$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa File: 31157718-1d9b-3397-ac07-a6037d33d8f0.roa (raw, json) Hash identifier: aXspzXWXcoSNhOUtQ6dL0uUAhggff4/6W0FBQdt+NJI= Subject key identifier: EE:F6:E4:F7:44:D0:FA:43:BD:EE:6E:8C:AF:4F:E5:76:1E:36:BB:45 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584B2496C3BF3C1E5464E3938E80 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 400618 IP address blocks: 161.129.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c3:bf:3c:1e:54:64:e3:93:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=31ff637a-7f55-4988-b6dd-8fcd4becc7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cc:db:6b:8a:0e:6d:41:78:f2:3d:c3:09:92: e0:3f:d7:e5:bc:b7:86:eb:3c:e7:f9:5b:3c:c9:b2: cc:0a:1b:48:dc:e3:02:47:35:12:e2:f7:df:14:3a: 52:7b:9e:b0:c4:eb:bb:7b:3d:cf:71:c4:bd:ab:36: 6e:3c:3a:84:31:af:75:9c:f8:74:0c:db:8f:da:4b: cb:f9:02:6e:78:fd:f6:3c:99:6a:d3:cd:24:13:65: 0e:09:2c:0d:b7:7f:bf:3c:cf:6b:36:e0:60:4e:f2: 8e:70:fa:aa:6b:bd:13:b9:4e:75:f7:4c:7a:94:04: 29:73:1d:30:09:64:5e:4f:85:69:2d:b2:06:d9:23: 4a:b4:ac:d5:e4:8b:be:28:24:35:15:71:2d:40:bf: 94:ef:4a:7b:59:2b:ad:68:76:7d:90:75:7e:ad:e7: b8:2d:fe:50:2f:9b:86:44:bf:4e:ad:cc:2e:8b:9d: 77:d1:c5:a6:a5:e2:9f:15:86:9b:0a:aa:62:5d:cf: 7f:cd:bc:f6:06:9c:2b:da:45:ef:cf:fe:16:81:31: ca:62:bb:24:d6:3e:ec:3f:36:01:ec:ac:b5:20:ee: 08:e5:0d:ec:fa:91:9b:1a:bf:3e:52:5c:1a:0b:0b: cb:33:39:d8:6b:42:8e:73:a8:bb:1d:62:e9:a0:c0: c1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F6:E4:F7:44:D0:FA:43:BD:EE:6E:8C:AF:4F:E5:76:1E:36:BB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bc:85:73:49:70:e8:69:d8:dc:1b:25:fb:77:ea:ed:a8:26: f3:81:a7:9e:fa:6b:19:fc:90:2d:6b:77:b6:d7:4c:f4:6b:4f: 04:1d:13:0f:2a:6a:50:58:d4:82:25:93:d8:94:ef:5f:ef:73: 90:14:46:9d:fa:0d:f7:85:9e:15:e9:56:ff:7b:e1:b5:26:3b: e3:16:49:5d:3b:3c:7f:c4:bb:62:ee:69:cb:ff:0a:9d:70:2c: 93:9e:eb:7d:32:6c:62:f7:69:e9:98:e2:ad:9b:81:12:31:f9: fc:8c:ba:1d:cb:f6:17:f9:d1:34:9b:86:b4:40:82:61:95:39: 29:8c:eb:2a:eb:b3:2a:09:58:a5:2d:6e:20:5e:cc:09:05:53: 78:39:15:4c:01:20:fe:ad:f4:d6:3b:07:c2:36:e2:7e:3b:87: 18:5d:d5:65:92:b8:be:eb:19:6d:bf:ed:2b:97:5e:f6:51:0a: 63:0c:75:09:2c:b4:98:47:de:2f:94:7b:3e:17:e2:ab:07:42: e8:32:9a:ec:1e:94:84:a0:74:04:a9:af:9b:2f:95:2e:b0:38: ee:db:7b:43:0e:45:6a:7d:92:57:c9:4c:ec:b7:f3:aa:f7:7d: 6d:78:84:5d:12:fa:63:93:5b:d3:8e:d9:de:25:02:e9:94:cc: e6:d7:76:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsO/PB5UZOOTjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MzFmZjYzN2EtN2Y1NS00OTg4LWI2ZGQtOGZjZDRiZWNjN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78zba4oObUF48j3DCZLgP9flvLeG6zzn+Vs8 ybLMChtI3OMCRzUS4vffFDpSe56wxOu7ez3PccS9qzZuPDqEMa91nPh0DNuP2kvL +QJueP32PJlq080kE2UOCSwNt3+/PM9rNuBgTvKOcPqqa70TuU5190x6lAQpcx0w CWReT4VpLbIG2SNKtKzV5Iu+KCQ1FXEtQL+U70p7WSutaHZ9kHV+ree4Lf5QL5uG RL9Orcwui5130cWmpeKfFYabCqpiXc9/zbz2Bpwr2kXvz/4WgTHKYrsk1j7sPzYB 7Ky1IO4I5Q3s+pGbGr8+UlwaCwvLMznYa0KOc6i7HWLpoMDBjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO725PdE0PpDve5ujK9P5XYeNrtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvMzExNTc3MTgtMWQ5Yi0z Mzk3LWFjMDctYTYwMzdkMzNkOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi8hXNJcOhp2NwbJft36u2oJvOBp576axn8kC1rd7bXTPRrTwQdEw8q alBY1IIlk9iU71/vc5AURp36DfeFnhXpVv974bUmO+MWSV07PH/Eu2Luacv/Cp1w LJOe630ybGL3aemY4q2bgRIx+fyMuh3L9hf50TSbhrRAgmGVOSmM6yrrsyoJWKUt biBezAkFU3g5FUwBIP6t9NY7B8I24n47hxhd1WWSuL7rGW2/7SuXXvZRCmMMdQks tJhH3i+Uez4X4qsHQugymuwelISgdASpr5svlS6wOO7be0MORWp9klfJTOy386r3 fW14hF0S+mOTW9OO2d4lAumUzObXdo4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:37:39 2025 by rpki-client