$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa File: 132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json) Hash identifier: Jn5oUtQqwaA0vbKkkoH01m1jRtB4KzgVI70N+qC1Mag= Subject key identifier: 90:77:CC:5D:3E:BC:B7:5B:F0:0D:CB:7B:54:5D:A9:C1:E0:77:CC:CD Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584B6631F0BFE6D57AD23FFE0950 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 16433 IP address blocks: 161.38.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f0:bf:e6:d5:7a:d2:3f:fe:09:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=d20ef535-b808-4b72-8d34-ff2a22eb1dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:44:d8:00:99:db:bf:c3:85:3c:02:05:e7: 5e:5b:12:c0:c5:7c:00:35:41:a0:87:78:85:24:af: 1c:01:06:97:ff:23:84:e9:94:24:42:1f:6c:65:ad: f2:dd:6b:19:18:a4:08:e8:65:7b:cc:99:07:b4:be: 18:b7:96:16:c1:ea:36:f3:7f:e6:48:0e:ed:8b:81: c6:9b:e1:82:49:a4:65:a8:3f:99:0b:2d:3b:3e:66: f6:2f:4b:cb:05:a9:ad:c4:a5:f3:f6:8d:d9:14:c2: 2c:0f:45:21:60:c7:d7:18:d1:34:ce:be:e4:fd:bb: 31:11:0a:11:99:b7:42:ad:cb:f6:8d:8c:7a:20:fb: a7:e2:c1:92:e6:23:a7:d9:bc:87:7c:b0:1d:3e:f7: 0e:6c:dc:91:df:7d:e8:64:62:ca:60:32:80:3c:fe: 28:e5:8b:2a:16:11:78:d0:10:c0:d2:fa:69:15:60: 22:56:4f:1c:5a:09:7e:07:45:60:37:a4:86:27:d2: db:f9:2d:01:c8:8a:f3:d4:f8:84:60:66:4f:6b:c8: 08:03:2e:f7:04:93:d6:76:e1:d4:18:b3:90:e4:d6: c7:ec:65:d9:46:24:24:ef:09:02:69:67:6c:46:88: 9d:bb:72:b2:b3:b1:af:48:58:59:34:16:48:7a:24: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:77:CC:5D:3E:BC:B7:5B:F0:0D:CB:7B:54:5D:A9:C1:E0:77:CC:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 161.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:45:c6:de:28:8d:6e:f4:22:be:72:27:b9:16:e1:b6:3b:87: 40:5c:f8:a0:fc:37:3b:3b:1f:f1:78:13:27:31:bf:ed:83:ce: ad:81:3b:cb:b0:0b:79:c5:16:67:f7:b8:ae:85:73:3f:d9:5a: 9b:16:bb:b3:66:99:0d:c3:69:d5:fc:f8:f9:96:be:80:16:db: 91:85:34:29:46:7c:79:5b:01:ff:41:7b:5e:ec:8b:73:01:44: d8:b9:d9:0d:51:ae:45:d8:4d:dd:72:c2:fb:24:12:7a:25:da: 3a:a4:fd:68:0b:c2:e5:f3:b7:00:d1:8b:f7:9a:90:b4:50:f3: e1:dc:71:1c:88:7f:e9:c2:e4:8f:eb:37:da:28:9f:98:cb:f6: 18:ac:bd:d9:4e:c8:0a:21:94:97:ec:50:5f:a5:bd:ce:6a:cf: 82:0f:90:e6:95:04:36:ff:54:34:20:31:ac:a4:69:6f:b7:8b: 6b:a9:13:28:fc:22:5e:06:80:a8:95:76:94:11:4c:0f:2b:f6: 11:6b:0d:f4:a2:64:63:b1:1d:2e:b4:f5:f4:61:21:57:7c:17: db:cb:6b:a8:48:0a:3b:ca:bc:f9:5b:10:6a:31:da:dd:02:3b: b6:64:8b:ac:22:ae:ea:12:ca:8f:a1:75:2f:f8:f6:b4:d1:79: f2:8b:36:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfC/5tV60j/+CVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZDIwZWY1MzUtYjgwOC00YjcyLThkMzQtZmYyYTIyZWIxZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFVE2ACZ27/DhTwCBedeWxLAxXwANUGgh3iF JK8cAQaX/yOE6ZQkQh9sZa3y3WsZGKQI6GV7zJkHtL4Yt5YWweo283/mSA7ti4HG m+GCSaRlqD+ZCy07Pmb2L0vLBamtxKXz9o3ZFMIsD0UhYMfXGNE0zr7k/bsxEQoR mbdCrcv2jYx6IPun4sGS5iOn2byHfLAdPvcObNyR333oZGLKYDKAPP4o5YsqFhF4 0BDA0vppFWAiVk8cWgl+B0VgN6SGJ9Lb+S0ByIrz1PiEYGZPa8gIAy73BJPWduHU GLOQ5NbH7GXZRiQk7wkCaWdsRoidu3Kys7GvSFhZNBZIeiSs4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB3zF0+vLdb8A3Le1RdqcHgd8zNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMTMyYmQzNjEtMGNkZS0z ZmRlLThiNmItNjRiM2JjZGY1MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZFxt4ojW70Ir5yJ7kW4bY7h0Bc+KD8Nzs7H/F4Eycxv+2Dzq2BO8uw C3nFFmf3uK6Fcz/ZWpsWu7NmmQ3DadX8+PmWvoAW25GFNClGfHlbAf9Be17si3MB RNi52Q1RrkXYTd1ywvskEnol2jqk/WgLwuXztwDRi/eakLRQ8+HccRyIf+nC5I/r N9oon5jL9hisvdlOyAohlJfsUF+lvc5qz4IPkOaVBDb/VDQgMaykaW+3i2upEyj8 Il4GgKiVdpQRTA8r9hFrDfSiZGOxHS609fRhIVd8F9vLa6hICjvKvPlbEGox2t0C O7Zki6wiruoSyo+hdS/49rTRefKLNg4= -----END CERTIFICATE-----Generated at Sun Oct 19 01:04:39 2025 by rpki-client