$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa File: 85d3f429-f3aa-3e05-8150-137b937decb4.roa (raw, json) Hash identifier: /vE7FqcuBKXp/VEyEuhXvVX6tfU7l4NDE3tSzjJhUOw= Subject key identifier: 95:49:C0:51:1A:81:AA:26:6E:96:05:C5:4E:04:C7:2C:F6:54:DF:80 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584B2496CEB408EE77AB18E5F780 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 213122 IP address blocks: 161.129.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:ce:b4:08:ee:77:ab:18:e5:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=678f3565-0e0f-4d16-8212-bc96ff27dd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:44:c6:09:b6:33:65:bf:77:e6:35:fc:4d: 41:06:30:d7:04:f6:20:39:a8:3b:cb:45:e3:f6:00: ed:5c:a1:df:73:38:f4:5a:30:68:66:ee:ff:fa:46: e5:f4:29:48:89:df:cd:31:8b:fa:b9:1c:fa:30:73: ba:34:b5:72:e0:76:f0:37:5b:24:57:6b:a8:56:90: bb:d2:8b:76:1b:97:8e:4f:c7:3b:6d:42:97:ff:26: a1:54:e2:a8:f1:aa:2b:05:a4:95:d2:e3:f4:46:5f: 07:64:92:74:35:f8:5e:4b:2e:e7:36:f8:10:69:36: 8e:fd:94:9f:f7:62:1f:cf:2d:5c:0d:8c:49:80:67: 91:0f:da:29:ff:a8:b5:34:e1:69:88:d7:f7:ec:54: 5c:10:26:5f:72:c1:2c:00:a3:27:5c:5f:27:a5:ac: 92:69:eb:eb:fc:18:5f:82:6f:0f:36:36:de:19:29: 7d:0a:45:7c:8b:4e:d2:b6:eb:8d:e1:e6:ed:df:d7: af:d4:0a:18:67:e6:63:68:c5:c6:48:c2:7d:2a:b9: 37:be:56:83:e9:9a:00:81:79:a9:ef:94:66:26:6a: 80:ab:3e:f7:72:8d:6f:40:00:94:f9:4f:88:2e:cd: e5:09:60:2d:73:8c:14:83:35:ba:95:e4:62:ed:51: 32:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:49:C0:51:1A:81:AA:26:6E:96:05:C5:4E:04:C7:2C:F6:54:DF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:27:b7:e8:c0:27:69:15:d7:f6:22:b7:b9:98:06:c1:ae:51: 96:e0:36:b7:81:f6:3b:48:5f:9b:d0:2d:da:b6:74:c3:40:61: fe:41:a5:a7:b4:1f:68:22:39:0f:d6:38:90:59:e9:de:97:98: 00:91:1d:ea:00:46:2f:43:d0:01:f8:35:ba:ef:f9:31:a4:e2: 3b:28:e6:3d:e8:47:c1:65:74:5d:e2:91:66:14:2f:ef:5a:41: 89:e4:11:b1:74:52:0a:23:c2:35:84:57:e3:d8:10:32:22:39: 00:7f:17:76:78:18:7e:6a:fb:81:52:0a:79:71:11:3b:de:9d: 2d:ab:90:fc:b1:c6:1f:b9:27:5c:fa:8e:e3:33:8d:bf:e1:2f: a0:0d:34:39:7a:52:f1:d0:a7:7d:57:bf:38:98:97:2f:c0:7a: 9e:74:c1:a2:b8:34:b8:51:80:b8:bf:22:a5:74:b8:26:66:7b: 0f:ce:13:19:20:56:28:fb:da:9d:fc:fc:26:b6:39:fe:aa:a0: e8:02:c8:d0:b7:ca:69:40:75:81:66:92:08:95:53:e8:55:50: c8:8a:54:c8:cd:b2:38:b5:d9:eb:6a:1d:2e:88:8f:bf:46:96: d2:6f:d0:0d:a1:8a:9a:84:6a:55:ac:63:d8:b4:cf:c7:b1:40: 42:77:63:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskls60CO53qxjl94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk Njc4ZjM1NjUtMGUwZi00ZDE2LTgyMTItYmM5NmZmMjdkZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP9Exgm2M2W/d+Y1/E1BBjDXBPYgOag7y0Xj 9gDtXKHfczj0WjBoZu7/+kbl9ClIid/NMYv6uRz6MHO6NLVy4HbwN1skV2uoVpC7 0ot2G5eOT8c7bUKX/yahVOKo8aorBaSV0uP0Rl8HZJJ0NfheSy7nNvgQaTaO/ZSf 92Ifzy1cDYxJgGeRD9op/6i1NOFpiNf37FRcECZfcsEsAKMnXF8npaySaevr/Bhf gm8PNjbeGSl9CkV8i07StuuN4ebt39ev1AoYZ+ZjaMXGSMJ9Krk3vlaD6ZoAgXmp 75RmJmqAqz73co1vQACU+U+ILs3lCWAtc4wUgzW6leRi7VEyNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVJwFEagaombpYFxU4Exyz2VN+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvODVkM2Y0MjktZjNhYS0z ZTA1LTgxNTAtMTM3YjkzN2RlY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8nt+jAJ2kV1/Yit7mYBsGuUZbgNreB9jtIX5vQLdq2dMNAYf5Bpae0 H2giOQ/WOJBZ6d6XmACRHeoARi9D0AH4Nbrv+TGk4jso5j3oR8FldF3ikWYUL+9a QYnkEbF0UgojwjWEV+PYEDIiOQB/F3Z4GH5q+4FSCnlxETvenS2rkPyxxh+5J1z6 juMzjb/hL6ANNDl6UvHQp31XvziYly/Aep50waK4NLhRgLi/IqV0uCZmew/OExkg Vij72p38/Ca2Of6qoOgCyNC3ymlAdYFmkgiVU+hVUMiKVMjNsji12etqHS6Ij79G ltJv0A2hipqEalWsY9i0z8exQEJ3YzQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:31:03 2025 by rpki-client