$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa File: d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa (raw, json) Hash identifier: moeQzT3ZRBvzy7AsLVSkQ3yL6Wah1KPlKJ/ernZypeU= Subject key identifier: 90:0B:67:2F:37:4E:E3:13:12:9E:88:A0:1C:46:B6:CA:6E:D9:55:EF Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928 Certificate serial: 010D0C9F4328584B4D11E10F968FAF2C03593D80 Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 396479 IP address blocks: 161.38.192.0/22 maxlen: 24 161.38.196.0/22 maxlen: 24 161.38.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e1:0f:96:8f:af:2c:03:59:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590b174f-a815-4e24-9512-3236e7727928 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=1f1cec2b-cc91-4377-ba95-03194a0b9e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:b0:36:56:d2:86:bb:aa:64:66:60:8c:14: a7:55:d9:90:74:8e:b5:18:44:68:70:2e:32:b6:13: 3a:a0:08:d2:21:5b:32:c8:c6:cd:1c:fc:7e:42:2d: 46:6e:58:3f:b2:4c:52:67:b8:8a:45:f3:bd:fa:6d: ea:e9:4b:e0:72:b5:a5:0d:ac:bb:5e:c8:0c:ff:20: df:40:4f:75:06:a3:ab:be:7f:ba:43:38:66:52:ee: 33:35:02:e5:52:a5:4d:5f:27:c6:43:a4:1f:18:ef: 82:69:81:5c:56:db:4d:fd:64:70:18:9d:87:46:71: 98:99:4e:ac:b6:11:b2:61:54:ed:84:d2:80:a1:e7: fb:ee:7b:48:49:cc:9a:31:0d:a6:b5:d3:9c:d7:2b: e6:a2:be:f7:e6:19:01:69:56:5f:4b:ca:04:9d:25: 33:c5:36:29:3b:d8:9d:f0:e0:f9:a0:62:63:83:c9: 4d:f6:4d:e0:9d:61:1b:bf:41:27:18:a0:ac:3a:1a: 20:cd:2a:23:fc:27:aa:16:19:30:4f:7e:0e:67:ab: fd:51:cd:5b:ae:22:75:f8:ba:20:48:67:03:ae:21: 2c:68:89:fb:ae:69:c4:b8:75:8b:47:c4:68:13:95: b8:c6:e0:11:a1:bf:9e:a1:ab:67:2f:18:44:5e:b0: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0B:67:2F:37:4E:E3:13:12:9E:88:A0:1C:46:B6:CA:6E:D9:55:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/d8c4b9b4-d64e-3af7-95a7-b641a2584f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl X509v3 Authority Key Identifier: keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer sbgp-ipAddrBlock: critical IPv4: 161.38.192.0-161.38.203.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4b:a4:f2:4e:a6:3a:80:d3:22:f2:f6:95:7e:f8:d2:22:9c: 55:8c:0b:83:82:17:a5:f3:99:df:d6:47:50:c5:91:84:e9:db: ca:86:8b:32:c9:4a:ab:5e:86:54:5c:85:6e:e0:cf:33:9a:5b: 23:df:d0:a5:ab:d7:9c:03:8f:55:7e:1b:a9:67:2b:3c:71:13: 30:4e:4a:fc:96:1e:3a:58:4f:71:2b:0f:73:38:2b:ed:90:ca: 49:a2:49:78:50:ab:47:53:dd:e2:5c:20:e1:e2:8a:e4:db:3d: 1f:c3:55:bd:79:9e:0b:e8:6c:b3:b4:e2:b6:33:d7:f8:5c:b8: 4a:31:a1:ed:8b:37:d7:82:0c:74:07:9b:98:01:8f:9e:bd:60: 12:a2:10:09:40:12:1f:14:26:e9:1e:7e:aa:7c:bf:e4:5d:7b: 43:d2:18:5f:66:46:87:a1:87:35:c1:c9:4b:9a:c9:90:1e:d7: b1:43:0e:74:b7:bb:fa:e0:46:a5:f5:a9:39:b5:c8:82:13:e0: 50:95:93:d4:c9:d4:fd:76:db:21:4e:be:cf:3c:59:44:c0:d3: b2:98:4a:ee:a9:18:87:c5:9a:ce:0f:a1:59:a0:4b:83:a8:89: c1:92:e5:7e:81:7d:cc:40:f3:7c:e3:16:35:8b:54:7c:74:ac: e1:17:f8:ec -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtNEeEPlo+vLANZPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3 OTI4MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MWYxY2VjMmItY2M5MS00Mzc3LWJhOTUtMDMxOTRhMGI5ZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4ewNlbShruqZGZgjBSnVdmQdI61GERocC4y thM6oAjSIVsyyMbNHPx+Qi1Gblg/skxSZ7iKRfO9+m3q6UvgcrWlDay7XsgM/yDf QE91BqOrvn+6QzhmUu4zNQLlUqVNXyfGQ6QfGO+CaYFcVttN/WRwGJ2HRnGYmU6s thGyYVTthNKAoef77ntIScyaMQ2mtdOc1yvmor735hkBaVZfS8oEnSUzxTYpO9id 8OD5oGJjg8lN9k3gnWEbv0EnGKCsOhogzSoj/CeqFhkwT34OZ6v9Uc1briJ1+Log SGcDriEsaIn7rmnEuHWLR8RoE5W4xuARob+eoatnLxhEXrA0MwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJALZy83TuMTEp6IoBxGtspu2VXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvZDhjNGI5YjQtZDY0ZS0z YWY3LTk1YTctYjY0MWEyNTg0ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1 MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2 ZTc3Mjc5MjguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAahJsAD BAKhJsgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAF0uk8k6mOoDTIvL2lX740iKcVYwLg4IXpfOZ39ZHUMWR hOnbyoaLMslKq16GVFyFbuDPM5pbI9/QpavXnAOPVX4bqWcrPHETME5K/JYeOlhP cSsPczgr7ZDKSaJJeFCrR1Pd4lwg4eKK5Ns9H8NVvXmeC+hss7TitjPX+Fy4SjGh 7Ys314IMdAebmAGPnr1gEqIQCUASHxQm6R5+qny/5F17Q9IYX2ZGh6GHNcHJS5rJ kB7XsUMOdLe7+uBGpfWpObXIghPgUJWT1MnU/XbbIU6+zzxZRMDTsphK7qkYh8Wa zg+hWaBLg6iJwZLlfoF9zEDzfOMWNYtUfHSs4Rf47A== -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:31 2025 by rpki-client