$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b45e3725-71d8-35ee-a364-e22d53f3c406.roa File: b45e3725-71d8-35ee-a364-e22d53f3c406.roa (raw, json) Hash identifier: 8QUPj28fkGB1zeAMmGvKeo/paU7zaDve1PEEBncV1bE= Subject key identifier: 9F:0E:E6:CC:B2:09:90:04:D6:B4:56:8E:FD:6F:20:1C:FE:DB:4E:86 Certificate issuer: /CN=112c6636-0b34-4e47-95cc-29a6b53a3388 Certificate serial: 010D0C9F4328584BA667A7E5E1C747A3BC1BC400 Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b45e3725-71d8-35ee-a364-e22d53f3c406.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 8075 IP address blocks: 161.195.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a7:e5:e1:c7:47:a3:bc:1b:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=a676c884-1321-42c7-bea8-aabb8dfe7cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f5:b2:7e:19:5a:ed:17:82:96:91:2a:2a:c9: 03:4e:20:24:37:6b:5d:90:b8:20:12:62:09:90:ee: bc:5b:ea:01:21:5a:7e:6c:26:ca:71:d5:44:9e:31: c1:03:d6:6a:9e:bf:95:8a:f3:e3:9d:95:01:80:ee: c3:86:b7:19:5a:50:df:86:36:46:04:49:93:7d:17: 3e:d6:97:f4:d0:ce:d2:0a:8b:e6:31:64:01:06:af: b0:2c:f5:1d:53:0a:2d:83:8b:bf:f6:36:2c:0f:af: 60:a1:cc:2e:48:d3:56:57:58:37:28:c3:ec:54:69: 4e:ad:4e:f8:af:89:2f:f6:45:92:eb:e3:6d:b3:b1: 23:70:fe:a5:d4:29:17:4c:25:59:bf:63:c8:fb:16: b3:db:fc:a0:89:5f:87:d9:74:03:1d:68:c2:99:84: 4e:80:13:7b:5f:62:09:05:27:70:72:c0:b3:ca:7b: 3d:6b:22:64:6f:80:c5:9b:f6:0e:a8:3a:e9:4b:a1: f5:82:ca:18:a8:b9:30:3c:99:d7:e9:22:5f:d8:fe: 78:85:ba:ae:24:ad:7f:b5:29:70:87:56:3f:d9:64: 16:39:61:59:23:40:73:68:69:b8:cb:0f:18:85:b9: c1:74:17:d7:06:cb:3b:67:45:83:0f:23:32:82:30: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0E:E6:CC:B2:09:90:04:D6:B4:56:8E:FD:6F:20:1C:FE:DB:4E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/b45e3725-71d8-35ee-a364-e22d53f3c406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl X509v3 Authority Key Identifier: keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer sbgp-ipAddrBlock: critical IPv4: 161.195.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d0:a7:83:62:79:78:f8:c7:7b:36:3d:99:74:4a:0d:64:a7: a7:bf:b8:81:c8:ad:8f:21:e5:c9:63:d7:f7:f0:c7:29:a3:07: 9d:a0:b0:95:c7:80:12:30:c6:be:6d:04:76:20:b1:ff:19:b7: 0f:7c:ce:49:ae:16:e7:b0:11:48:7f:f9:09:ef:db:14:cf:f6: 71:ad:52:d7:a0:04:95:5c:dd:b9:51:93:7a:7b:4c:da:a4:92: 58:18:15:eb:20:e2:b0:e3:f8:ed:ae:a5:e1:8a:fb:70:24:ac: 42:9b:a5:3b:c1:85:a9:45:5b:73:6f:81:a3:25:1a:c4:a6:23: cd:6b:c0:95:cb:07:01:10:82:7b:8a:53:4b:f5:9d:de:49:12: 69:aa:24:97:00:19:bf:ac:c0:2a:30:32:3b:ea:02:e2:c3:57: 82:0d:f6:07:1a:4d:65:27:64:0e:25:89:8b:a5:76:fb:ee:3c: 0e:43:02:fa:13:c1:55:ea:0a:40:9b:94:13:18:a2:f1:a0:f9: d9:c2:a5:b5:70:8a:97:6e:d3:bf:61:cc:01:ba:4e:f1:48:c6: 54:ba:c5:27:6b:ff:98:67:7f:a5:41:dc:26:82:bb:de:6e:9a: c4:69:20:34:dd:b1:0d:f6:23:fd:4c:c4:af:e4:d8:a7:88:f3: 7a:88:63:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6fl4cdHo7wbxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTEyYzY2MzYtMGIzNC00ZTQ3LTk1Y2MtMjlhNmI1M2Ez Mzg4MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YTY3NmM4ODQtMTMyMS00MmM3LWJlYTgtYWFiYjhkZmU3Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfWyfhla7ReClpEqKskDTiAkN2tdkLggEmIJ kO68W+oBIVp+bCbKcdVEnjHBA9Zqnr+VivPjnZUBgO7DhrcZWlDfhjZGBEmTfRc+ 1pf00M7SCovmMWQBBq+wLPUdUwotg4u/9jYsD69gocwuSNNWV1g3KMPsVGlOrU74 r4kv9kWS6+Nts7EjcP6l1CkXTCVZv2PI+xaz2/ygiV+H2XQDHWjCmYROgBN7X2IJ BSdwcsCzyns9ayJkb4DFm/YOqDrpS6H1gsoYqLkwPJnX6SJf2P54hbquJK1/tSlw h1Y/2WQWOWFZI0BzaGm4yw8YhbnBdBfXBss7Z0WDDyMygjDotQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8O5syyCZAE1rRWjv1vIBz+206GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJj NjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2YjUzYTMzODgvYjQ1ZTM3MjUtNzFkOC0z NWVlLWEzNjQtZTIyZDUzZjNjNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTEyYzY2MzYtMGIzNC00ZTQ3LTk1 Y2MtMjlhNmI1M2EzMzg4LzExMmM2NjM2LTBiMzQtNGU0Ny05NWNjLTI5YTZiNTNh MzM4OC5jcmwwHwYDVR0jBBgwFoAU5SZko3dDzL1J1R4WQ4IVj9eHuuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJjNjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2 YjUzYTMzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7Qp4NieXj4x3s2PZl0Sg1kp6e/uIHIrY8h5clj1/fwxymjB52gsJXH gBIwxr5tBHYgsf8Ztw98zkmuFuewEUh/+Qnv2xTP9nGtUtegBJVc3blRk3p7TNqk klgYFesg4rDj+O2upeGK+3AkrEKbpTvBhalFW3NvgaMlGsSmI81rwJXLBwEQgnuK U0v1nd5JEmmqJJcAGb+swCowMjvqAuLDV4IN9gcaTWUnZA4liYuldvvuPA5DAvoT wVXqCkCblBMYovGg+dnCpbVwipdu079hzAG6TvFIxlS6xSdr/5hnf6VB3CaCu95u msRpIDTdsQ32I/1MxK/k2KeI83qIYxo= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:54 2025 by rpki-client