$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa File: 3bfa061b-e17c-3190-b642-67068e27e58e.roa (raw, json) Hash identifier: B/qNfyHe1AoklBEGG15qz/o+sKGQQ58rpK+/B57SWio= Subject key identifier: 02:80:98:4E:F4:BE:31:D4:CC:EC:F0:67:97:93:31:75:AE:95:5E:CB Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584AD3A0EE6B79A640E5E2EA4CC0 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 161.129.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:ee:6b:79:a6:40:e5:e2:ea:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=be55b2d0-4979-4a85-b08e-a1e2d7786567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2f:30:3c:10:e0:25:e4:23:c1:64:38:ac:d1: f7:6a:93:17:83:9a:07:2f:de:a6:18:c2:03:79:75: 0c:f2:9a:93:c2:7d:60:31:1a:54:a0:c5:66:0a:de: 24:c9:63:0d:55:15:8e:a8:4f:4f:69:af:31:a6:8b: 64:b0:5a:19:68:e4:cd:12:a1:ee:4b:dc:2b:31:65: b4:1f:63:08:6a:ad:fa:70:28:70:03:45:db:a0:f2: ea:11:b5:53:a9:8a:16:10:c2:92:c8:57:75:30:00: fb:e5:08:d8:fa:95:b0:45:fa:0f:3b:ed:e0:b1:98: aa:64:3c:6d:e9:52:4b:93:1f:e4:61:42:76:7b:5b: b0:66:96:4e:49:26:2b:bd:a9:e6:b5:44:7a:de:f1: 7e:6f:89:1b:cf:02:e4:41:cf:95:31:b7:52:3d:d0: 35:79:d8:de:b5:6e:9c:3b:f5:9e:86:1f:7c:f5:6e: fa:16:18:f1:da:69:55:25:49:bd:85:71:6b:34:fd: f8:a8:52:ed:aa:2f:1f:2d:6a:a0:2e:d3:1a:4f:67: e0:4d:93:87:31:65:7c:c2:30:b7:27:d5:e8:b3:06: e3:03:7f:2f:d9:f7:1e:d4:d1:3f:39:6f:76:97:16: 16:d6:fd:f9:3d:a1:08:b4:27:0e:c6:7f:d1:5b:c8: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:80:98:4E:F4:BE:31:D4:CC:EC:F0:67:97:93:31:75:AE:95:5E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0a:bc:79:79:b5:69:5e:63:24:e5:56:3e:81:d2:65:48:e1: 52:7f:d2:7d:cb:c0:70:b6:c9:50:8b:4f:57:9b:ac:4c:e5:1f: 12:1d:a5:f5:46:b6:88:ad:4e:a9:1b:f1:ba:db:41:de:7e:38: 1d:f5:99:52:b4:16:4f:f3:bd:f3:10:9a:47:21:ac:f1:1e:ee: 79:20:95:37:af:6b:54:c4:49:8d:15:70:6e:37:4c:aa:d5:6c: 57:0d:3f:93:60:39:f8:3d:7e:de:19:9b:7a:c4:30:6b:4f:ce: 3e:01:9a:28:55:65:ac:52:9b:1f:0b:ee:8c:d2:bc:0c:af:84: b4:16:71:f9:24:b9:42:28:67:50:de:8d:b6:92:44:ed:e2:ee: c9:94:2c:66:05:f3:26:dd:da:25:e7:dd:0a:0f:66:66:c7:74: f7:ee:51:3a:a6:6d:c8:f8:7c:f6:4b:2d:ad:c7:4a:cf:c0:93: af:68:24:20:07:9f:9e:03:ff:07:74:a7:f0:e2:0d:e3:11:31: b8:8c:8a:f9:8a:ea:44:ce:ae:cc:8c:95:be:17:cb:02:40:01: df:3f:e4:d2:db:7f:e0:81:f0:40:b2:3e:68:3c:52:0a:fb:9a: c5:84:2f:82:4f:e7:89:03:be:a4:5d:ec:e7:ef:4a:c4:7b:88: a6:21:6d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToO5reaZA5eLqTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YmU1NWIyZDAtNDk3OS00YTg1LWIwOGUtYTFlMmQ3Nzg2NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C8wPBDgJeQjwWQ4rNH3apMXg5oHL96mGMID eXUM8pqTwn1gMRpUoMVmCt4kyWMNVRWOqE9Paa8xpotksFoZaOTNEqHuS9wrMWW0 H2MIaq36cChwA0XboPLqEbVTqYoWEMKSyFd1MAD75QjY+pWwRfoPO+3gsZiqZDxt 6VJLkx/kYUJ2e1uwZpZOSSYrvanmtUR63vF+b4kbzwLkQc+VMbdSPdA1edjetW6c O/Wehh989W76Fhjx2mlVJUm9hXFrNP34qFLtqi8fLWqgLtMaT2fgTZOHMWV8wjC3 J9XoswbjA38v2fce1NE/OW92lxYW1v35PaEItCcOxn/RW8hk7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKAmE70vjHUzOzwZ5eTMXWulV7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvM2JmYTA2MWItZTE3Yy0z MTkwLWI2NDItNjcwNjhlMjdlNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAKvHl5tWleYyTlVj6B0mVI4VJ/0n3LwHC2yVCLT1ebrEzlHxIdpfVG toitTqkb8brbQd5+OB31mVK0Fk/zvfMQmkchrPEe7nkglTeva1TESY0VcG43TKrV bFcNP5NgOfg9ft4Zm3rEMGtPzj4BmihVZaxSmx8L7ozSvAyvhLQWcfkkuUIoZ1De jbaSRO3i7smULGYF8ybd2iXn3QoPZmbHdPfuUTqmbcj4fPZLLa3HSs/Ak69oJCAH n54D/wd0p/DiDeMRMbiMivmK6kTOrsyMlb4XywJAAd8/5NLbf+CB8ECyPmg8Ugr7 msWEL4JP54kDvqRd7OfvSsR7iKYhbfY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:34 2025 by rpki-client