authority Key Identifier: keyid:FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer sbgp-ipAddrBlock: critical IPv4: 163.123.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:83:59:cc:90:18:c8:fc:13:c5:d7:07:85:d2:aa:aa:19:99: a3:44:6e:f9:40:c2:71:52:c9:fb:31:6c:05:b2:48:6e:22:97: df:b0:0d:03:10:c0:28:f6:5b:56:e2:1e:4d:fc:80:ef:92:0c: 05:10:b9:86:5d:84:b6:2f:76:4e:90:65:da:5d:c5:d8:bf:51: 17:80:34:87:f8:4d:c4:b0:98:74:5b:03:30:ad:12:71:3c:92: eb:89:8e:22:d5:7c:7b:48:64:8a:2d:b8:31:7d:81:11:f3:7d: f1:98:6c:24:3c:42:61:94:8e:69:ff:8c:c3:aa:30:24:e6:01: 59:2a:a4:0b:d9:b0:7d:51:9d:f7:9e:78:1a:41:a8:1e:f7:f8: 6f:6f:ac:48:3c:9e:e1:d8:e8:67:d6:aa:2d:cd:93:4a:1f:a1: 9f:9a:4a:1a:1d:ab:cd:3e:2f:70:c6:23:82:3c:67:f0:d4:f8: 78:38:65:d6:0e:9e:7f:97:4a:90:7f:bf:69:c0:6f:61:00:22: 45:e5:93:3b:81:ac:8e:12:c8:7c:9a:32:f5:51:ce:25:bd:9e: c6:3b:fb:73:c0:0e:7c:c5:25:ba:56:da:d9:f1:0f:6f:8d:9e: 2a:10:ab:48:50:07:ba:c1:16:d2:75:51:da:01:9b:3d:ac:2a: fb:cb:d3:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVXrz57JWveIlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5YzBmZTUtOGFjNi00MmEyLTljMGEtNTA1MzRhYWEw MWM1MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2JlNDllZDEtNDUwNC00MDkyLTk5NzktZWQ4NDA1ZjAxYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9+fA0MpKGnhg4HbgEEmBSzx5PoBY2ty65mA qxIHWBagFROwW56fflVnBOqVOxTJ/NGbz1Co7ZV0YbFzHqUc5vzVKSdoxIbGxTJD RSgFaCUut/Ucc1epBVI8Qsz79rkHrmqv+uZ9smWH0yUGeGhmT4AN/vIdr3cjmfHm aBUMG17X6jfHvEzISrvGIg8gbP0dGCZjniEohvQRviZmYFs+rE/tsV0Jm9i3hxVB 1eazKSz+2Uqcxw4xB0+42UnmKBu/edbQZwzRHOG9sDn/av9mbXuHbPpsRlBTet+m 44tH2PowHri2rm+SpvUK3KFng9ZNm7hSZMCFXERf6bAdoRJ6OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYlF1MQm8ijE2L4xvnWGYI0JIBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYTlj MGZlNS04YWM2LTQyYTItOWMwYS01MDUzNGFhYTAxYzUvNGQ0NTdjODUtMTlhZC0z NGJiLTllOTItNjAwZjdmMGQzNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmE5YzBmZTUtOGFjNi00MmEyLTlj MGEtNTA1MzRhYWEwMWM1L2JhOWMwZmU1LThhYzYtNDJhMi05YzBhLTUwNTM0YWFh MDFjNS5jcmwwHwYDVR0jBBgwFoAU+h7Anv0VMfFaXkG2fQcGq3byLAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYTljMGZlNS04YWM2LTQyYTItOWMwYS01MDUz NGFhYTAxYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3v1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeDWcyQGMj8E8XXB4XSqqoZmaNEbvlAwnFSyfsxbAWySG4il9+wDQMQ wCj2W1biHk38gO+SDAUQuYZdhLYvdk6QZdpdxdi/UReANIf4TcSwmHRbAzCtEnE8 kuuJjiLVfHtIZIotuDF9gRHzffGYbCQ8QmGUjmn/jMOqMCTmAVkqpAvZsH1Rnfee eBpBqB73+G9vrEg8nuHY6GfWqi3Nk0ofoZ+aShodq80+L3DGI4I8Z/DU+Hg4ZdYO nn+XSpB/v2nAb2EAIkXlkzuBrI4SyHyaMvVRziW9nsY7+3PADnzFJbpW2tnxD2+N nioQq0hQB7rBFtJ1UdoBmz2sKvvL04w= -----END CERTIFICATE-----Generated at Sun Sep 7 18:02:14 2025 by rpki-client