$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/53c31e25-ea9d-34d1-ba49-d5bf60cbd738.roa File: 53c31e25-ea9d-34d1-ba49-d5bf60cbd738.roa (raw, json) Hash identifier: nYBzy3pY40s0Ucw1dKs3wyywq6ovI/iktAt/MU8ZCW4= Subject key identifier: A8:5F:35:A6:92:84:41:BC:03:C2:F2:14:AC:16:8C:45:84:03:9A:29 Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F4328584B37DC3E8F8EB33AD03A25D000 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/53c31e25-ea9d-34d1-ba49-d5bf60cbd738.roa Signing time: Tue 16 Sep 2025 22:40:55 +0000 ROA not before: Tue 16 Sep 2025 22:40:55 +0000 ROA not after: Mon 15 Dec 2025 23:40:55 +0000 asID: 26459 IP address blocks: 161.108.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:dc:3e:8f:8e:b3:3a:d0:3a:25:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Sep 16 22:40:55 2025 GMT Not After : Dec 15 23:40:55 2025 GMT Subject: CN=bb1318e1-5bb1-482e-9c9b-327ee8a9c67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c5:ac:dc:2d:b4:83:05:a9:9f:17:71:d3:b1: 7e:10:7c:9e:b5:e3:23:27:95:74:ce:69:3b:e9:38: 0a:6c:f7:fd:d9:a7:34:4e:1f:dd:b3:59:cd:43:fe: 4f:52:d7:03:ad:2a:67:3e:04:77:d7:6f:94:80:bb: 49:68:86:3d:ac:a6:05:aa:3a:8c:6c:61:7c:43:ed: f6:bb:02:20:07:0c:a9:1b:5a:c9:c4:73:3e:37:bb: 10:97:3d:a7:4a:a7:2a:8c:e3:f7:29:f9:bf:f6:29: 70:6f:4d:41:0a:7f:ac:1f:0b:e7:a3:20:2e:e1:99: 05:6f:b2:71:82:0e:94:fb:0c:50:a8:78:06:b8:0c: e0:52:c7:9d:08:ac:6b:6f:dd:59:65:87:7d:3c:fe: 1a:4f:47:52:b4:33:91:8d:cb:53:5d:c3:54:30:b3: 55:ac:ad:bd:97:0a:1b:60:eb:64:98:a2:a7:f0:f2: c4:84:52:49:cc:b5:64:56:09:e4:d6:08:29:42:79: 10:1b:bc:6d:44:80:6c:9f:44:68:2f:f7:e9:13:58: ad:62:b3:8b:89:53:39:3e:3e:e5:6e:b6:f9:45:cc: 6d:c4:2a:93:7a:36:83:fb:f2:32:80:f7:ef:98:d8: 93:21:cc:2d:98:3c:ac:58:d7:97:f2:88:e6:6d:71: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5F:35:A6:92:84:41:BC:03:C2:F2:14:AC:16:8C:45:84:03:9A:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/53c31e25-ea9d-34d1-ba49-d5bf60cbd738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv4: 161.108.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0d:b0:1e:09:14:60:69:3d:12:27:de:27:aa:da:44:30:df: 37:9d:a5:9c:ea:73:28:fe:b2:11:5d:58:9b:6a:75:2a:62:d6: 46:94:5f:56:a5:09:3a:4b:6f:31:46:3b:ef:fa:26:37:3e:28: 61:4b:08:8a:c1:b5:cd:ee:c4:34:29:81:ff:f4:64:e7:ed:2a: e5:fa:5f:16:19:4b:aa:86:58:8e:37:21:22:ef:70:8c:9c:16: e6:46:95:8a:5c:a1:c1:3b:3f:45:71:e0:8d:4a:ab:f2:3b:a7: 00:f4:68:b4:d5:38:c1:d8:23:a5:5f:3b:ba:0d:e3:e9:3d:62: d3:c9:a3:cc:8f:66:b2:83:a7:1b:5d:e3:b8:3f:52:87:f2:71: 88:28:3f:32:30:de:01:af:aa:28:96:a7:d8:86:41:c5:f1:39: 2a:03:7f:5a:68:03:dd:c5:32:78:a8:80:e1:0c:74:00:ef:90: b1:5e:3f:22:1b:63:c3:00:1b:ed:0f:b7:25:f2:46:6e:03:72: 3c:7c:a1:c0:b3:e8:0d:9d:30:18:26:b6:d8:66:e4:b3:e8:37: 03:c5:a6:8c:50:16:0c:1d:38:1a:8f:6b:8b:26:b6:4a:6b:c4: 98:06:86:6e:14:e4:ad:31:23:01:7f:8d:2c:89:02:e5:70:7c: 9b:57:93:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs33D6PjrM60Dol0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI1MDkxNjIyNDA1NVoXDTI1MTIxNTIzNDA1NVowLzEtMCsGA1UEAxMk YmIxMzE4ZTEtNWJiMS00ODJlLTljOWItMzI3ZWU4YTljNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Ws3C20gwWpnxdx07F+EHyeteMjJ5V0zmk7 6TgKbPf92ac0Th/ds1nNQ/5PUtcDrSpnPgR312+UgLtJaIY9rKYFqjqMbGF8Q+32 uwIgBwypG1rJxHM+N7sQlz2nSqcqjOP3Kfm/9ilwb01BCn+sHwvnoyAu4ZkFb7Jx gg6U+wxQqHgGuAzgUsedCKxrb91ZZYd9PP4aT0dStDORjctTXcNUMLNVrK29lwob YOtkmKKn8PLEhFJJzLVkVgnk1ggpQnkQG7xtRIBsn0RoL/fpE1itYrOLiVM5Pj7l brb5RcxtxCqTejaD+/IygPfvmNiTIcwtmDysWNeX8ojmbXFoJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhfNaaShEG8A8LyFKwWjEWEA5opMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvNTNjMzFlMjUtZWE5ZC0z NGQxLWJhNDktZDViZjYwY2JkNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoWzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcNsB4JFGBpPRIn3ieq2kQw3zedpZzqcyj+shFdWJtqdSpi1kaUX1al CTpLbzFGO+/6Jjc+KGFLCIrBtc3uxDQpgf/0ZOftKuX6XxYZS6qGWI43ISLvcIyc FuZGlYpcocE7P0Vx4I1Kq/I7pwD0aLTVOMHYI6VfO7oN4+k9YtPJo8yPZrKDpxtd 47g/UofycYgoPzIw3gGvqiiWp9iGQcXxOSoDf1poA93FMniogOEMdADvkLFePyIb Y8MAG+0PtyXyRm4Dcjx8ocCz6A2dMBgmtthm5LPoNwPFpoxQFgwdOBqPa4smtkpr xJgGhm4U5K0xIwF/jSyJAuVwfJtXkwE= -----END CERTIFICATE-----Generated at Sat Oct 18 18:41:33 2025 by rpki-client