$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa File: eaff245a-576b-320b-a418-9d77a00b9661.roa (raw, json) Hash identifier: oVReYf+XLVthi/Jn3WUW5yFxf6LL0rglJ7Kf7AeJVm0= Subject key identifier: 2A:41:A2:2F:B7:D2:B3:B0:AE:EE:3B:56:14:FC:CD:26:12:9C:EE:5F Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584B2496C439B8ED19FF57AD7C00 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 931 IP address blocks: 161.129.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c4:39:b8:ed:19:ff:57:ad:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=87880adc-96bf-41f8-bf98-9aa2ead01356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:8f:e0:eb:59:bc:1b:31:03:be:cc:c6:e7: 75:1e:61:e2:d9:22:2e:d5:5f:74:17:19:c3:66:d4: d3:9d:d0:fc:eb:23:54:65:95:53:3e:5c:77:a0:af: 5d:26:9f:e0:ab:75:b2:db:cd:66:a2:65:a0:f7:de: 13:bf:6c:3b:61:a6:ad:f9:47:8d:35:49:e7:5b:ab: 38:cd:60:d4:68:eb:6a:b2:b3:48:93:5a:69:8d:9f: aa:07:6a:e2:01:14:88:f7:51:f4:bb:f9:c8:c4:1e: 1c:15:99:46:00:45:93:0a:6e:b9:0f:0b:b5:43:bc: b9:13:71:c5:05:77:58:59:63:e9:26:9b:6b:5f:93: b7:e9:0d:11:39:a3:e5:0c:3f:37:4d:33:10:ee:d4: 19:2a:14:0d:a8:cf:e1:78:9e:28:19:c0:ff:c3:e1: 87:18:a2:2d:c7:77:f0:dd:ee:38:0f:7c:67:fa:e4: 1e:a8:09:58:60:52:3f:3a:3f:75:54:27:31:7e:f8: 7b:a0:7c:3d:63:fc:f8:1d:e1:ce:3c:72:d2:98:e4: ae:95:5f:5f:00:0b:65:e0:67:a3:93:0f:69:06:97: 40:cd:bd:72:d0:5a:89:44:4f:9b:05:1d:e7:d5:c3: 47:45:df:23:b4:d8:3f:6b:9e:16:6e:6b:e0:a4:ed: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:A2:2F:B7:D2:B3:B0:AE:EE:3B:56:14:FC:CD:26:12:9C:EE:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/eaff245a-576b-320b-a418-9d77a00b9661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:08:4d:f3:a3:d1:cd:47:82:06:bf:ea:40:31:5b:7d:1f:ed: 0f:90:ca:da:80:c4:8e:55:7e:8e:4c:b0:ea:37:25:55:74:09: 43:86:39:eb:ec:25:c0:14:81:2b:6f:27:c0:65:6f:3a:c0:a0: a7:f3:b2:9d:9d:61:85:89:87:0a:74:6c:7d:2d:d9:8b:cf:ab: 51:c8:ea:fb:2d:81:7a:ba:aa:69:99:0c:d8:20:ca:95:e2:e4: dc:ac:26:7d:17:4f:93:cf:96:94:2b:2d:1f:04:73:2a:44:f9: d1:3e:42:7f:8f:59:69:c8:23:b5:ab:d4:3f:ef:a1:95:de:9e: f8:cf:73:a0:a4:6d:fe:fc:d5:38:e7:08:59:93:ad:f8:d8:63: e6:bd:00:74:78:8b:ca:b6:c3:ac:f9:30:b5:0d:48:a3:35:69: 99:2a:4d:17:15:25:9d:25:4f:45:05:97:a1:2f:87:1a:3b:5b: 44:97:74:91:62:a7:ad:5e:bb:19:e8:58:c5:da:b6:c8:13:72: 8d:a3:e8:f0:b4:08:ce:ac:a3:1b:fc:42:26:09:da:f1:2c:12: 68:31:ee:47:e7:fc:61:21:07:8f:9a:9a:79:f9:f0:43:eb:5c: ff:a9:87:ce:b8:01:bf:7a:89:42:e0:27:98:d4:04:2f:99:3b: d6:2d:46:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsQ5uO0Z/1etfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ODc4ODBhZGMtOTZiZi00MWY4LWJmOTgtOWFhMmVhZDAxMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiCP4OtZvBsxA77Mxud1HmHi2SIu1V90FxnD ZtTTndD86yNUZZVTPlx3oK9dJp/gq3Wy281momWg994Tv2w7Yaat+UeNNUnnW6s4 zWDUaOtqsrNIk1ppjZ+qB2riARSI91H0u/nIxB4cFZlGAEWTCm65Dwu1Q7y5E3HF BXdYWWPpJptrX5O36Q0ROaPlDD83TTMQ7tQZKhQNqM/heJ4oGcD/w+GHGKItx3fw 3e44D3xn+uQeqAlYYFI/Oj91VCcxfvh7oHw9Y/z4HeHOPHLSmOSulV9fAAtl4Gej kw9pBpdAzb1y0FqJRE+bBR3n1cNHRd8jtNg/a54WbmvgpO2OQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpBoi+30rOwru47VhT8zSYSnO5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZWFmZjI0NWEtNTc2Yi0z MjBiLWE0MTgtOWQ3N2EwMGI5NjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsITfOj0c1Hgga/6kAxW30f7Q+QytqAxI5Vfo5MsOo3JVV0CUOGOevs JcAUgStvJ8BlbzrAoKfzsp2dYYWJhwp0bH0t2YvPq1HI6vstgXq6qmmZDNggypXi 5NysJn0XT5PPlpQrLR8EcypE+dE+Qn+PWWnII7Wr1D/voZXenvjPc6Ckbf781Tjn CFmTrfjYY+a9AHR4i8q2w6z5MLUNSKM1aZkqTRcVJZ0lT0UFl6Evhxo7W0SXdJFi p61euxnoWMXatsgTco2j6PC0CM6soxv8QiYJ2vEsEmgx7kfn/GEhB4+amnn58EPr XP+ph864Ab96iULgJ5jUBC+ZO9YtRjU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:38 2025 by rpki-client