$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/41a6e290-6891-392d-aa1d-179649fd0aaf.roa File: 41a6e290-6891-392d-aa1d-179649fd0aaf.roa (raw, json) Hash identifier: AYjzm0QB4U0DiZUpTTd7rR1gA5m3c044doktJlNIWbY= Subject key identifier: 28:C2:28:1F:14:34:45:33:96:63:10:DE:15:C0:72:BF:17:E6:5B:89 Certificate issuer: /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Certificate serial: 010D0C9F4328584B56C44E2EED46FA815958C180 Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/41a6e290-6891-392d-aa1d-179649fd0aaf.roa Signing time: Sun 28 Sep 2025 00:22:45 +0000 ROA not before: Sun 28 Sep 2025 00:22:45 +0000 ROA not after: Sat 27 Dec 2025 01:22:45 +0000 asID: 63201 IP address blocks: 161.199.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:c4:4e:2e:ed:46:fa:81:59:58:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Validity Not Before: Sep 28 00:22:45 2025 GMT Not After : Dec 27 01:22:45 2025 GMT Subject: CN=17089d97-82df-44d9-a1a2-7593e8f1eff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:35:7b:7c:5d:4e:1b:f6:73:db:0c:44:41: fb:cd:4d:30:a4:68:b7:c4:60:1f:6d:f0:5a:dd:61: 75:7a:75:88:16:ac:23:a2:68:b2:0b:57:ff:f1:01: 5b:6a:29:49:5f:b4:c8:c0:48:a9:6b:ed:61:c7:48: 9f:c2:0d:01:5c:83:4f:4d:83:17:9e:82:f4:bd:09: 16:45:0e:82:b4:56:e4:6e:66:28:bf:59:98:d5:e9: 79:c5:31:4c:fc:47:f4:fc:95:2e:38:d5:7a:bc:28: d1:47:aa:0e:09:da:f4:76:bd:ef:4a:41:13:53:a3: f4:b9:61:ad:4c:1e:44:9d:25:6f:93:81:83:f7:05: 17:f7:a7:a8:12:a6:61:a4:ca:8f:ca:1d:bb:a6:ca: 6c:fb:18:7d:59:73:e9:59:de:fb:d3:c2:f4:99:88: bf:de:2a:ba:b6:96:b5:7e:af:87:95:00:8d:11:84: 5f:72:b6:9e:05:2f:34:43:fc:5e:8c:43:cc:bf:20: 4b:a8:0e:e1:86:7e:40:1d:79:67:b7:5f:6c:ea:4d: 6e:d2:2e:d8:d0:34:34:97:53:97:19:e9:3a:69:e9: 1e:a8:bd:f5:9f:58:98:86:10:ed:1b:aa:85:95:78: 89:e6:11:b2:7d:84:53:14:38:bc:a4:aa:42:93:be: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C2:28:1F:14:34:45:33:96:63:10:DE:15:C0:72:BF:17:E6:5B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/41a6e290-6891-392d-aa1d-179649fd0aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl X509v3 Authority Key Identifier: keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer sbgp-ipAddrBlock: critical IPv4: 161.199.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9a:bb:ed:d4:99:0a:86:44:4d:dd:6f:f0:88:70:79:f3:38: ad:fa:7d:0c:81:42:65:37:4a:cb:fa:8f:45:cb:3b:9b:e9:8e: 37:0d:80:d7:5e:da:2a:e1:63:94:ca:24:33:54:54:84:13:74: a5:d1:75:5e:f6:64:bb:97:82:97:91:51:03:a6:d7:51:4f:f6: 1e:f9:0f:16:3d:fc:90:9b:78:22:5d:51:a2:52:95:43:9d:40: f3:63:c4:c9:87:dd:a1:3e:8c:2b:a9:e9:38:06:8c:45:46:f8: 2b:a4:ff:40:23:4c:31:4c:bb:7c:cd:56:c1:6b:f2:3c:f7:20: d9:c8:f5:ec:80:e0:1e:5f:76:91:84:fa:9d:09:fe:fa:42:3d: 58:78:0f:b2:82:a5:f0:f4:36:f6:42:05:15:26:c9:f2:29:16: c8:8a:ef:83:b1:90:77:0b:bc:4b:9b:6d:29:90:6e:50:c9:91: 50:a4:4a:ab:60:3d:71:96:cb:65:1b:d8:74:43:63:e2:59:61: e5:7c:a8:4a:d1:5d:7f:1e:eb:69:d1:19:a3:72:da:ef:14:cb: 4d:ae:36:1e:20:da:63:dd:1a:64:b5:55:71:28:14:fa:32:15: 32:03:2a:b9:04:0b:9d:8a:87:5d:cb:b3:3b:94:29:6b:0b:af: ee:70:d3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWxE4u7Ub6gVlYwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez ODYxMB4XDTI1MDkyODAwMjI0NVoXDTI1MTIyNzAxMjI0NVowLzEtMCsGA1UEAxMk MTcwODlkOTctODJkZi00NGQ5LWExYTItNzU5M2U4ZjFlZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW01e3xdThv2c9sMREH7zU0wpGi3xGAfbfBa 3WF1enWIFqwjomiyC1f/8QFbailJX7TIwEipa+1hx0ifwg0BXINPTYMXnoL0vQkW RQ6CtFbkbmYov1mY1el5xTFM/Ef0/JUuONV6vCjRR6oOCdr0dr3vSkETU6P0uWGt TB5EnSVvk4GD9wUX96eoEqZhpMqPyh27psps+xh9WXPpWd7708L0mYi/3iq6tpa1 fq+HlQCNEYRfcraeBS80Q/xejEPMvyBLqA7hhn5AHXlnt19s6k1u0i7Y0DQ0l1OX Gek6aekeqL31n1iYhhDtG6qFlXiJ5hGyfYRTFDi8pKpCk74g7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjCKB8UNEUzlmMQ3hXAcr8X5luJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvNDFhNmUyOTAtNjg5MS0z OTJkLWFhMWQtMTc5NjQ5ZmQwYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocf2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOau+3UmQqGRE3db/CIcHnzOK36fQyBQmU3Ssv6j0XLO5vpjjcNgNde 2irhY5TKJDNUVIQTdKXRdV72ZLuXgpeRUQOm11FP9h75DxY9/JCbeCJdUaJSlUOd QPNjxMmH3aE+jCup6TgGjEVG+Cuk/0AjTDFMu3zNVsFr8jz3INnI9eyA4B5fdpGE +p0J/vpCPVh4D7KCpfD0NvZCBRUmyfIpFsiK74OxkHcLvEubbSmQblDJkVCkSqtg PXGWy2Ub2HRDY+JZYeV8qErRXX8e62nRGaNy2u8Uy02uNh4g2mPdGmS1VXEoFPoy FTIDKrkEC52Kh13LszuUKWsLr+5w00A= -----END CERTIFICATE-----Generated at Mon Oct 20 10:10:13 2025 by rpki-client