$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa File: 0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa (raw, json) Hash identifier: iZBgEXUQo6o1DKsUBonUGVYwnPiSkVBu8tr+aLpKg18= Subject key identifier: 03:DB:FE:A0:7D:E3:0E:E3:C7:80:C5:F1:8C:1D:6A:F3:95:FA:D1:73 Certificate issuer: /CN=6d105620-7389-4837-b50f-6d9bfdfd3773 Certificate serial: 010D0C9F4328584ACCA6554A2E5D1A3A243EEA70 Authority key identifier: 2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 163.123.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:55:4a:2e:5d:1a:3a:24:3e:ea:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d105620-7389-4837-b50f-6d9bfdfd3773 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=bba21bb1-3144-4fbd-ac05-2f17e8223c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:f6:c4:fa:4a:5e:3b:d3:19:ed:0d:46:33: 7e:4a:c8:23:d6:cf:5e:3b:93:a1:e4:8c:8d:0d:7c: 67:d1:dc:ad:09:46:2e:1f:f1:e6:9e:dc:14:3c:75: a4:3f:9e:ac:7b:35:00:b7:13:38:df:ae:8c:17:fd: 77:a3:02:d9:c0:ce:91:88:55:37:cd:e8:c7:cd:5c: cd:18:9b:db:b9:4b:50:40:ab:6f:47:4a:c1:fc:16: 2b:6c:f5:5d:8f:04:f3:f1:9c:63:aa:64:ac:04:e5: 88:1a:e1:f8:81:7c:d5:17:e9:88:44:0c:97:4d:e3: dc:1d:ba:c3:53:c2:90:b0:67:71:da:0b:4d:12:8c: dc:e3:fd:19:5b:5f:61:c7:ff:8b:14:61:3e:6f:1a: 49:c2:5d:e4:54:db:cc:79:c8:00:3e:03:ab:a5:8f: 2b:f2:8c:19:26:19:f7:29:5b:f4:6f:1e:57:4d:2b: e9:c7:4d:79:a7:aa:b3:39:60:3c:a0:97:d4:68:6e: 0e:1c:56:46:33:c0:e9:34:84:fb:5f:9a:63:c5:a3: e9:a2:93:d7:59:35:48:88:14:19:c6:30:cb:c4:c2: 57:7e:98:c9:da:2a:67:3a:87:a8:a0:b2:51:bf:15: b5:b0:ea:61:67:56:b4:a5:65:e9:37:39:8f:46:3f: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DB:FE:A0:7D:E3:0E:E3:C7:80:C5:F1:8C:1D:6A:F3:95:FA:D1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl X509v3 Authority Key Identifier: keyid:2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer sbgp-ipAddrBlock: critical IPv4: 163.123.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:65:78:41:ee:53:07:e7:7c:9b:84:6c:49:6c:94:20:cb:9a: 12:d6:33:06:c2:39:43:41:50:54:91:e3:48:9a:46:7e:de:6e: 8f:21:13:72:09:df:db:e7:5d:f0:ae:8d:7b:cd:73:8b:27:1e: 8c:c3:83:cf:4b:25:02:3f:f8:ee:a7:bc:a9:8d:e9:a5:4f:e4: 13:d3:f4:cc:a6:9b:d5:06:62:f7:e4:e1:53:bb:1f:d9:49:35: 07:19:27:8e:04:ed:cf:f9:ba:b5:e4:4d:c4:62:83:c4:1b:68: 46:b8:30:e5:dd:2b:bd:10:1a:6d:fe:c0:ad:0e:31:af:e9:d5: 01:35:27:06:71:75:08:e0:4a:a1:2d:ba:0e:c2:45:ff:19:57: 48:1f:bf:1a:19:1c:9b:ad:fc:49:7c:c6:d0:91:14:73:63:87: 10:21:a2:60:78:f1:af:9e:05:c1:a2:59:b5:e0:98:3d:c3:7f: cd:c7:d5:9a:97:43:11:ad:60:b5:e2:18:fd:59:e5:6a:b6:50: 70:b8:8a:61:35:6f:17:31:b4:78:66:72:eb:dc:89:88:93:11: 67:70:21:9d:10:93:05:04:d8:2a:ce:95:7d:55:3c:64:d2:66: ed:af:e9:20:67:1b:df:f6:2b:a5:26:eb:be:1f:94:0a:e9:57: 65:fd:59:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMplVKLl0aOiQ+6nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQxMDU2MjAtNzM4OS00ODM3LWI1MGYtNmQ5YmZkZmQz NzczMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmJhMjFiYjEtMzE0NC00ZmJkLWFjMDUtMmYxN2U4MjIzYzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yz2xPpKXjvTGe0NRjN+Ssgj1s9eO5Oh5IyN DXxn0dytCUYuH/HmntwUPHWkP56sezUAtxM4366MF/13owLZwM6RiFU3zejHzVzN GJvbuUtQQKtvR0rB/BYrbPVdjwTz8ZxjqmSsBOWIGuH4gXzVF+mIRAyXTePcHbrD U8KQsGdx2gtNEozc4/0ZW19hx/+LFGE+bxpJwl3kVNvMecgAPgOrpY8r8owZJhn3 KVv0bx5XTSvpx015p6qzOWA8oJfUaG4OHFZGM8DpNIT7X5pjxaPpopPXWTVIiBQZ xjDLxMJXfpjJ2ipnOoeooLJRvxW1sOphZ1a0pWXpNzmPRj840wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPb/qB94w7jx4DF8YwdavOV+tFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZDEw NTYyMC03Mzg5LTQ4MzctYjUwZi02ZDliZmRmZDM3NzMvMGExZDY0ZmItYjNlZS0z ZDljLWIwNjMtOGQyZWJhODI1NWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmQxMDU2MjAtNzM4OS00ODM3LWI1 MGYtNmQ5YmZkZmQzNzczLzZkMTA1NjIwLTczODktNDgzNy1iNTBmLTZkOWJmZGZk Mzc3My5jcmwwHwYDVR0jBBgwFoAUKwDRhfW99IohDJ4dLtq37tnhqucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZDEwNTYyMC03Mzg5LTQ4MzctYjUwZi02ZDli ZmRmZDM3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3vZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNleEHuUwfnfJuEbElslCDLmhLWMwbCOUNBUFSR40iaRn7ebo8hE3IJ 39vnXfCujXvNc4snHozDg89LJQI/+O6nvKmN6aVP5BPT9Mymm9UGYvfk4VO7H9lJ NQcZJ44E7c/5urXkTcRig8QbaEa4MOXdK70QGm3+wK0OMa/p1QE1JwZxdQjgSqEt ug7CRf8ZV0gfvxoZHJut/El8xtCRFHNjhxAhomB48a+eBcGiWbXgmD3Df83H1ZqX QxGtYLXiGP1Z5Wq2UHC4imE1bxcxtHhmcuvciYiTEWdwIZ0QkwUE2CrOlX1VPGTS Zu2v6SBnG9/2K6Um674flArpV2X9Wb8= -----END CERTIFICATE-----Generated at Sat Aug 23 06:41:04 2025 by rpki-client