$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa File: b9dd9788-1f88-3890-b233-520f9602c142.roa (raw, json) Hash identifier: Sw1ppFQqxJcfuBVLnCboEyGB1oxEQYgw5PeNq7H/tZ8= Subject key identifier: 2C:48:86:3C:C5:9C:BA:7B:D2:68:88:76:B4:E5:B9:B3:42:83:40:69 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584AD23BB4B0150F1BE373F33A80 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 8075 IP address blocks: 161.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b4:b0:15:0f:1b:e3:73:f3:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=bdb21e65-27e9-4648-a39a-90791615f11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:b5:9c:3b:46:97:b1:80:cf:78:cc:88:79: 17:fd:89:f6:62:d1:89:77:95:70:9b:1a:f5:14:2b: b1:21:57:33:d4:98:58:84:3e:c1:61:ee:34:e7:ab: 66:47:f6:0c:36:a4:1a:5d:5f:ff:d4:34:e0:c3:a1: da:6d:e3:c8:30:c6:bc:8e:1d:14:1e:f5:29:a7:97: 85:40:8a:ee:fe:41:f9:9e:e8:dd:dc:aa:7a:fb:2d: b6:7a:69:a7:49:1d:07:f3:fb:89:cb:26:4b:46:01: 7f:e7:cd:87:ca:77:ef:af:4f:68:28:30:54:0e:4c: 54:61:d9:a0:54:2f:50:b8:ae:c7:ab:bb:54:6f:b8: d6:9b:2f:2b:03:51:f4:74:ef:e7:e2:42:ed:41:b3: 42:87:37:bf:63:04:70:4e:8a:d9:de:61:19:44:5a: 97:c0:ae:bd:a5:44:21:e6:3f:e7:bf:48:f4:fc:ad: 17:fc:98:d1:b8:66:9b:33:3f:46:19:7b:80:30:8b: 9f:d9:bc:23:ba:21:23:3a:6f:3a:05:dd:60:0c:83: e4:3b:8a:4f:11:94:17:9f:92:b3:5e:1b:fb:29:8d: 31:18:bd:38:40:89:dd:a0:1f:06:fe:56:df:61:2a: bb:3e:97:a8:6e:72:d0:63:e0:bc:ea:f3:52:3e:36: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:48:86:3C:C5:9C:BA:7B:D2:68:88:76:B4:E5:B9:B3:42:83:40:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:e1:9e:02:a0:7b:f1:1f:06:66:d1:8d:11:6f:d6:f7:b8:44: b4:0d:7d:ea:4d:26:74:31:be:12:7d:b7:e1:89:17:d8:3f:90: e9:ab:26:2d:9d:a4:29:17:d9:84:d3:55:b0:fa:6b:7d:5d:71: 21:4c:81:f5:dc:dc:14:80:4d:90:fc:2e:5d:a0:67:f6:0c:5d: 73:fc:34:60:f2:85:3f:28:a1:c5:d4:e6:cb:0c:e7:88:da:e4: c5:4f:07:8c:1c:a3:7c:7a:a2:3d:a4:e3:38:70:62:6b:fb:85: 7f:c3:96:f3:85:cf:1f:34:72:dd:97:cd:40:f1:97:a3:da:b6: 7c:99:af:eb:f4:9e:8d:e1:77:df:3d:f8:3c:4a:10:28:2e:eb: eb:41:e8:3f:51:13:cf:1b:4b:f9:60:46:db:7c:d6:4e:67:93: a0:78:54:f4:ed:88:06:d2:e4:f9:65:27:a0:b6:d7:ab:c8:39: a0:5f:4a:92:7e:25:7d:a7:13:b9:c5:f4:e2:13:2f:de:f4:6f: fb:81:a4:a6:56:1a:8e:9c:68:cb:fe:15:1d:af:52:8e:d3:7a: 13:0c:f2:6b:20:c5:a5:03:37:31:9e:1a:ad:de:af:30:21:a3: 8c:8f:54:02:b5:5e:8e:e8:e8:77:60:51:59:45:d1:57:f2:ac: 43:02:c6:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7SwFQ8b43PzOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YmRiMjFlNjUtMjdlOS00NjQ4LWEzOWEtOTA3OTE2MTVmMTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXa1nDtGl7GAz3jMiHkX/Yn2YtGJd5Vwmxr1 FCuxIVcz1JhYhD7BYe4056tmR/YMNqQaXV//1DTgw6HabePIMMa8jh0UHvUpp5eF QIru/kH5nujd3Kp6+y22emmnSR0H8/uJyyZLRgF/582Hynfvr09oKDBUDkxUYdmg VC9QuK7Hq7tUb7jWmy8rA1H0dO/n4kLtQbNChze/YwRwTorZ3mEZRFqXwK69pUQh 5j/nv0j0/K0X/JjRuGabMz9GGXuAMIuf2bwjuiEjOm86Bd1gDIPkO4pPEZQXn5Kz Xhv7KY0xGL04QIndoB8G/lbfYSq7PpeobnLQY+C86vNSPjYMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxIhjzFnLp70miIdrTlubNCg0BpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvYjlkZDk3ODgtMWY4OC0z ODkwLWIyMzMtNTIwZjk2MDJjMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/hngKge/EfBmbRjRFv1ve4RLQNfepNJnQxvhJ9t+GJF9g/kOmrJi2d pCkX2YTTVbD6a31dcSFMgfXc3BSATZD8Ll2gZ/YMXXP8NGDyhT8oocXU5ssM54ja 5MVPB4wco3x6oj2k4zhwYmv7hX/DlvOFzx80ct2XzUDxl6PatnyZr+v0no3hd989 +DxKECgu6+tB6D9RE88bS/lgRtt81k5nk6B4VPTtiAbS5PllJ6C216vIOaBfSpJ+ JX2nE7nF9OITL970b/uBpKZWGo6caMv+FR2vUo7TehMM8msgxaUDNzGeGq3erzAh o4yPVAK1Xo7o6HdgUVlF0VfyrEMCxoc= -----END CERTIFICATE-----Generated at Sun Aug 24 00:32:10 2025 by rpki-client