$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa File: a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa (raw, json) Hash identifier: UvKFMNlrkzS2mWo8TD2RBeK/BX/4xWAjeZkmCyudzh0= Subject key identifier: 46:B0:3E:42:10:77:7C:98:D2:2C:07:21:7B:42:FE:EE:73:7D:73:F3 Certificate issuer: /CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Certificate serial: 010D0C9F4328584B56C647D9EE374EE07D10E3C0 Authority key identifier: 7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa Signing time: Sun 28 Sep 2025 00:26:44 +0000 ROA not before: Sun 28 Sep 2025 00:26:44 +0000 ROA not after: Sat 27 Dec 2025 01:26:44 +0000 asID: 63201 IP address blocks: 161.38.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:c6:47:d9:ee:37:4e:e0:7d:10:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d0e02a-e4f0-4960-ad79-68f3b53a3861 Validity Not Before: Sep 28 00:26:44 2025 GMT Not After : Dec 27 01:26:44 2025 GMT Subject: CN=0c6a48f9-c456-4473-9ab3-3ba35889ae42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:ec:0b:bc:2f:8e:52:b3:59:2e:ca:28:ae: e2:f1:52:99:dc:0f:72:cf:81:21:84:56:61:3f:36: 61:e9:63:e9:c2:83:e7:92:ae:a7:32:23:9b:d7:36: 63:e6:0b:63:15:39:c1:bd:52:44:00:2e:93:60:9e: 03:5c:6f:47:76:65:61:e9:d6:c8:a0:b7:11:68:f2: 73:ee:42:69:8e:b8:bc:0c:3c:54:4a:35:88:4b:56: 88:5a:54:7c:ff:25:aa:d1:82:73:7c:be:c2:8a:ca: d1:37:13:4f:3c:1f:2b:fe:9d:ca:e7:03:b4:d4:5c: 12:b0:62:d2:ba:c7:73:36:5f:5b:8f:f1:e7:52:70: fc:87:9e:54:76:00:38:7c:59:12:5b:a5:04:4b:32: 7e:a3:b3:33:0f:e0:3e:a3:7f:22:7c:87:d5:a9:e8: de:a6:6f:6d:47:b8:0a:e7:94:92:c5:03:d4:f7:5a: 6c:38:06:85:47:46:c1:58:4d:50:20:16:65:ee:32: 63:f4:3d:f4:48:9e:58:f1:75:03:f4:d9:61:ef:69: d1:5a:fd:8f:b9:5b:20:1d:d5:11:2b:d5:5e:e1:be: ff:f2:21:85:9d:8c:62:60:bc:d1:cf:37:11:32:9c: fb:8f:31:9f:86:0d:7b:c1:52:1a:a2:4c:16:bb:45: 4a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B0:3E:42:10:77:7C:98:D2:2C:07:21:7B:42:FE:EE:73:7D:73:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/a7a9c87a-e2ff-3e3b-821f-c29dc8d8341a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861/22d0e02a-e4f0-4960-ad79-68f3b53a3861.crl X509v3 Authority Key Identifier: keyid:7B:AD:C0:FB:0B:DF:43:6A:C8:C8:A5:9E:5B:3D:44:12:94:A3:5C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/22d0e02a-e4f0-4960-ad79-68f3b53a3861.cer sbgp-ipAddrBlock: critical IPv4: 161.38.