$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa File: a08f2739-bc57-3f01-8de6-25e8506410f0.roa (raw, json) Hash identifier: xTmtE5RtJKIrDn/0zQTxsZsNgSH2ydobbJK74w+2QuE= Subject key identifier: F3:02:3C:FA:53:2F:7D:AB:04:73:41:44:8F:94:92:1D:B6:1D:F7:5C Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584AFEE69FA80C0C2930F22EA280 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 15092 IP address blocks: 161.199.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9f:a8:0c:0c:29:30:f2:2e:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=b08f0240-1224-4a6b-bb0d-174d0dd39655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:87:ae:a0:d9:42:ad:ce:c0:e4:60:74:98:0b: 94:15:f5:49:f6:39:71:22:d7:0f:75:50:65:86:d2: 81:32:16:5e:3a:53:1b:5b:7a:d1:24:ec:00:c9:78: 48:1b:63:48:95:71:df:19:62:8d:6b:90:f2:91:5c: b2:f0:5a:c7:ab:26:9f:fe:12:4a:c9:0d:b2:0e:bb: c5:5e:31:71:f1:db:3c:3b:77:7e:4b:e9:70:f6:aa: a1:44:2c:d3:5f:bb:e2:5f:0d:4d:a9:e0:89:44:21: aa:c0:1c:1a:7c:cb:bd:2d:c4:16:d6:ff:90:32:61: 69:82:9b:4d:79:30:79:2e:c2:c0:f2:52:ff:ef:3d: c7:8b:29:73:54:dc:20:b2:09:5c:c8:e9:e5:04:55: b0:56:4b:27:60:1b:4c:b1:41:62:11:1d:7c:f3:be: 85:d4:eb:1a:2a:8f:ee:09:72:2b:cb:29:30:99:41: d3:eb:f7:66:54:62:be:af:1a:2e:70:e1:c3:cc:d4: a6:b1:94:8b:d6:36:29:38:be:3f:23:38:b8:fc:7c: 3e:5d:16:e3:40:80:80:24:57:ad:1c:6c:c4:d9:3c: b0:54:73:0b:9a:bd:e6:34:a8:35:2c:7b:29:fd:88: 93:41:0c:c5:ff:0e:96:1d:25:53:87:fe:c6:90:4d: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:02:3C:FA:53:2F:7D:AB:04:73:41:44:8F:94:92:1D:B6:1D:F7:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 161.199.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7f:45:17:4e:ad:49:42:36:42:22:72:1e:3e:47:c4:ea:ab: ea:e8:75:fd:ad:69:21:0d:22:02:92:f2:83:5f:83:21:41:d4: b8:dd:87:e4:0b:e8:0b:a7:27:ff:4c:0b:d7:c5:09:c1:98:b3: 0f:1d:58:c5:91:f6:76:4d:0f:25:2c:2e:ad:9d:05:d8:ee:96: 5b:55:b9:da:2c:32:fc:f5:60:21:5c:20:9b:24:8c:9a:03:7b: 15:c2:4d:99:84:88:9a:c3:32:7f:fa:d1:99:ba:2f:52:0d:26: 8b:b1:91:56:26:36:3a:68:66:dc:d8:bc:9a:0d:59:a3:08:a7: 8d:f8:b7:ae:4b:bb:de:02:82:81:be:98:c8:6f:47:96:ec:48: da:34:c7:4d:91:4d:85:bb:60:4f:2e:cf:15:ff:c7:41:2d:04: 72:aa:e2:4c:93:23:2f:91:3b:bf:71:1d:54:1a:90:1f:0c:1e: c3:8d:16:63:11:62:56:3f:e2:9e:ef:cc:4b:ba:0b:b7:a6:8d: 91:a1:63:8d:d9:72:eb:79:f0:eb:7c:73:06:c2:0b:97:18:6f: 54:28:d3:05:34:e2:8a:21:c5:57:5b:41:d5:20:c5:72:4b:45: 20:8c:47:a0:cc:9b:93:ba:a3:35:b7:fc:66:ec:12:87:15:43: f5:3e:ca:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5p+oDAwpMPIuooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YjA4ZjAyNDAtMTIyNC00YTZiLWJiMGQtMTc0ZDBkZDM5NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoeuoNlCrc7A5GB0mAuUFfVJ9jlxItcPdVBl htKBMhZeOlMbW3rRJOwAyXhIG2NIlXHfGWKNa5DykVyy8FrHqyaf/hJKyQ2yDrvF XjFx8ds8O3d+S+lw9qqhRCzTX7viXw1NqeCJRCGqwBwafMu9LcQW1v+QMmFpgptN eTB5LsLA8lL/7z3HiylzVNwgsglcyOnlBFWwVksnYBtMsUFiER18876F1OsaKo/u CXIryykwmUHT6/dmVGK+rxoucOHDzNSmsZSL1jYpOL4/Izi4/Hw+XRbjQICAJFet HGzE2TywVHMLmr3mNKg1LHsp/YiTQQzF/w6WHSVTh/7GkE3sDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMCPPpTL32rBHNBRI+Ukh22HfdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvYTA4ZjI3MzktYmM1Ny0z ZjAxLThkZTYtMjVlODUwNjQxMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCocd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp/RRdOrUlCNkIich4+R8Tqq+rodf2taSENIgKS8oNfgyFB1Ljdh+QL 6AunJ/9MC9fFCcGYsw8dWMWR9nZNDyUsLq2dBdjulltVudosMvz1YCFcIJskjJoD exXCTZmEiJrDMn/60Zm6L1INJouxkVYmNjpoZtzYvJoNWaMIp434t65Lu94CgoG+ mMhvR5bsSNo0x02RTYW7YE8uzxX/x0EtBHKq4kyTIy+RO79xHVQakB8MHsONFmMR YlY/4p7vzEu6C7emjZGhY43Zcut58Ot8cwbCC5cYb1Qo0wU04oohxVdbQdUgxXJL RSCMR6DMm5O6ozW3/GbsEocVQ/U+ytE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:23:02 2025 by rpki-client