$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12231f80-ab8c-3b75-ba0a-46b23bdca25d.roa File: 12231f80-ab8c-3b75-ba0a-46b23bdca25d.roa (raw, json) Hash identifier: ul3btTY+t2jWn9bOWrRTRMuAYkyCiMRZHQK1ta/RYE0= Subject key identifier: 9D:55:77:14:89:E4:AB:DC:58:3A:6E:DF:12:B5:8F:9B:C5:06:95:A4 Certificate issuer: /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62 Certificate serial: 010D0C9F4328584B25FC31BDAE4AE2D7E1092900 Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12231f80-ab8c-3b75-ba0a-46b23bdca25d.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 16437 IP address blocks: 161.199.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:31:bd:ae:4a:e2:d7:e1:09:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=473375a7-a4a1-48a2-961e-1ef6050792e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:8c:e3:50:4e:73:a5:ad:2a:4b:cf:7e:80: 85:65:88:18:8f:24:7b:5e:91:19:6c:88:f3:0d:e3: c6:d2:ce:90:35:d9:a7:40:44:ac:35:0a:41:3f:8a: 2c:8b:d1:dd:80:3e:8a:e2:3c:08:db:9b:d7:5e:f7: 89:1a:54:98:20:d7:07:01:44:dd:e9:11:49:89:e3: 2a:d1:38:f1:55:13:4a:27:08:b6:58:17:d1:73:b0: c1:97:db:9e:22:e8:9c:3b:ae:0e:78:b5:18:cd:03: e0:8a:45:40:71:dd:41:22:fa:51:f6:08:b3:73:d4: c4:c1:95:84:57:03:66:7c:93:be:6e:04:fc:3e:7c: 17:d9:98:f7:88:d3:fe:46:98:0c:8f:f7:dd:0a:52: 43:e4:b2:f2:b8:f7:df:67:10:0c:01:77:09:83:8a: 66:eb:5b:1e:a1:d9:2c:ea:f5:ac:b2:ac:83:4a:ed: 3a:cb:5d:61:6b:7d:e7:fd:d1:a4:2c:10:ce:87:3c: 81:0a:a7:a8:d9:80:b6:df:79:63:85:34:9b:5c:cb: a7:3a:9c:5a:4f:60:e7:47:f6:f8:0b:1a:84:39:10: 29:a5:cd:2c:ef:3e:35:18:da:7f:37:99:10:8f:0f: c3:1e:a8:28:60:a7:be:c8:72:ff:29:67:bc:4e:1d: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:55:77:14:89:E4:AB:DC:58:3A:6E:DF:12:B5:8F:9B:C5:06:95:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12231f80-ab8c-3b75-ba0a-46b23bdca25d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl X509v3 Authority Key Identifier: keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer sbgp-ipAddrBlock: critical IPv4: 161.199.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cb:e2:24:0a:ed:07:c5:81:9b:c0:5e:9d:7b:93:ad:f4:f1: dd:83:c6:ec:22:4a:df:fe:3f:20:9b:56:c0:90:d1:25:33:16: df:7d:c9:0c:a6:26:2c:80:40:52:ab:86:bf:2b:79:f3:10:b1: c4:d7:46:a9:7e:ac:5f:a3:e2:79:fa:b4:ae:28:21:d3:28:eb: 49:1d:56:b9:a9:0a:4f:dd:2c:1c:81:e9:65:ba:17:3b:c0:0f: a6:73:d1:2c:47:e4:3c:f7:2f:f9:f1:75:70:d2:17:9c:78:8c: c2:6a:a4:be:b6:ad:f0:e6:c2:77:08:8b:ad:95:89:fb:c4:16: d8:90:6f:f6:41:ba:46:6e:0f:23:45:35:d1:de:9e:9c:22:8c: ed:92:01:64:9b:d2:7a:2e:b6:e4:9f:d7:d7:16:3a:45:53:f8: 51:c6:04:7d:ae:4e:b8:3e:50:83:1e:dd:d7:66:0b:4e:09:08: f9:e9:cb:93:ee:6e:46:4a:7f:c3:e3:2d:fe:e2:bd:0b:29:82: 27:da:78:79:04:a1:c5:be:37:5f:a2:d2:e3:e7:69:42:35:81: ea:fe:01:f3:a5:b5:ec:63:4b:d4:41:cb:a8:f8:95:7f:1c:fd: c0:36:d5:5e:32:72:46:86:11:40:29:1a:22:d9:f8:25:e0:7f: a8:eb:40:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DG9rkri1+EJKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJmZGZlNmEtYmMyYy00MTgwLWJjNWQtN2JkNmRlNWNm YTYyMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NDczMzc1YTctYTRhMS00OGEyLTk2MWUtMWVmNjA1MDc5MmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NOM41BOc6WtKkvPfoCFZYgYjyR7XpEZbIjz DePG0s6QNdmnQESsNQpBP4osi9HdgD6K4jwI25vXXveJGlSYINcHAUTd6RFJieMq 0TjxVRNKJwi2WBfRc7DBl9ueIuicO64OeLUYzQPgikVAcd1BIvpR9gizc9TEwZWE VwNmfJO+bgT8PnwX2Zj3iNP+RpgMj/fdClJD5LLyuPffZxAMAXcJg4pm61seodks 6vWssqyDSu06y11ha33n/dGkLBDOhzyBCqeo2YC233ljhTSbXMunOpxaT2DnR/b4 CxqEORAppc0s7z41GNp/N5kQjw/DHqgoYKe+yHL/KWe8Th3kVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1VdxSJ5KvcWDpu3xK1j5vFBpWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYmZk ZmU2YS1iYzJjLTQxODAtYmM1ZC03YmQ2ZGU1Y2ZhNjIvMTIyMzFmODAtYWI4Yy0z Yjc1LWJhMGEtNDZiMjNiZGNhMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGJmZGZlNmEtYmMyYy00MTgwLWJj NWQtN2JkNmRlNWNmYTYyLzBiZmRmZTZhLWJjMmMtNDE4MC1iYzVkLTdiZDZkZTVj ZmE2Mi5jcmwwHwYDVR0jBBgwFoAUTbUvRrI70QyJnoiDdxKwfisk6gcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYmZkZmU2YS1iYzJjLTQxODAtYmM1ZC03YmQ2 ZGU1Y2ZhNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoceEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPL4iQK7QfFgZvAXp17k6308d2DxuwiSt/+PyCbVsCQ0SUzFt99yQym JiyAQFKrhr8refMQscTXRql+rF+j4nn6tK4oIdMo60kdVrmpCk/dLByB6WW6FzvA D6Zz0SxH5Dz3L/nxdXDSF5x4jMJqpL62rfDmwncIi62VifvEFtiQb/ZBukZuDyNF NdHenpwijO2SAWSb0noutuSf19cWOkVT+FHGBH2uTrg+UIMe3ddmC04JCPnpy5Pu bkZKf8PjLf7ivQspgifaeHkEocW+N1+i0uPnaUI1ger+AfOltexjS9RBy6j4lX8c /cA21V4yckaGEUApGiLZ+CXgf6jrQH0= -----END CERTIFICATE-----Generated at Mon Oct 20 01:59:56 2025 by rpki-client