$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa File: 19c7d435-0191-3d18-9f33-8c7a4026904c.roa (raw, json) Hash identifier: 3zMKk48NB29VFUH8cWXHHCbhvJb9fTR1YghG0rLEN8A= Subject key identifier: F7:DA:77:B3:55:79:82:BA:80:8F:C9:BF:63:49:49:4E:40:A0:5D:B4 Certificate issuer: /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Certificate serial: 010D0C9F4328584F5A32DA277194EAD3BABDB680 Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 161.199.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:da:27:71:94:ea:d3:ba:bd:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=2fbb25e9-6c05-4e7b-9a41-9410d22164f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2c:33:03:60:d0:3a:36:22:fc:59:03:7b:07: f4:3a:1e:9f:e8:24:ef:2d:48:c0:a7:2c:b0:1f:4f: ed:28:e4:e8:51:8c:b9:db:00:6d:46:f5:d5:e0:63: aa:4a:71:ee:2b:4c:73:c4:62:0c:77:47:00:6c:69: 22:79:a1:e6:8f:11:a0:2a:39:9d:8c:26:27:13:8b: 0a:26:2b:87:7a:2c:9d:73:c4:6f:92:8e:b4:82:34: 99:fc:cf:f8:a3:6e:9a:ac:11:7a:d2:02:b1:49:ee: d1:a7:99:ca:8e:a4:45:f5:92:af:02:7b:37:a5:76: 76:f8:c0:ad:ed:66:cd:18:f6:55:d5:18:fe:40:08: 0c:17:fc:dd:f2:61:55:53:b0:d3:75:f5:ca:d5:8f: 73:49:29:7b:f9:c7:25:05:20:60:bb:99:42:d7:fe: 6d:b9:01:72:fe:81:3f:f3:a5:0b:31:a8:18:a3:db: 19:d8:d8:83:61:0b:01:12:28:6f:a4:49:36:b4:a9: 41:11:50:22:bf:bd:a6:ad:37:78:2b:bf:79:25:35: 37:1d:fa:e4:4a:53:80:83:01:e9:3f:d3:43:75:1d: e4:86:55:91:2b:0c:d5:73:f8:ac:af:e4:5d:30:fa: 3a:b9:62:28:4c:57:29:41:0b:d1:12:c4:db:dc:fc: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:77:B3:55:79:82:BA:80:8F:C9:BF:63:49:49:4E:40:A0:5D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl X509v3 Authority Key Identifier: keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer sbgp-ipAddrBlock: critical IPv4: 161.199.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:4e:1e:3a:b0:96:14:28:ce:16:90:92:7e:13:69:d1:03:12: d6:42:41:14:22:11:db:ea:fc:a2:7c:d0:dd:78:69:48:96:08: 6f:94:53:e4:19:ef:c6:94:b9:96:bd:03:c4:b2:65:20:9f:93: de:bc:c8:f7:a8:09:ec:62:1b:6e:05:71:1c:2e:ed:bb:79:6f: c8:3d:21:7c:31:bc:ed:67:5d:a2:5c:1b:3e:e4:0e:66:ec:f3: c7:05:97:3e:d0:f5:0d:55:41:b4:f6:55:1e:a8:80:75:dd:d5: e6:9a:06:29:95:c6:b8:c9:4c:ba:29:be:a8:0c:27:c4:ee:c2: 27:75:5a:41:2d:d3:52:c1:79:bc:c4:36:61:51:99:3b:ad:6d: 6b:63:c5:6a:c1:ef:6a:40:ae:43:0c:5e:97:94:b0:8f:f3:ff: 91:f7:16:e4:74:ea:2f:1a:ad:03:cc:58:6e:2d:dd:c2:cd:4f: 57:91:30:a1:b4:22:86:03:74:c3:be:6b:ad:74:dd:c0:a6:07: 19:63:93:4c:9b:a3:b6:e2:96:81:68:95:2e:37:ba:63:48:a5: 1f:7b:c1:f1:ad:aa:e6:01:c0:9d:16:fd:a4:f7:84:f3:12:0f: 41:ce:dd:9a:1c:f0:f7:12:08:b1:ca:9f:50:01:70:b4:98:d8: 5a:ef:14:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtoncZTq07q9toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy MDAyMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MmZiYjI1ZTktNmMwNS00ZTdiLTlhNDEtOTQxMGQyMjE2NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCwzA2DQOjYi/FkDewf0Oh6f6CTvLUjApyyw H0/tKOToUYy52wBtRvXV4GOqSnHuK0xzxGIMd0cAbGkieaHmjxGgKjmdjCYnE4sK JiuHeiydc8Rvko60gjSZ/M/4o26arBF60gKxSe7Rp5nKjqRF9ZKvAns3pXZ2+MCt 7WbNGPZV1Rj+QAgMF/zd8mFVU7DTdfXK1Y9zSSl7+cclBSBgu5lC1/5tuQFy/oE/ 86ULMagYo9sZ2NiDYQsBEihvpEk2tKlBEVAiv72mrTd4K795JTU3HfrkSlOAgwHp P9NDdR3khlWRKwzVc/isr+RdMPo6uWIoTFcpQQvREsTb3PzoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfad7NVeYK6gI/Jv2NJSU5AoF20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvMTljN2Q0MzUtMDE5MS0z ZDE4LTlmMzMtOGM3YTQwMjY5MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlOHjqwlhQozhaQkn4TadEDEtZCQRQiEdvq/KJ80N14aUiWCG+UU+QZ 78aUuZa9A8SyZSCfk968yPeoCexiG24FcRwu7bt5b8g9IXwxvO1nXaJcGz7kDmbs 88cFlz7Q9Q1VQbT2VR6ogHXd1eaaBimVxrjJTLopvqgMJ8Tuwid1WkEt01LBebzE NmFRmTutbWtjxWrB72pArkMMXpeUsI/z/5H3FuR06i8arQPMWG4t3cLNT1eRMKG0 IoYDdMO+a6103cCmBxljk0ybo7biloFolS43umNIpR97wfGtquYBwJ0W/aT3hPMS D0HO3Zoc8PcSCLHKn1ABcLSY2FrvFOA= -----END CERTIFICATE-----Generated at Thu Oct 8 19:55:01 2026 by rpki-client