$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/1f9fa3f0-0648-3d9c-b4c9-b4b712084cae.roa File: 1f9fa3f0-0648-3d9c-b4c9-b4b712084cae.roa (raw, json) Hash identifier: yOnx6wi2KJFspfcJtL6mbE6IAxctWZxj4yf1NpRbp0U= Subject key identifier: 6B:CB:02:20:DC:3A:7B:B9:90:D4:0C:1C:C4:46:44:6F:5C:68:C4:50 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584BB5C26DA5E87A948EC0A1D380 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/1f9fa3f0-0648-3d9c-b4c9-b4b712084cae.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 8075 IP address blocks: 161.221.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6d:a5:e8:7a:94:8e:c0:a1:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=56df87e1-6310-4307-a35f-eb8c163059ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b8:13:92:16:15:35:55:7b:c7:8a:78:16:93: c2:18:e5:7e:58:a9:76:2a:c3:b1:35:63:ea:aa:14: 3c:16:14:45:f7:1a:e8:d9:fb:dd:23:2b:98:cf:44: 1d:02:c7:7a:3f:27:43:15:60:6c:8e:a4:23:46:da: 4d:b8:72:8a:b6:be:fe:50:ff:26:26:ba:30:1f:73: bc:e0:6e:9c:96:a7:8c:44:15:d5:09:c2:48:1b:a0: 99:b6:f1:7f:28:b8:eb:40:3c:ad:05:5f:f8:00:08: de:d0:8b:e0:25:a2:5b:c4:b7:22:54:72:40:11:0a: 0c:8a:1d:0d:49:c0:52:71:88:75:60:6a:5b:ff:a0: ad:06:ba:04:06:de:e8:ad:ba:84:f9:ad:6d:52:c9: 8f:9b:c8:2c:62:20:59:77:0e:49:c1:e9:fa:98:de: ea:46:fd:4f:6b:78:60:94:a9:9b:bf:04:5b:ce:99: 35:5b:9f:a7:6d:b5:04:70:b0:22:fe:3b:a2:b6:4d: f0:ca:ca:54:6d:51:cb:3a:33:3e:0b:fa:dd:18:cd: 34:f9:cd:47:3d:a1:91:fa:7a:a0:2c:b1:eb:74:8b: 36:84:20:a6:f5:50:67:6f:39:2b:62:45:31:72:12: 64:12:9e:78:fa:68:06:ef:fb:00:9a:11:c9:c6:5f: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:02:20:DC:3A:7B:B9:90:D4:0C:1C:C4:46:44:6F:5C:68:C4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/1f9fa3f0-0648-3d9c-b4c9-b4b712084cae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:61:4a:03:70:46:67:24:ac:bc:fd:e6:af:a2:a4:aa:1e:18: a6:75:1e:be:14:b8:6e:74:8c:cf:e6:e7:b3:06:ce:2a:fe:8c: f8:ee:04:bd:31:93:04:8c:d3:99:e0:c1:7f:33:16:b4:21:6e: 2e:47:9b:4b:1c:5a:49:82:f0:65:48:4c:2a:bb:bc:6b:67:77: 08:6d:f7:99:53:2e:34:ce:fb:35:8b:9e:75:8b:3b:a4:58:43: 39:79:5d:2e:c6:6d:7b:54:29:f2:fb:4f:e7:0e:38:a7:4a:c8: 97:4f:04:fd:50:75:cc:8f:76:5e:6a:3b:91:c3:1e:6f:9b:a0: af:15:ed:6b:9e:6a:22:61:19:fa:cf:13:84:fc:a7:da:8b:b0: 60:68:e6:4c:92:f6:41:d5:da:bc:ef:73:91:6a:6f:63:0b:a7: f4:de:74:b7:42:a3:1f:7d:7f:7c:04:64:ee:c4:0f:b1:78:79: 0c:55:83:dc:55:7c:99:07:31:74:ae:34:b7:00:66:9b:18:ba: a6:8c:48:06:27:bb:79:71:a4:5f:f6:d6:1f:8f:80:e6:41:98: 89:33:71:c1:9f:ca:c9:ef:93:a8:2f:6a:6e:77:dc:2e:e1:cd: 3c:52:37:75:2f:93:9c:9a:7f:af:92:2c:80:0e:0d:84:08:7f: f7:0f:66:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wm2l6HqUjsCh04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NTZkZjg3ZTEtNjMxMC00MzA3LWEzNWYtZWI4YzE2MzA1OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLgTkhYVNVV7x4p4FpPCGOV+WKl2KsOxNWPq qhQ8FhRF9xro2fvdIyuYz0QdAsd6PydDFWBsjqQjRtpNuHKKtr7+UP8mJrowH3O8 4G6clqeMRBXVCcJIG6CZtvF/KLjrQDytBV/4AAje0IvgJaJbxLciVHJAEQoMih0N ScBScYh1YGpb/6CtBroEBt7orbqE+a1tUsmPm8gsYiBZdw5Jwen6mN7qRv1Pa3hg lKmbvwRbzpk1W5+nbbUEcLAi/juitk3wyspUbVHLOjM+C/rdGM00+c1HPaGR+nqg LLHrdIs2hCCm9VBnbzkrYkUxchJkEp54+mgG7/sAmhHJxl/qRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvLAiDcOnu5kNQMHMRGRG9caMRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvMWY5ZmEzZjAtMDY0OC0z ZDljLWI0YzktYjRiNzEyMDg0Y2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhhSgNwRmckrLz95q+ipKoeGKZ1Hr4UuG50jM/m57MGzir+jPjuBL0x kwSM05ngwX8zFrQhbi5Hm0scWkmC8GVITCq7vGtndwht95lTLjTO+zWLnnWLO6RY Qzl5XS7GbXtUKfL7T+cOOKdKyJdPBP1QdcyPdl5qO5HDHm+boK8V7WueaiJhGfrP E4T8p9qLsGBo5kyS9kHV2rzvc5Fqb2MLp/TedLdCox99f3wEZO7ED7F4eQxVg9xV fJkHMXSuNLcAZpsYuqaMSAYnu3lxpF/21h+PgOZBmIkzccGfysnvk6gvam533C7h zTxSN3Uvk5yaf6+SLIAODYQIf/cPZsg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:06:22 2025 by rpki-client