$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa File: 322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa (raw, json) Hash identifier: zPMOCkkAXDSWe8i4MbKH8Ei6OtfQyfiEM4hSotGSozc= Subject key identifier: DB:CB:58:20:F6:98:D2:00:AB:F8:BC:14:DC:2F:81:38:8C:0C:4A:E9 Certificate issuer: /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Certificate serial: 010D0C9F4328584B76F2287B4197C73AF2EC4880 Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 161.199.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:28:7b:41:97:c7:3a:f2:ec:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=1e8541b3-a8e2-4b9e-9d2d-9031a97686a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:52:95:fe:b6:e9:1e:90:60:ad:ff:ad:54: 00:d9:1a:c3:a1:50:0e:ba:6c:e2:05:0d:25:79:36: ee:e2:d8:39:2b:45:4e:d6:41:67:7a:39:ec:ec:0a: 65:8b:19:43:e4:61:44:8e:e8:07:11:55:ae:00:58: 7f:3e:0f:93:28:d8:5a:41:17:1f:e7:33:ee:fb:0e: 08:e1:e7:3c:06:26:f9:f1:29:24:67:c1:92:f0:a6: be:03:b7:58:63:50:2a:7f:5b:bf:80:af:7e:4f:c8: cf:33:1c:87:95:5e:d5:24:53:9d:54:49:07:76:ca: c7:bf:8c:da:34:55:e3:a8:62:c5:ef:14:44:bf:14: d1:06:6e:43:97:03:ab:09:36:65:0d:40:50:c6:e0: 0e:2a:d1:9b:58:c7:fd:8b:b9:77:51:ad:48:a5:59: 38:1c:33:b6:1a:5d:0f:ac:12:04:fd:04:80:e8:ac: 26:04:92:d7:e3:ee:99:5f:07:5d:ab:51:45:77:21: 64:9d:99:85:cf:34:e3:b0:be:50:d9:40:16:3a:2e: d2:82:11:8d:21:79:e7:8c:f6:12:79:d1:0a:e9:ca: 98:c0:88:f4:ce:c3:71:7a:3b:91:06:8e:7c:3b:c4: 71:64:a0:1a:28:9b:56:0a:01:62:3d:26:b2:fc:a7: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CB:58:20:F6:98:D2:00:AB:F8:BC:14:DC:2F:81:38:8C:0C:4A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/322d6d96-e7fa-343b-b3ba-f21e69037b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl X509v3 Authority Key Identifier: keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer sbgp-ipAddrBlock: critical IPv4: 161.199.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d3:d5:0f:98:23:e4:2e:c6:5e:4e:50:94:c6:a0:81:8b:b7: 29:b4:64:1c:f2:07:e1:c6:64:11:03:1f:86:5f:37:25:49:d6: 9f:a6:37:3c:dd:8c:de:5e:ea:a6:52:2a:a3:cd:ac:92:60:5a: 18:8e:bb:42:52:85:5a:fc:47:67:ed:8f:a5:03:5e:a0:bd:6c: 49:28:04:81:bd:bb:06:eb:7e:d9:db:c3:bc:0a:f1:b3:b5:9b: 71:8a:29:4a:1d:d4:d4:2b:aa:12:17:9c:11:2a:4d:cc:31:ff: e5:10:06:a2:e9:8f:83:cc:08:20:b5:1d:95:32:be:fd:8b:de: 55:a4:58:c2:b7:37:22:c9:98:56:2c:e3:09:0b:6f:f1:13:80: a2:33:22:c0:d2:0e:81:df:dc:25:17:bc:f4:81:2f:53:ef:a2: cc:1a:d0:bc:df:25:c8:2d:1a:10:33:09:67:9c:7e:69:ba:35: f4:f5:ad:53:02:8a:fb:d4:e3:43:ea:70:4c:ed:b1:67:6e:4f: d0:fd:94:ff:d3:a6:5f:45:ec:16:03:21:79:75:c3:96:23:71: ad:f4:8b:99:fe:c2:93:ac:10:bd:b2:88:4e:9c:90:f6:cd:e6: 9b:a7:0c:12:ab:ed:88:e0:ad:4c:8e:b8:6c:61:1f:43:4d:d3: b9:b7:f2:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ih7QZfHOvLsSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ1YTFmYzctYzg1NC00YmYxLTgyZGQtODg1YmZjY2Qy MDAyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MWU4NTQxYjMtYThlMi00YjllLTlkMmQtOTAzMWE5NzY4NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MFSlf626R6QYK3/rVQA2RrDoVAOumziBQ0l eTbu4tg5K0VO1kFnejns7AplixlD5GFEjugHEVWuAFh/Pg+TKNhaQRcf5zPu+w4I 4ec8Bib58SkkZ8GS8Ka+A7dYY1Aqf1u/gK9+T8jPMxyHlV7VJFOdVEkHdsrHv4za NFXjqGLF7xREvxTRBm5DlwOrCTZlDUBQxuAOKtGbWMf9i7l3Ua1IpVk4HDO2Gl0P rBIE/QSA6KwmBJLX4+6ZXwddq1FFdyFknZmFzzTjsL5Q2UAWOi7SghGNIXnnjPYS edEK6cqYwIj0zsNxejuRBo58O8RxZKAaKJtWCgFiPSay/KcNTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvLWCD2mNIAq/i8FNwvgTiMDErpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVh MWZjNy1jODU0LTRiZjEtODJkZC04ODViZmNjZDIwMDIvMzIyZDZkOTYtZTdmYS0z NDNiLWIzYmEtZjIxZTY5MDM3YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQ1YTFmYzctYzg1NC00YmYxLTgy ZGQtODg1YmZjY2QyMDAyL2M0NWExZmM3LWM4NTQtNGJmMS04MmRkLTg4NWJmY2Nk MjAwMi5jcmwwHwYDVR0jBBgwFoAU0wvQYxi8h42RKjqIclQ23U+MRZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDVhMWZjNy1jODU0LTRiZjEtODJkZC04ODVi ZmNjZDIwMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocdDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTT1Q+YI+Quxl5OUJTGoIGLtym0ZBzyB+HGZBEDH4ZfNyVJ1p+mNzzd jN5e6qZSKqPNrJJgWhiOu0JShVr8R2ftj6UDXqC9bEkoBIG9uwbrftnbw7wK8bO1 m3GKKUod1NQrqhIXnBEqTcwx/+UQBqLpj4PMCCC1HZUyvv2L3lWkWMK3NyLJmFYs 4wkLb/ETgKIzIsDSDoHf3CUXvPSBL1Pvoswa0LzfJcgtGhAzCWecfmm6NfT1rVMC ivvU40PqcEztsWduT9D9lP/Tpl9F7BYDIXl1w5Yjca30i5n+wpOsEL2yiE6ckPbN 5punDBKr7YjgrUyOuGxhH0NN07m38uI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:09:37 2025 by rpki-client