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c3:e0:7d:de:98:f6:67:f2:6c:17:4e:b3:08:3b:33:75:28: 0d:e3:2c:e9:72:da:ca:3f:2e:22:48:0f:3d:ad:41:95:bd:41: 2c:79:82:5b:6b:97:c6:f7:bf:53:57:ad:98:62:9c:c4:ba:fb: 6a:01:21:31:4c:69:16:e2:96:e0:77:e1:f3:9a:7b:2f:6e:e3: d1:7d:aa:3a:d3:6e:a1:a5:5e:32:b2:20:7b:1e:ef:3c:ef:4a: 5f:b2:17:d8:b0:39:f4:dc:21:d5:66:e8:b5:23:a0:e7:44:4c: 15:79:e4:22:39:d4:bc:cf:27:78:df:8e:42:7e:98:5d:30:7c: 98:d3:91:a9:d9:38:0a:07:34:fe:8c:38:22:23:ae:c7:e6:b2: 58:81:b1:b4:5a:d7:7e:a8:9d:e7:80:73:9b:20:2c:98:e8:f1: af:64:84:9f:f4:47:b1:a3:7c:c0:ba:52:55:1e:88:0e:8f:e2: 3e:63:62:43:98:cc:e1:75:b8:56:2a:2c:a1:d5:82:ff:82:15: 14:a7:4f:23:51:14:05:63:81:f0:f0:43:61:19:ba:ca:15:82: bf:8a:a5:37:c5:4e:9a:76:94:2b:55:ce:46:02:d9:67:0f:d5: 34:55:b1:20:07:e9:64:fe:b2:7a:16:d6:a8:8d:db:e2:f6:5b: a1:5c:e2:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtWxkfZ7jdO4H0Q48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkMGUwMmEtZTRmMC00OTYwLWFkNzktNjhmM2I1M2Ez ODYxMB4XDTI1MDkyODAwMjY0NFoXDTI1MTIyNzAxMjY0NFowLzEtMCsGA1UEAxMk MGM2YTQ4ZjktYzQ1Ni00NDczLTlhYjMtM2JhMzU4ODlhZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFrsC7wvjlKzWS7KKK7i8VKZ3A9yz4EhhFZh PzZh6WPpwoPnkq6nMiOb1zZj5gtjFTnBvVJEAC6TYJ4DXG9HdmVh6dbIoLcRaPJz 7kJpjri8DDxUSjWIS1aIWlR8/yWq0YJzfL7CisrRNxNPPB8r/p3K5wO01FwSsGLS usdzNl9bj/HnUnD8h55UdgA4fFkSW6UESzJ+o7MzD+A+o38ifIfVqejepm9tR7gK 55SSxQPU91psOAaFR0bBWE1QIBZl7jJj9D30SJ5Y8XUD9Nlh72nRWv2PuVsgHdUR K9Ve4b7/8iGFnYxiYLzRzzcRMpz7jzGfhg17wVIaokwWu0VKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEawPkIQd3yY0iwHIXtC/u5zfXPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQw ZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYzYjUzYTM4NjEvYTdhOWM4N2EtZTJmZi0z ZTNiLTgyMWYtYzI5ZGM4ZDgzNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjJkMGUwMmEtZTRmMC00OTYwLWFk NzktNjhmM2I1M2EzODYxLzIyZDBlMDJhLWU0ZjAtNDk2MC1hZDc5LTY4ZjNiNTNh Mzg2MS5jcmwwHwYDVR0jBBgwFoAUe63A+wvfQ2rIyKWeWz1EEpSjXD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMmQwZTAyYS1lNGYwLTQ5NjAtYWQ3OS02OGYz YjUzYTM4NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjD4H3emPZn8mwXTrMIOzN1KA3jLOly2so/LiJIDz2tQZW9QSx5gltr l8b3v1NXrZhinMS6+2oBITFMaRbiluB34fOaey9u49F9qjrTbqGlXjKyIHse7zzv Sl+yF9iwOfTcIdVm6LUjoOdETBV55CI51LzPJ3jfjkJ+mF0wfJjTkanZOAoHNP6M OCIjrsfmsliBsbRa136oneeAc5sgLJjo8a9khJ/0R7GjfMC6UlUeiA6P4j5jYkOY zOF1uFYqLKHVgv+CFRSnTyNRFAVjgfDwQ2EZusoVgr+KpTfFTpp2lCtVzkYC2WcP 1TRVsSAH6WT+snoW1qiN2+L2W6Fc4s0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:41 2025 by rpki-client