$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/e247fd63-326e-3aa2-a4e5-94338705d5c2.roa File: e247fd63-326e-3aa2-a4e5-94338705d5c2.roa (raw, json) Hash identifier: ooCoPYJtJPkdshHp+kAfvOPk7jA9KJP2GpnLYCawApQ= Subject key identifier: 68:56:B9:EB:EB:E7:17:77:9B:96:28:67:75:A9:53:96:A3:3E:4C:40 Certificate issuer: /CN=48a8571f-1cf3-4341-b350-3e442e19e11b Certificate serial: 010D0C9F4328584B44B1C37EA2A6D890709AD100 Authority key identifier: 4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/e247fd63-326e-3aa2-a4e5-94338705d5c2.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 398770 IP address blocks: 163.123.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c3:7e:a2:a6:d8:90:70:9a:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a8571f-1cf3-4341-b350-3e442e19e11b Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=16bd3717-6213-435e-88b9-cb48f6bce8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:f9:e0:54:c8:e0:d8:c0:24:a7:27:1f:63: 7c:fa:44:0d:4a:55:2d:c9:8e:3d:f9:71:2f:d1:ae: 04:ca:b3:fb:eb:9f:8a:b1:7d:36:07:1e:03:66:8e: b4:7b:5e:45:40:ba:4c:8f:33:bd:3e:a7:31:aa:f6: 22:78:c7:fd:31:6a:e2:17:09:91:f3:88:14:b0:0e: 9d:cf:32:e4:d9:06:7d:1c:4f:ff:df:63:f0:b4:6d: a9:c2:38:99:da:d9:cd:42:cc:bd:64:d2:65:5f:7e: 26:c0:14:ec:c3:ec:a4:0d:2b:e7:91:6a:bf:0a:63: ac:d2:27:09:32:09:6e:01:14:2b:7d:06:08:ca:07: f7:54:ef:49:6f:89:66:18:54:d0:11:ed:68:2c:a2: 8b:80:8f:64:82:7f:eb:89:69:2f:79:a3:6b:cf:fb: 62:1c:90:48:58:95:4f:c3:14:1d:db:3e:a3:9f:85: 4b:7b:a4:e1:93:5a:6c:c5:79:90:48:25:21:9b:4f: a7:2b:4e:01:4c:7b:2a:54:ff:f3:86:af:8a:e7:fa: 42:e6:7b:16:9a:1b:5f:a5:a5:8e:63:c4:65:71:2f: 13:dc:d1:96:2d:3e:12:fe:36:83:15:77:d4:7b:4e: 81:89:97:bb:46:9b:e3:03:9d:f0:d6:c9:55:a2:c1: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:56:B9:EB:EB:E7:17:77:9B:96:28:67:75:A9:53:96:A3:3E:4C:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/e247fd63-326e-3aa2-a4e5-94338705d5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b/48a8571f-1cf3-4341-b350-3e442e19e11b.crl X509v3 Authority Key Identifier: keyid:4B:8B:2B:27:16:37:9E:C3:01:ED:C0:0D:67:D0:98:39:8D:63:13:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/48a8571f-1cf3-4341-b350-3e442e19e11b.cer sbgp-ipAddrBlock: critical IPv4: 163.123.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:bf:77:f1:41:4c:27:7a:88:4d:3d:87:7f:2a:f9:da:63:34: ba:9f:7c:aa:23:57:77:9a:35:fc:15:a3:68:18:ab:b4:9b:fa: 80:7f:24:ab:fb:ff:30:07:e1:b7:e4:be:9b:57:1e:cc:78:c6: de:23:36:29:f6:bc:dc:8c:b0:07:34:c9:3f:a0:b2:61:b8:d0: c9:20:9b:87:12:dc:d9:11:be:ff:3e:6e:81:09:71:3e:e3:9f: a3:0e:51:74:58:c8:3b:4d:6e:15:e8:b7:26:af:b2:61:ea:ef: 8b:e2:77:be:0f:6a:fa:37:2a:82:0a:73:85:2b:a2:74:85:12: 49:f8:a8:d4:79:36:b1:cb:2e:0f:5b:58:98:ae:d7:22:7f:18: 1e:4e:5b:8f:e1:47:79:a3:53:c7:70:52:53:d5:21:61:80:9c: e0:60:17:24:0d:10:5d:f0:7b:0d:9b:ec:58:fe:2f:04:79:bd: 14:26:5a:4a:54:56:78:2a:46:2a:d2:43:f0:6f:fc:54:f2:94: cb:d5:d6:98:2c:26:77:d6:37:e6:0b:97:a5:a0:35:68:a4:25: cd:79:31:56:e2:76:eb:87:41:7f:5e:a4:6d:22:ae:e4:26:5e: 8c:f0:8f:52:df:bc:6f:bb:e4:94:23:63:a8:77:e2:b1:a9:e7: 11:18:6c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscN+oqbYkHCa0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhhODU3MWYtMWNmMy00MzQxLWIzNTAtM2U0NDJlMTll MTFiMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MTZiZDM3MTctNjIxMy00MzVlLTg4YjktY2I0OGY2YmNlOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwj54FTI4NjAJKcnH2N8+kQNSlUtyY49+XEv 0a4EyrP765+KsX02Bx4DZo60e15FQLpMjzO9PqcxqvYieMf9MWriFwmR84gUsA6d zzLk2QZ9HE//32PwtG2pwjiZ2tnNQsy9ZNJlX34mwBTsw+ykDSvnkWq/CmOs0icJ MgluARQrfQYIygf3VO9Jb4lmGFTQEe1oLKKLgI9kgn/riWkveaNrz/tiHJBIWJVP wxQd2z6jn4VLe6Thk1psxXmQSCUhm0+nK04BTHsqVP/zhq+K5/pC5nsWmhtfpaWO Y8RlcS8T3NGWLT4S/jaDFXfUe06BiZe7RpvjA53w1slVosFvVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhWuevr5xd3m5YoZ3WpU5ajPkxAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4 NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0MmUxOWUxMWIvZTI0N2ZkNjMtMzI2ZS0z YWEyLWE0ZTUtOTQzMzg3MDVkNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDhhODU3MWYtMWNmMy00MzQxLWIz NTAtM2U0NDJlMTllMTFiLzQ4YTg1NzFmLTFjZjMtNDM0MS1iMzUwLTNlNDQyZTE5 ZTExYi5jcmwwHwYDVR0jBBgwFoAUS4srJxY3nsMB7cANZ9CYOY1jE+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80OGE4NTcxZi0xY2YzLTQzNDEtYjM1MC0zZTQ0 MmUxOWUxMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3u/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW/d/FBTCd6iE09h38q+dpjNLqffKojV3eaNfwVo2gYq7Sb+oB/JKv7 /zAH4bfkvptXHsx4xt4jNin2vNyMsAc0yT+gsmG40Mkgm4cS3NkRvv8+boEJcT7j n6MOUXRYyDtNbhXotyavsmHq74vid74Pavo3KoIKc4UronSFEkn4qNR5NrHLLg9b WJiu1yJ/GB5OW4/hR3mjU8dwUlPVIWGAnOBgFyQNEF3wew2b7Fj+LwR5vRQmWkpU VngqRirSQ/Bv/FTylMvV1pgsJnfWN+YLl6WgNWikJc15MVbiduuHQX9epG0iruQm Xozwj1LfvG+75JQjY6h34rGp5xEYbEM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:38:00 2025 by rpki-client