$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa File: f63a9c1a-e317-37cb-b863-42b390358653.roa (raw, json) Hash identifier: di3raXatogGMepDTUmFo3A6wHaKi2t+4HtxSmkjhmWo= Subject key identifier: E2:FF:59:69:13:6F:6B:D4:14:E3:87:5E:F7:0B:4D:05:E0:B7:42:A3 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584BB45D13E784F146AAA111FF94 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 161.129.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:13:e7:84:f1:46:aa:a1:11:ff:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=46190067-eccf-456e-9acb-bcad56f35af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:46:5f:c4:79:f8:a8:49:1b:24:0a:f6:d3:73: 09:3c:bf:24:fa:3e:96:e2:e5:c6:de:02:6b:ef:f4: fd:7a:56:4b:61:a5:fe:b1:68:74:22:c2:db:8c:c5: cf:ea:0a:44:83:11:13:0d:0a:37:3c:a3:0d:ba:bf: e0:af:30:6d:d7:5d:36:9e:a1:59:65:a6:e4:17:68: 23:0f:de:50:3e:84:fd:79:cf:86:af:6e:68:94:59: 6e:88:ab:40:54:1e:83:d6:80:47:ad:41:ef:72:55: 19:58:55:7a:f9:ed:3a:f9:28:6d:66:ca:1c:68:db: 36:81:7c:39:52:21:7a:e9:6b:e6:fc:3a:b4:79:73: f0:d6:31:c1:38:32:04:22:7b:d2:07:d9:31:19:81: bf:43:99:07:f0:8b:df:2f:9a:0e:22:09:41:4c:32: 16:b2:0d:7c:ac:e2:f3:8f:2a:0f:3a:fb:d8:54:46: 1b:9d:96:3d:e0:c2:d7:e4:87:27:2d:ed:a1:72:14: 22:75:06:95:51:bb:c4:45:e8:8f:07:b4:91:66:b9: 74:ec:4d:30:e7:99:d7:45:be:50:af:9a:aa:20:b1: 7f:d4:22:56:82:da:f4:80:e5:79:01:87:96:4e:64: cc:d7:5b:ba:e8:35:dd:96:9d:23:a5:4e:e6:7c:90: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FF:59:69:13:6F:6B:D4:14:E3:87:5E:F7:0B:4D:05:E0:B7:42:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e7:4f:5b:95:ce:3d:87:0c:55:36:c2:48:e1:4d:f0:67:53:cf: 6d:c8:26:05:38:ba:00:96:64:de:ea:6f:ff:b1:0f:c7:ad:d0: 4c:09:6a:4f:12:d2:89:df:c2:5a:c5:69:34:a4:a3:11:75:d7: 87:b7:9f:ea:e0:94:31:30:12:7a:2c:d4:54:8a:27:87:36:c0: 67:f6:41:e5:61:45:74:98:2c:1c:6f:58:ef:8f:35:e6:31:05: 62:38:39:b1:e2:57:18:e0:4f:08:14:be:cd:2a:90:1f:bd:3d: c4:24:2d:8f:ff:bd:ff:ac:cf:d4:9f:fb:ca:f2:0a:1f:1d:21: 7f:5e:10:93:ec:74:d7:d1:a5:66:13:a5:d6:93:50:67:ce:c4: e2:f9:2b:92:f6:06:39:22:9f:04:a2:af:1e:59:34:82:db:b8: c8:99:4e:a8:a5:2a:cb:4b:cb:11:e8:12:64:39:48:06:00:23: 92:33:a3:37:b6:91:59:72:40:f9:50:bb:ff:36:ef:0d:7d:71: 3c:2a:09:fd:dc:07:45:c8:1b:1a:5f:74:8f:f2:37:f3:5c:81: ae:d6:4a:46:a0:5a:81:35:fe:06:0a:72:3f:fb:5d:87:de:1e: 9f:e0:53:36:0e:48:cc:96:21:9e:23:f3:56:f5:64:82:05:9b: d5:7e:da:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRPnhPFGqqER/5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NDYxOTAwNjctZWNjZi00NTZlLTlhY2ItYmNhZDU2ZjM1YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUZfxHn4qEkbJAr203MJPL8k+j6W4uXG3gJr 7/T9elZLYaX+sWh0IsLbjMXP6gpEgxETDQo3PKMNur/grzBt1102nqFZZabkF2gj D95QPoT9ec+Gr25olFluiKtAVB6D1oBHrUHvclUZWFV6+e06+ShtZsocaNs2gXw5 UiF66Wvm/Dq0eXPw1jHBODIEInvSB9kxGYG/Q5kH8IvfL5oOIglBTDIWsg18rOLz jyoPOvvYVEYbnZY94MLX5IcnLe2hchQidQaVUbvEReiPB7SRZrl07E0w55nXRb5Q r5qqILF/1CJWgtr0gOV5AYeWTmTM11u66DXdlp0jpU7mfJDCKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL/WWkTb2vUFOOHXvcLTQXgt0KjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZjYzYTljMWEtZTMxNy0z N2NiLWI4NjMtNDJiMzkwMzU4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOdPW5XOPYcMVTbCSOFN8GdTz23IJgU4ugCWZN7qb/+xD8et0EwJak8S 0onfwlrFaTSkoxF114e3n+rglDEwEnos1FSKJ4c2wGf2QeVhRXSYLBxvWO+PNeYx BWI4ObHiVxjgTwgUvs0qkB+9PcQkLY//vf+sz9Sf+8ryCh8dIX9eEJPsdNfRpWYT pdaTUGfOxOL5K5L2BjkinwSirx5ZNILbuMiZTqilKstLyxHoEmQ5SAYAI5Izoze2 kVlyQPlQu/827w19cTwqCf3cB0XIGxpfdI/yN/Ncga7WSkagWoE1/gYKcj/7XYfe Hp/gUzYOSMyWIZ4j81b1ZIIFm9V+2uw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:21:22 2025 by rpki-client