$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa File: 19c7d435-0191-3d18-9f33-8c7a4026904c.roa (raw, json) Hash identifier: kN6luLPkeC0Kqj5Fq4yx+E/t5i/y7ZonLKYbdk0EkSc= Subject key identifier: C9:02:25:75:B9:D2:72:FD:06:50:66:AF:6D:71:80:8C:F0:B1:9F:3D Certificate issuer: /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Certificate serial: 010D0C9F4328584B76F2288C0F83577FD3C06680 Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 161.199.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:28:8c:0f:83:57:7f:d3:c0:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4603fd27-92d0-47cb-8160-3302883e3673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:45:bf:02:4a:84:64:d9:b5:44:c1:0c:f0: 1a:ad:eb:b2:2c:89:c0:2d:65:e5:f5:f3:b2:e4:36: 62:d4:3b:18:b3:fa:55:e7:1d:e8:bb:be:e5:35:24: 7e:09:72:c5:ac:5a:3f:60:7d:c7:d4:10:6c:f1:12: b1:40:24:e0:b2:1c:e9:27:0d:f0:a3:15:57:a1:de: 06:d0:70:c6:13:7e:3b:a7:91:ca:36:c7:4f:cc:20: e3:5c:e6:cd:36:e1:09:cb:26:26:74:f2:4f:be:17: 29:52:2a:9e:cb:59:83:75:3d:91:8d:46:d9:75:eb: 11:78:42:03:f9:8c:5c:5f:92:f9:72:26:cc:4b:89: d0:a9:36:1f:3b:68:f6:74:31:9a:05:b1:63:bc:41: bf:c2:23:bb:b3:3e:28:d0:34:af:3d:5b:0c:d4:43: 7c:bb:26:22:e4:a6:dc:ba:c1:fa:a5:2b:a4:13:d3: 4c:bf:b2:de:66:66:e6:5a:2b:80:13:2e:b3:d5:5a: 4b:4d:dc:7a:74:81:2b:ba:8b:c4:0a:b0:2c:78:86: a3:c0:4e:49:eb:2c:78:ef:e4:da:84:54:0d:fd:a1: 35:b0:c7:c7:23:02:a6:db:41:12:41:99:89:c5:3b: 1a:8a:dd:39:fc:bd:c3:1f:3d:b0:db:67:8f:d3:cd: 0c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:02:25:75:B9:D2:72:FD:06:50:66:AF:6D:71:80:8C:F0:B1:9F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/19c7d435-0191-3d18-9f33-8c7a4026904c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl X509v3 Authority Key Identifier: keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer sbgp-ipAddrBlock: critical IPv4: 161.199.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:91:2c:62:bc:04:b8:6b:01:40:18:d0:10:93:b6:61:b8:e5: 95:17:ea:5a:03:ce:78:3b:2b:04:1b:62:01:1c:78:ce:87:68: 4b:d0:a1:e1:59:85:80:a1:af:5e:f7:22:21:9c:2b:a3:4d:2f: e5:36:44:d6:3b:16:28:4b:da:1b:95:a9:22:4c:b7:76:2e:14: 9a:45:2a:b6:d5:9a:fa:af:af:a4:44:ac:dd:ad:18:2b:86:ce: 65:29:21:94:95:44:e3:5a:e9:df:7b:8d:7d:f7:17:a1:15:f6: 01:90:e2:fa:92:53:44:e3:f0:ae:11:2c:a2:8f:b9:ac:3e:64: 3b:46:7a:db:65:b2:3d:c2:58:40:2e:af:15:68:88:cf:bd:45: ee:01:a1:39:07:bc:b6:49:f6:38:8d:29:fc:08:6c:0b:ce:00: ca:ca:52:3f:8f:fb:7d:21:46:76:6a:e5:63:a8:b3:50:19:12: e7:c0:66:87:f7:3e:a4:04:c1:25:1f:ac:b8:c3:29:36:dc:9f: c8:9a:20:55:08:49:8a:1a:59:c7:d3:68:c0:d4:a8:17:2b:81: df:00:72:a2:99:db:13:49:00:91:0c:41:e4:94:8c:4e:30:74: b6:b5:ba:fa:fc:92:af:76:eb:63:cc:a1:b6:7b:55:fb:b8:ec: d7:e7:18:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iiMD4NXf9PAZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy MDAyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDYwM2ZkMjctOTJkMC00N2NiLTgxNjAtMzMwMjg4M2UzNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A1FvwJKhGTZtUTBDPAareuyLInALWXl9fOy 5DZi1DsYs/pV5x3ou77lNSR+CXLFrFo/YH3H1BBs8RKxQCTgshzpJw3woxVXod4G 0HDGE347p5HKNsdPzCDjXObNNuEJyyYmdPJPvhcpUiqey1mDdT2RjUbZdesReEID +YxcX5L5cibMS4nQqTYfO2j2dDGaBbFjvEG/wiO7sz4o0DSvPVsM1EN8uyYi5Kbc usH6pSukE9NMv7LeZmbmWiuAEy6z1VpLTdx6dIEruovECrAseIajwE5J6yx47+Ta hFQN/aE1sMfHIwKm20ESQZmJxTsait05/L3DHz2w22eP080MYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkCJXW50nL9BlBmr21xgIzwsZ89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvMTljN2Q0MzUtMDE5MS0z ZDE4LTlmMzMtOGM3YTQwMjY5MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGRLGK8BLhrAUAY0BCTtmG45ZUX6loDzng7KwQbYgEceM6HaEvQoeFZ hYChr173IiGcK6NNL+U2RNY7FihL2huVqSJMt3YuFJpFKrbVmvqvr6RErN2tGCuG zmUpIZSVRONa6d97jX33F6EV9gGQ4vqSU0Tj8K4RLKKPuaw+ZDtGettlsj3CWEAu rxVoiM+9Re4BoTkHvLZJ9jiNKfwIbAvOAMrKUj+P+30hRnZq5WOos1AZEufAZof3 PqQEwSUfrLjDKTbcn8iaIFUISYoaWcfTaMDUqBcrgd8AcqKZ2xNJAJEMQeSUjE4w dLa1uvr8kq9262PMobZ7Vfu47NfnGJc= -----END CERTIFICATE-----Generated at Tue Oct 21 12:12:31 2025 by rpki-client