$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa File: fd05dd98-3073-3868-a202-0a6c4f041811.roa (raw, json) Hash identifier: KOhM7qvd+fzNiSHNVVVwAotDyQxfHFL89CTdM//kmRM= Subject key identifier: B0:BE:EA:30:3A:D3:F0:8A:E3:79:0A:72:98:1F:F3:12:A9:02:40:78 Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Certificate serial: 010D0C9F4328584B84E7867AE50E70201C759A50 Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 203 IP address blocks: 161.151.162.0/23 maxlen: 24 161.151.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:86:7a:e5:0e:70:20:1c:75:9a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=3c8db043-5502-4a0a-a9c5-a3584a34fb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:8c:3b:0f:38:d0:be:33:a5:8b:96:c4:5a: fe:34:94:58:57:86:20:7b:c7:15:f0:7e:3d:3c:40: cc:80:22:49:68:0a:50:5c:37:7e:57:9a:7b:a4:01: dc:bd:8e:a9:eb:02:be:70:d3:03:10:cd:42:db:0e: 18:03:ae:6a:61:f1:51:c0:d0:97:10:e9:5d:24:61: 30:54:4d:22:b8:a7:a3:01:14:e2:4c:0b:66:5c:48: 79:f9:33:55:e7:a7:d7:5b:f4:a8:2d:84:6c:11:a7: 86:81:b6:e3:05:35:cd:56:cc:eb:64:47:0a:8b:8d: bd:ea:48:e3:a7:7c:24:f5:8d:56:56:1e:05:c2:d7: 41:36:76:04:78:72:56:37:55:60:5e:c2:26:5b:89: f6:87:09:12:26:84:8b:e9:06:b5:e9:21:19:8a:6d: 49:cc:7d:d8:ef:bc:10:50:ab:79:53:fb:dc:12:8e: db:b0:f3:6f:05:da:d4:73:14:ba:06:fd:c5:38:b8: fd:44:d0:0a:0e:20:b3:8b:09:5d:b9:ea:45:3d:86: 50:21:07:94:ea:b0:65:3b:7a:11:75:f6:b8:06:01: d6:f8:57:26:a9:fc:99:50:61:f3:73:ae:ab:82:c9: e4:bd:46:61:ac:f3:c4:c6:ef:a1:c2:ab:e2:33:d9: 2f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BE:EA:30:3A:D3:F0:8A:E3:79:0A:72:98:1F:F3:12:A9:02:40:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl X509v3 Authority Key Identifier: keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer sbgp-ipAddrBlock: critical IPv4: 161.151.162.0/23 161.151.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:08:9c:9b:be:b4:ac:f6:40:ce:2c:cc:45:49:a8:65:a1:a9: eb:50:19:ec:48:02:2e:15:6e:5b:2d:07:35:6a:a3:54:95:bb: 5a:a0:d2:d7:79:d6:ef:a8:07:8c:6c:e4:4c:93:10:21:52:86: d3:97:73:fe:dc:27:c6:5d:0c:fb:e6:a8:68:11:74:e3:f8:89: be:25:0c:ee:b8:99:14:a4:8f:74:d6:3a:ba:89:56:11:74:d0: c8:0b:46:f5:37:9b:72:9f:29:a6:ba:d2:88:2b:b1:5b:41:6d: 6c:a1:f2:ba:15:36:b5:34:bc:42:1d:d3:3d:d1:35:c7:57:1e: e7:d3:ef:86:d7:6c:b4:fb:3f:1c:82:f0:23:80:aa:e8:bd:71: 18:81:3f:f1:e0:54:cb:7d:cf:63:b0:69:56:71:c6:cf:45:02: bc:7a:ee:d2:f3:bd:f4:e6:0e:56:bf:57:d9:1e:df:89:43:f6: 24:d5:28:5c:6f:0c:86:0b:55:70:8d:1b:57:41:71:8d:5f:b8: 41:5e:23:15:aa:01:89:24:0a:dc:69:9c:10:30:6a:82:68:ff: d6:4d:8d:0f:39:fa:ee:86:c4:b6:70:55:0b:b5:3c:d3:f3:bc: e6:66:55:7f:be:8f:9b:c0:29:a7:76:58:6e:05:1d:ce:92:fb: c8:d7:23:a1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuE54Z65Q5wIBx1mlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMyYjY0NzAtOTRlNC00Zjc3LTlkNDgtMTNkNWFhYTJi M2MyMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk M2M4ZGIwNDMtNTUwMi00YTBhLWE5YzUtYTM1ODRhMzRmYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqGMOw840L4zpYuWxFr+NJRYV4Yge8cV8H49 PEDMgCJJaApQXDd+V5p7pAHcvY6p6wK+cNMDEM1C2w4YA65qYfFRwNCXEOldJGEw VE0iuKejARTiTAtmXEh5+TNV56fXW/SoLYRsEaeGgbbjBTXNVszrZEcKi4296kjj p3wk9Y1WVh4FwtdBNnYEeHJWN1VgXsImW4n2hwkSJoSL6Qa16SEZim1JzH3Y77wQ UKt5U/vcEo7bsPNvBdrUcxS6Bv3FOLj9RNAKDiCziwlduepFPYZQIQeU6rBlO3oR dfa4BgHW+FcmqfyZUGHzc66rgsnkvUZhrPPExu+hwqviM9kvvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLC+6jA60/CK43kKcpgf8xKpAkB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJi NjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1YWFhMmIzYzIvZmQwNWRkOTgtMzA3My0z ODY4LWEyMDItMGE2YzRmMDQxODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmMyYjY0NzAtOTRlNC00Zjc3LTlk NDgtMTNkNWFhYTJiM2MyLzZjMmI2NDcwLTk0ZTQtNGY3Ny05ZDQ4LTEzZDVhYWEy YjNjMi5jcmwwHwYDVR0jBBgwFoAUcB+1v9C/q2uyxPfYNx7so1nBbvcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YzJiNjQ3MC05NGU0LTRmNzctOWQ0OC0xM2Q1 YWFhMmIzYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoZeiAwQB oZf8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEgInJu+tKz2QM4szEVJqGWhqetQGexIAi4VblstBzVqo1SV u1qg0td51u+oB4xs5EyTECFShtOXc/7cJ8ZdDPvmqGgRdOP4ib4lDO64mRSkj3TW OrqJVhF00MgLRvU3m3KfKaa60ogrsVtBbWyh8roVNrU0vEId0z3RNcdXHufT74bX bLT7PxyC8COAqui9cRiBP/HgVMt9z2OwaVZxxs9FArx67tLzvfTmDla/V9ke34lD 9iTVKFxvDIYLVXCNG1dBcY1fuEFeIxWqAYkkCtxpnBAwaoJo/9ZNjQ85+u6GxLZw VQu1PNPzvOZmVX++j5vAKad2WG4FHc6S+8jXI6E= -----END CERTIFICATE-----Generated at Sun Oct 19 22:25:44 2025 by rpki-client