$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa File: a9966c45-3097-3836-a14e-cf2190dd857d.roa (raw, json) Hash identifier: 9vrntk9IKwfaLNYodzVxwyYzhLmxsQN75gwU7k4Nw4A= Subject key identifier: E2:C4:C5:86:87:75:EA:0D:EA:6C:FF:AE:DB:98:78:F0:7B:6B:09:34 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584BB45D13F96AB96BD383F7A740 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 161.129.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:13:f9:6a:b9:6b:d3:83:f7:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=af480de1-3fa5-46d0-abd1-6455ccfbda68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:a2:57:89:83:de:e6:d0:a6:22:1a:55:a1: e2:89:1e:32:dc:26:6b:77:4a:d8:ab:17:3c:2a:f3: 44:7e:35:5a:c9:1e:23:76:09:f7:96:23:29:a0:6a: 06:55:2a:4b:af:44:ad:54:2f:7a:47:ac:29:c7:5d: 4a:8a:cc:5a:75:2a:63:32:54:f4:1b:c6:f3:03:16: f5:a9:db:b0:f2:2e:c5:70:42:e7:11:f9:08:11:b1: d0:83:17:10:3f:39:92:ae:bb:fe:00:55:5b:79:70: 87:9a:e6:9f:2c:da:40:63:fd:ab:49:5b:09:88:df: 59:60:64:51:17:16:90:37:15:91:d3:0b:da:19:7e: e2:4d:1a:e8:e9:31:80:1f:c6:54:c8:57:85:36:ed: 77:10:f6:f1:65:62:09:4f:f6:37:ed:0b:5c:86:88: a1:2d:54:a7:4b:60:13:8b:c8:de:5e:5b:21:dc:b8: 5c:0d:a8:19:41:9e:69:2d:61:8d:7d:44:85:f7:10: 34:6f:18:f4:1c:a3:85:3d:6f:ae:65:c2:48:7b:a6: 77:e0:41:c1:3f:b2:aa:64:5c:99:b0:df:a0:b3:b9: 9d:2e:aa:f0:c9:dd:49:55:ef:e3:e0:dc:1a:e2:dd: 3d:38:0d:9d:2f:d7:d9:f8:0d:ab:5d:c4:04:c0:6e: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C4:C5:86:87:75:EA:0D:EA:6C:FF:AE:DB:98:78:F0:7B:6B:09:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/a9966c45-3097-3836-a14e-cf2190dd857d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:cb:86:3a:f0:85:2a:14:b9:b9:39:83:3e:ab:7f:c3:e1:c1: 05:9e:bc:ff:4f:d4:fc:12:72:85:d3:7a:a2:80:e6:53:fb:6d: 34:59:d5:d6:19:c4:29:3d:6c:90:9d:8a:3c:64:ba:06:5b:34: 55:69:6b:67:d7:f5:40:16:ba:7d:42:68:58:fc:b1:45:67:91: 39:5f:ec:ee:e5:7f:61:b2:d8:3a:e8:a2:9e:91:02:30:07:47: 96:47:57:b1:49:e7:a9:26:2b:36:6b:04:2d:58:39:54:53:5b: ac:39:f2:d9:5d:49:90:db:37:c5:49:31:26:06:1b:04:f7:43: bc:82:c4:ea:f8:b2:8f:1a:9c:3c:49:5a:91:f7:8d:19:2b:d9: 83:06:e0:d0:50:c6:e8:14:6b:eb:71:92:70:0e:5b:ad:15:8c: 80:40:60:dc:9f:a4:65:e0:49:82:b4:6d:7e:9c:d7:a6:7f:05: 6b:ee:ac:94:d9:d1:24:e5:48:b5:74:aa:7b:87:f6:03:cf:ad: 9f:3b:c8:9e:b7:2e:74:7b:0c:a9:ab:84:fb:b0:50:4c:de:08: c7:5c:cb:26:8e:ad:28:58:0d:e6:3b:1b:48:23:b5:e5:43:9b: 1e:7b:6e:41:a6:02:d9:3b:0c:84:56:50:d8:97:e8:c0:97:a9: 94:fc:2f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRP5arlr04P3p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YWY0ODBkZTEtM2ZhNS00NmQwLWFiZDEtNjQ1NWNjZmJkYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2WiV4mD3ubQpiIaVaHiiR4y3CZrd0rYqxc8 KvNEfjVayR4jdgn3liMpoGoGVSpLr0StVC96R6wpx11KisxadSpjMlT0G8bzAxb1 qduw8i7FcELnEfkIEbHQgxcQPzmSrrv+AFVbeXCHmuafLNpAY/2rSVsJiN9ZYGRR FxaQNxWR0wvaGX7iTRro6TGAH8ZUyFeFNu13EPbxZWIJT/Y37QtchoihLVSnS2AT i8jeXlsh3LhcDagZQZ5pLWGNfUSF9xA0bxj0HKOFPW+uZcJIe6Z34EHBP7KqZFyZ sN+gs7mdLqrwyd1JVe/j4Nwa4t09OA2dL9fZ+A2rXcQEwG7zuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLExYaHdeoN6mz/rtuYePB7awk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYTk5NjZjNDUtMzA5Ny0z ODM2LWExNGUtY2YyMTkwZGQ4NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzLhjrwhSoUubk5gz6rf8PhwQWevP9P1PwScoXTeqKA5lP7bTRZ1dYZ xCk9bJCdijxkugZbNFVpa2fX9UAWun1CaFj8sUVnkTlf7O7lf2Gy2Droop6RAjAH R5ZHV7FJ56kmKzZrBC1YOVRTW6w58tldSZDbN8VJMSYGGwT3Q7yCxOr4so8anDxJ WpH3jRkr2YMG4NBQxugUa+txknAOW60VjIBAYNyfpGXgSYK0bX6c16Z/BWvurJTZ 0STlSLV0qnuH9gPPrZ87yJ63LnR7DKmrhPuwUEzeCMdcyyaOrShYDeY7G0gjteVD mx57bkGmAtk7DIRWUNiX6MCXqZT8L90= -----END CERTIFICATE-----Generated at Tue Nov 4 22:52:19 2025 by rpki-client