$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa File: 0be8454d-aa3f-3887-b929-e6f6935a2918.roa (raw, json) Hash identifier: za4TlVtvKNy22rcXZddalx9rSbPlDK/Ug2BC3ONpWM0= Subject key identifier: 6E:BE:8C:96:7D:FB:D3:87:CF:2C:43:57:8F:18:81:FF:EB:B4:31:0F Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B43545F6DB6B6948D4372FF80 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa Signing time: Sun 21 Sep 2025 01:16:52 +0000 ROA not before: Sun 21 Sep 2025 01:16:52 +0000 ROA not after: Sat 20 Dec 2025 02:16:52 +0000 asID: 10794 IP address blocks: 171.161.20.0/22 maxlen: 22 171.161.20.0/24 maxlen: 24 171.161.21.0/24 maxlen: 24 171.161.22.0/24 maxlen: 24 171.161.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:54:5f:6d:b6:b6:94:8d:43:72:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 01:16:52 2025 GMT Not After : Dec 20 02:16:52 2025 GMT Subject: CN=221783c4-e97f-4164-a33f-ab71dc321f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:10:d0:48:ea:1c:40:8f:22:25:03:f2:df:64: 69:03:0c:90:2a:fd:88:25:8c:d3:51:10:10:f5:e0: 68:50:2d:56:9b:04:69:e2:58:f6:1e:38:19:9e:18: 72:d4:ef:28:50:b0:37:2d:7f:0a:fd:6c:5d:f6:aa: 32:38:15:69:b1:58:1d:ce:6e:ec:77:24:0e:76:fd: 28:a6:be:f9:65:93:42:71:f4:d4:d3:91:3e:40:e7: 82:f7:ab:ed:ed:89:28:eb:d5:ff:47:1c:0a:1e:27: 9d:a9:1a:a2:7a:52:ac:aa:15:41:d2:fd:2d:da:fa: 63:64:f1:c4:b5:a7:ef:01:54:75:31:ab:90:9a:5d: 2a:41:de:52:6b:e0:10:98:63:fd:18:bf:2b:3c:22: 10:30:1c:b2:09:86:d2:c3:cf:53:fb:5c:73:ca:1c: 24:c3:f6:fb:b6:2b:d9:e4:13:64:f7:67:ae:72:ff: 87:af:9d:0f:a4:33:ba:ca:56:48:76:a8:09:2e:e7: 81:58:58:32:45:11:e9:60:f1:44:60:e7:55:aa:0c: fa:1d:6f:99:39:cc:2b:09:b8:ca:5b:00:95:ef:34: e6:d5:23:2e:8f:8a:d2:ba:f4:13:13:92:ae:8d:79: bd:2f:d8:96:f4:3a:e1:c7:12:d1:5a:bf:75:b0:51: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BE:8C:96:7D:FB:D3:87:CF:2C:43:57:8F:18:81:FF:EB:B4:31:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0be8454d-aa3f-3887-b929-e6f6935a2918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fb:8f:b5:05:d4:7c:c2:ec:0d:d2:47:49:2c:22:4a:02:1a: 4b:44:90:a5:49:e5:4e:ed:87:5e:70:89:df:76:33:e9:a7:f8: 0d:22:15:96:41:83:ee:b1:91:2d:c5:0a:da:7d:a5:c8:94:a7: a4:6d:e3:16:99:13:ae:a9:28:d4:5e:45:73:d9:3f:bb:07:cd: 5c:80:fb:92:48:24:43:14:ea:62:29:32:b1:cf:21:57:7f:97: ee:25:15:54:41:55:53:7d:f5:1a:53:91:20:23:4a:83:de:2d: 39:ce:a0:36:1e:33:26:76:da:82:1f:e0:ac:7b:89:e5:1f:1c: c7:42:d9:0d:c3:23:21:27:42:7a:0b:45:58:34:a5:6b:95:20: c1:a2:38:5f:42:40:11:02:68:ec:9a:f6:f6:8d:f7:1d:1b:17: 25:c9:3f:58:51:59:9a:4c:00:a5:98:b6:e7:14:c6:57:30:83: 68:2b:e6:58:46:9d:32:69:f3:65:33:a8:98:17:07:71:87:f6: 5f:b0:eb:70:9d:c7:59:66:c2:db:4a:08:d7:7e:35:d2:a1:56: fb:02:e8:5d:dc:da:06:a5:22:52:1a:e5:cb:da:14:17:c9:82: 24:cb:cf:bb:52:bd:71:8a:0d:a6:b6:d8:0e:a6:17:09:ea:2b: 86:5d:e8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDVF9ttraUjUNy/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTAxMTY1MloXDTI1MTIyMDAyMTY1MlowLzEtMCsGA1UEAxMk MjIxNzgzYzQtZTk3Zi00MTY0LWEzM2YtYWI3MWRjMzIxZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxDQSOocQI8iJQPy32RpAwyQKv2IJYzTURAQ 9eBoUC1WmwRp4lj2HjgZnhhy1O8oULA3LX8K/Wxd9qoyOBVpsVgdzm7sdyQOdv0o pr75ZZNCcfTU05E+QOeC96vt7Yko69X/RxwKHiedqRqielKsqhVB0v0t2vpjZPHE tafvAVR1MauQml0qQd5Sa+AQmGP9GL8rPCIQMByyCYbSw89T+1xzyhwkw/b7tivZ 5BNk92eucv+Hr50PpDO6ylZIdqgJLueBWFgyRRHpYPFEYOdVqgz6HW+ZOcwrCbjK WwCV7zTm1SMuj4rSuvQTE5KujXm9L9iW9DrhxxLRWr91sFF1pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6+jJZ9+9OHzyxDV48Ygf/rtDEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGJlODQ1NGQtYWEzZi0z ODg3LWI5MjktZTZmNjkzNWEyOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq6EUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/7j7UF1HzC7A3SR0ksIkoCGktEkKVJ5U7th15wid92M+mn+A0iFZZB g+6xkS3FCtp9pciUp6Rt4xaZE66pKNReRXPZP7sHzVyA+5JIJEMU6mIpMrHPIVd/ l+4lFVRBVVN99RpTkSAjSoPeLTnOoDYeMyZ22oIf4Kx7ieUfHMdC2Q3DIyEnQnoL RVg0pWuVIMGiOF9CQBECaOya9vaN9x0bFyXJP1hRWZpMAKWYtucUxlcwg2gr5lhG nTJp82UzqJgXB3GH9l+w63Cdx1lmwttKCNd+NdKhVvsC6F3c2galIlIa5cvaFBfJ giTLz7tSvXGKDaa22A6mFwnqK4Zd6II= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:55 2025 by rpki-client