$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa File: 40e3f322-a216-3c3f-b94f-271c6ddb1492.roa (raw, json) Hash identifier: ScbjbAatdL9jK5KbPgYfd7mlFHTZhW1g8M5czYwTGTE= Subject key identifier: 7D:9A:E5:BB:A0:E8:49:AA:2E:EB:D2:98:20:BD:B8:E6:43:6D:5D:AB Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B2A2C3D846880F2AF123A5500 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 30103 IP address blocks: 161.199.138.0/23 maxlen: 24 198.251.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3d:84:68:80:f2:af:12:3a:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=548b982c-0352-4a94-be47-31f9b859785a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:45:75:76:3b:b1:50:87:ca:a6:23:41:a2: 87:a3:d1:81:ea:4d:b9:73:57:ce:42:1d:75:f3:ab: 4c:4a:cd:ee:e1:d0:e6:a0:e9:cd:d6:de:57:ac:f2: 4d:f8:c4:1e:4e:78:eb:31:09:51:46:e4:b5:28:f7: da:a6:de:53:0c:6a:23:12:a6:69:50:c1:6b:e0:51: 27:91:a3:8b:65:ba:02:45:dd:40:f5:9f:7d:2e:32: d6:f2:65:e6:c7:19:f3:b0:7d:b3:00:80:9d:17:a8: bd:80:b4:97:37:ac:45:27:2d:a7:92:1a:69:21:96: 3f:d9:ba:4c:6a:e8:4d:16:e7:ba:e7:5d:fb:1f:74: df:cc:d8:e1:ee:01:88:81:58:51:b1:b1:2c:70:bc: 1b:8d:a9:0d:ca:54:63:6f:a7:e6:c3:94:a0:f6:07: 9e:a5:18:bf:8d:60:a5:05:de:dd:2d:c5:da:7b:d6: d0:25:d1:35:68:cd:92:c3:c5:e4:42:4c:1e:94:af: e1:7c:70:67:5a:2c:bf:88:b6:68:b1:68:8f:1d:54: 9e:53:64:f3:40:52:00:25:b2:55:a7:0c:14:eb:f6: bc:cf:58:e5:cd:13:3a:82:00:49:ee:52:58:f0:5e: a1:62:24:3b:eb:ea:67:e4:e0:7a:83:6d:64:e6:dc: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9A:E5:BB:A0:E8:49:AA:2E:EB:D2:98:20:BD:B8:E6:43:6D:5D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 161.199.138.0/23 198.251.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e5:bd:d1:85:d4:14:26:25:82:02:6e:19:6d:40:d2:18:04: e3:2e:76:0c:44:de:b4:b2:af:4c:c1:9f:86:87:81:ed:26:18: 7c:08:b5:52:b0:b8:31:5c:4c:3d:76:a4:b7:85:fb:4c:58:75: 52:aa:ea:7f:60:55:39:e4:fb:28:6b:f7:e3:61:74:05:fb:09: 8a:0e:13:3f:0d:e6:5c:21:d2:ec:45:f4:b8:fb:1b:5a:3a:02: 2f:4c:71:bc:f6:94:2b:27:5c:5a:c2:82:31:29:e4:5b:4b:d2: ae:d8:92:1f:2f:29:b2:30:a9:b7:6f:e6:17:fb:09:70:d7:f4: f0:83:b0:e1:34:64:e0:b7:e9:c1:ae:b4:5f:c6:38:0b:05:66: b4:e2:87:b3:97:7d:69:10:e5:d7:74:05:80:3b:ea:7a:98:e0: 99:cf:4d:ff:b3:18:fe:54:e8:6d:c3:55:98:56:43:86:0f:57: 16:bf:db:52:0a:bb:39:43:b5:44:9e:6d:3f:98:0a:06:8e:f1: d8:16:db:46:b2:e1:35:cd:ab:89:29:2b:39:54:2f:f0:c7:d3: 63:0f:40:b8:7c:14:76:46:4d:ab:a2:ed:17:44:33:8c:9c:f1: 09:60:95:3f:eb:81:a9:d6:1c:23:98:70:61:96:bc:88:38:1f: 14:c6:a7:ca -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsqLD2EaIDyrxI6VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NTQ4Yjk4MmMtMDM1Mi00YTk0LWJlNDctMzFmOWI4NTk3ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx9FdXY7sVCHyqYjQaKHo9GB6k25c1fOQh11 86tMSs3u4dDmoOnN1t5XrPJN+MQeTnjrMQlRRuS1KPfapt5TDGojEqZpUMFr4FEn kaOLZboCRd1A9Z99LjLW8mXmxxnzsH2zAICdF6i9gLSXN6xFJy2nkhppIZY/2bpM auhNFue65137H3TfzNjh7gGIgVhRsbEscLwbjakNylRjb6fmw5Sg9geepRi/jWCl Bd7dLcXae9bQJdE1aM2Sw8XkQkwelK/hfHBnWiy/iLZosWiPHVSeU2TzQFIAJbJV pwwU6/a8z1jlzRM6ggBJ7lJY8F6hYiQ76+pn5OB6g21k5tx+uQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH2a5bug6EmqLuvSmCC9uOZDbV2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDBlM2YzMjItYTIxNi0z YzNmLWI5NGYtMjcxYzZkZGIxNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoceKAwQD xvv4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ3lvdGF1BQmJYICbhltQNIYBOMudgxE3rSyr0zBn4aHge0m GHwItVKwuDFcTD12pLeF+0xYdVKq6n9gVTnk+yhr9+NhdAX7CYoOEz8N5lwh0uxF 9Lj7G1o6Ai9Mcbz2lCsnXFrCgjEp5FtL0q7Ykh8vKbIwqbdv5hf7CXDX9PCDsOE0 ZOC36cGutF/GOAsFZrTih7OXfWkQ5dd0BYA76nqY4JnPTf+zGP5U6G3DVZhWQ4YP Vxa/21IKuzlDtUSebT+YCgaO8dgW20ay4TXNq4kpKzlUL/DH02MPQLh8FHZGTaui 7RdEM4yc8QlglT/rganWHCOYcGGWvIg4HxTGp8o= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:38 2025 by rpki-client