$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa File: 3bfa061b-e17c-3190-b642-67068e27e58e.roa (raw, json) Hash identifier: wYNuoINHv83U89jfuZsUWSUSqdqcshd8T51dZ3sb0rM= Subject key identifier: B7:3E:7C:4E:45:DB:AE:68:EA:A0:03:51:7E:5E:0C:89:8E:AD:51:2D Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584BB45D0EE82F87231438466E00 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 161.129.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:0e:e8:2f:87:23:14:38:46:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=d53b2a1f-0120-44de-85a8-05181bc5241c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:a2:9a:33:a7:d2:96:9c:2c:19:b7:d8:74: 4d:5b:33:48:92:25:ee:2d:f6:3f:a1:e8:fc:fc:66: ef:66:a3:98:9d:22:72:9a:10:8c:5a:c1:93:c4:a1: 63:2a:76:a2:7b:0b:90:1f:de:93:9a:d1:c6:e0:83: df:8b:80:29:cf:c6:33:90:21:28:29:84:08:8e:8d: 5f:40:8f:bc:9d:b4:f1:ee:e5:7b:93:46:2f:98:ec: 6c:f7:56:d3:a0:f2:47:44:08:4e:e0:9c:9d:23:d2: 4a:3b:fc:3f:26:ee:df:53:e0:bd:0d:52:1f:5a:d3: ec:36:a9:2a:8f:08:3c:85:d7:a1:09:75:9c:c1:2d: a2:c4:2b:d4:61:11:fa:cd:e4:46:9f:64:7a:0e:51: a1:b4:0a:78:8d:0f:e6:33:68:dd:28:64:f4:df:cd: 1e:51:39:33:8a:3d:a3:fd:fb:26:a7:21:23:5c:59: 04:1d:c7:ad:b0:aa:19:01:f8:45:b4:fe:75:bd:38: d8:a1:c3:2d:c5:89:04:d9:8b:94:a9:5d:8c:c9:16: ac:4b:23:b2:54:06:3b:2e:db:ee:52:0f:c8:bc:0f: cf:e3:61:35:54:a7:b1:7c:af:a3:ef:32:04:eb:1d: fe:aa:87:c2:f8:92:25:67:a5:c9:d2:0e:13:05:32: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3E:7C:4E:45:DB:AE:68:EA:A0:03:51:7E:5E:0C:89:8E:AD:51:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3bfa061b-e17c-3190-b642-67068e27e58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bb:80:c5:55:ee:6c:9e:c2:ed:a6:51:7c:a9:28:ad:6d:b3: 43:93:a3:fe:21:26:e2:1d:1e:cd:68:1f:b5:6c:04:4c:fd:37: aa:6c:46:51:52:04:31:90:b4:9e:38:62:45:17:92:57:dc:2d: d6:5b:39:1d:58:a5:8b:df:c7:35:27:fd:56:32:d4:11:3f:a7: c3:4b:14:83:6f:9c:e6:1b:84:d6:3a:62:3c:a9:64:9b:27:75: 86:5b:c0:cd:5f:f4:f4:a9:f1:65:29:81:e2:3c:82:76:1e:c6: a6:1b:da:f3:a6:85:ec:69:39:f2:01:fb:d9:a5:33:e3:11:b1: ea:1d:bb:46:d7:b5:3f:4e:65:bf:bf:5a:ad:cb:ee:25:a7:6f: 3f:54:36:46:0d:90:c7:09:2a:55:3a:5c:5f:23:8e:9d:04:d6: 33:2a:95:13:7a:0b:51:77:fc:fb:85:5f:08:4d:a3:6c:d6:b1: 09:f5:fc:a7:c9:f5:76:5f:c9:89:a8:71:11:eb:e3:d9:56:b4: 88:af:2f:56:10:7c:60:92:3d:20:d2:37:15:03:9c:ea:ce:c6: 62:aa:4d:3c:06:6c:a4:dc:81:96:1b:ac:69:a8:3e:b7:18:72: 8a:d0:32:c8:dd:c1:02:ae:7a:e6:67:e7:42:dd:70:bc:6c:dd: c7:d7:b3:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XQ7oL4cjFDhGbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZDUzYjJhMWYtMDEyMC00NGRlLTg1YTgtMDUxODFiYzUyNDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHeimjOn0pacLBm32HRNWzNIkiXuLfY/oej8 /GbvZqOYnSJymhCMWsGTxKFjKnaiewuQH96TmtHG4IPfi4Apz8YzkCEoKYQIjo1f QI+8nbTx7uV7k0YvmOxs91bToPJHRAhO4JydI9JKO/w/Ju7fU+C9DVIfWtPsNqkq jwg8hdehCXWcwS2ixCvUYRH6zeRGn2R6DlGhtAp4jQ/mM2jdKGT0380eUTkzij2j /fsmpyEjXFkEHcetsKoZAfhFtP51vTjYocMtxYkE2YuUqV2MyRasSyOyVAY7Ltvu Ug/IvA/P42E1VKexfK+j7zIE6x3+qofC+JIlZ6XJ0g4TBTJswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc+fE5F265o6qADUX5eDImOrVEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvM2JmYTA2MWItZTE3Yy0z MTkwLWI2NDItNjcwNjhlMjdlNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq7gMVV7myewu2mUXypKK1ts0OTo/4hJuIdHs1oH7VsBEz9N6psRlFS BDGQtJ44YkUXklfcLdZbOR1YpYvfxzUn/VYy1BE/p8NLFINvnOYbhNY6YjypZJsn dYZbwM1f9PSp8WUpgeI8gnYexqYb2vOmhexpOfIB+9mlM+MRseodu0bXtT9OZb+/ Wq3L7iWnbz9UNkYNkMcJKlU6XF8jjp0E1jMqlRN6C1F3/PuFXwhNo2zWsQn1/KfJ 9XZfyYmocRHr49lWtIivL1YQfGCSPSDSNxUDnOrOxmKqTTwGbKTcgZYbrGmoPrcY corQMsjdwQKueuZn50LdcLxs3cfXs0Y= -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:29 2025 by rpki-client