$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4c50a6ea-ddb8-3abd-924b-30110b57ed65.roa File: 4c50a6ea-ddb8-3abd-924b-30110b57ed65.roa (raw, json) Hash identifier: vsWB2IWHZ34VcE7wkYKjvBJMLCZA6LScBg0Z3M5gvTg= Subject key identifier: CB:10:E0:42:97:7E:D9:E5:75:8E:DC:FB:BE:49:50:A1:9D:19:18:1B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B52A7586671ABCF15650C1A80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4c50a6ea-ddb8-3abd-924b-30110b57ed65.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 2914 IP address blocks: 161.58.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:58:66:71:ab:cf:15:65:0c:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=d6a58ff6-4363-4c06-a557-37f0fcb50c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:16:1c:19:27:44:b0:b2:9d:88:5d:8a:c7: a2:54:04:f7:07:6e:95:59:b4:b0:d7:58:a8:a2:5b: fe:cf:20:60:1a:a6:29:d7:b8:4d:c2:59:59:c9:3f: 86:b4:49:37:04:b9:8e:b9:66:52:7d:69:98:60:48: ba:26:07:6e:28:7d:4a:62:85:b3:34:92:36:6f:fd: bb:7a:f6:ab:c3:61:4a:9c:da:e2:cc:21:b1:38:c9: 86:b3:45:5a:cd:bd:16:db:bb:a5:eb:1d:f3:58:00: e0:fb:c9:fb:e6:86:1f:37:50:e3:b6:75:9e:64:2e: 88:53:9b:5a:82:b5:1a:f1:7d:7e:4d:99:2e:17:b8: bb:3e:ae:40:26:5e:44:12:6f:a8:6d:d4:7a:08:0c: 9c:51:91:dc:ee:f1:93:c1:e3:8b:af:cc:dc:7d:dd: 5a:32:34:0c:a2:e9:80:ae:91:9e:51:65:96:41:aa: c2:05:57:a9:af:cc:58:fe:c0:68:23:bf:63:89:ff: 7d:1b:8c:67:89:1f:aa:74:ae:3f:e2:4f:94:d7:24: 40:d7:f9:4b:a9:26:4d:59:8c:50:ac:f4:2a:44:f2: dc:c9:f1:43:32:e5:e8:3e:12:36:74:67:80:77:5c: c7:a6:08:8f:6c:46:65:e8:70:fb:e9:b5:cd:96:68: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:10:E0:42:97:7E:D9:E5:75:8E:DC:FB:BE:49:50:A1:9D:19:18:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4c50a6ea-ddb8-3abd-924b-30110b57ed65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 161.58.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8b:22:ca:72:7e:f6:7b:15:ff:de:a6:22:2e:ea:b7:13:e1: 4e:a8:bc:16:b2:0b:04:3b:ec:4f:a1:56:45:ac:4b:3d:a5:69: 5a:e8:77:3b:27:37:2d:5b:68:4c:91:39:23:5d:f8:d1:95:1e: 99:ed:71:27:51:6b:6d:93:0c:6c:72:05:7b:cd:f1:f4:5d:c4: 11:d9:7a:43:77:b6:0b:77:41:7e:11:5e:87:0b:e3:12:62:19: b6:5a:a5:13:e0:fd:ab:3e:1d:6c:41:24:55:ad:26:8c:b8:c8: ac:f7:06:b0:8b:53:46:a8:84:73:45:98:f9:39:91:92:55:97: 5c:7f:9a:1e:55:7d:f0:a8:0b:9b:45:13:e0:97:d0:aa:6d:2d: 17:9b:ca:80:17:a4:f9:4f:80:f4:e1:a8:e8:aa:1c:19:af:39: 9e:98:de:d9:78:86:fe:b0:ab:07:8f:29:42:19:13:4e:31:4d: c6:f3:6d:0e:0e:38:f6:84:92:f1:47:e8:1c:71:d2:2b:34:23: 9d:86:6a:fc:a2:dc:d3:ac:e3:2b:83:d9:f8:02:cc:63:36:59: 71:99:29:94:52:82:b6:f2:eb:d2:47:16:8e:ec:80:02:e2:63: 6e:bb:b1:0a:ee:aa:a8:7e:c5:24:37:96:8d:8b:98:19:a0:a1: 6c:9d:00:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1hmcavPFWUMGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZDZhNThmZjYtNDM2My00YzA2LWE1NTctMzdmMGZjYjUwYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVYWHBknRLCynYhdiseiVAT3B26VWbSw11io olv+zyBgGqYp17hNwllZyT+GtEk3BLmOuWZSfWmYYEi6JgduKH1KYoWzNJI2b/27 evarw2FKnNrizCGxOMmGs0Vazb0W27ul6x3zWADg+8n75oYfN1DjtnWeZC6IU5ta grUa8X1+TZkuF7i7Pq5AJl5EEm+obdR6CAycUZHc7vGTweOLr8zcfd1aMjQMoumA rpGeUWWWQarCBVepr8xY/sBoI79jif99G4xniR+qdK4/4k+U1yRA1/lLqSZNWYxQ rPQqRPLcyfFDMuXoPhI2dGeAd1zHpgiPbEZl6HD76bXNlmhZDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsQ4EKXftnldY7c+75JUKGdGRgbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGM1MGE2ZWEtZGRiOC0z YWJkLTkyNGItMzAxMTBiNTdlZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoTqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICLIspyfvZ7Ff/epiIu6rcT4U6ovBayCwQ77E+hVkWsSz2laVrodzsn Ny1baEyROSNd+NGVHpntcSdRa22TDGxyBXvN8fRdxBHZekN3tgt3QX4RXocL4xJi GbZapRPg/as+HWxBJFWtJoy4yKz3BrCLU0aohHNFmPk5kZJVl1x/mh5VffCoC5tF E+CX0KptLRebyoAXpPlPgPThqOiqHBmvOZ6Y3tl4hv6wqwePKUIZE04xTcbzbQ4O OPaEkvFH6Bxx0is0I52Gavyi3NOs4yuD2fgCzGM2WXGZKZRSgrby69JHFo7sgALi Y267sQruqqh+xSQ3lo2LmBmgoWydABY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:38 2025 by rpki-client