$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa File: 576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa (raw, json) Hash identifier: gup0gFg27rIcIEEiQ0VUhL5M4lKNKclnHo7dY4mX6oI= Subject key identifier: 05:3C:B3:6C:7E:96:66:6E:27:5B:2D:3D:04:C0:43:48:E2:23:CF:F5 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584BB2F7B2D2C44D3513C308D480 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 8075 IP address blocks: 161.221.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b2:d2:c4:4d:35:13:c3:08:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a771d66c-52e5-4f7e-bea1-7457f2d3a6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d5:7c:01:49:85:3e:db:6b:86:bb:23:9a:07: 4d:1e:6b:7d:9e:eb:dd:ad:07:0a:51:17:fa:f5:81: 3f:9c:84:f8:23:ee:4a:ff:9f:93:62:7d:f1:a2:c5: 07:37:01:7e:4d:28:cf:7d:1f:51:75:91:b8:d5:22: 3f:be:2b:ca:56:0e:cf:37:74:87:6b:67:e3:5d:77: 8a:14:a2:67:37:ea:3b:46:69:a4:f5:6e:ac:1a:50: 65:17:69:ff:e1:34:90:b0:e6:f7:9e:f3:5f:68:68: 3e:7d:68:ba:34:b3:12:5d:37:50:fb:44:20:7b:19: 60:9e:b5:b4:e2:f9:d7:f8:27:e1:36:28:61:49:38: 3f:1d:79:ea:47:30:86:fb:77:7a:7d:6b:7c:0e:66: 76:88:5c:40:fc:42:22:8a:20:e8:69:b6:dc:4e:12: 80:4e:c5:31:cc:d2:1a:f2:ef:dc:90:98:c6:83:13: 14:04:1f:83:43:bd:ae:2c:99:54:59:d5:73:d5:08: be:6e:03:a1:17:ab:90:49:b6:51:26:dd:bc:84:66: 58:cd:5b:0f:19:e9:89:47:77:75:c5:d4:4c:af:f6: df:7a:c4:cc:cf:b1:51:50:29:01:ff:c0:62:c1:b4: ae:f6:d8:ac:25:36:93:8b:cd:ab:c7:b1:24:44:03: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3C:B3:6C:7E:96:66:6E:27:5B:2D:3D:04:C0:43:48:E2:23:CF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ac:ea:fa:79:a8:d1:b0:86:19:78:48:47:36:f8:b7:16:68: 90:a5:95:aa:55:19:08:68:62:46:f0:df:cf:d6:d3:17:91:84: 58:43:8b:20:cb:53:19:62:44:91:ac:7a:fa:45:ad:5e:3f:75: c4:10:43:89:7a:5a:29:40:3f:54:af:0e:63:93:91:25:16:25: 6d:2c:5c:59:54:da:f6:63:57:fd:af:c9:e0:05:c4:86:34:be: ad:2f:12:f1:7f:23:46:16:84:27:0d:d0:5d:1f:6d:af:6f:67: be:c0:03:6f:70:86:df:aa:b4:e7:01:b9:3b:cf:83:ea:51:ab: 05:88:5c:4a:10:3c:9a:29:a7:47:19:3d:8b:99:d8:c5:16:7b: aa:aa:7f:96:28:57:ae:dc:13:2d:52:ed:1e:93:45:ef:9c:92: 5c:39:cb:45:57:c0:e9:fa:49:e5:3d:e3:97:2e:2b:5e:98:dc: 6d:d2:b8:41:87:5a:d7:c9:b6:b3:6c:bb:8c:a2:c8:92:18:d9: 25:c1:2e:7b:99:c4:cb:e8:ec:27:a2:e3:80:cb:62:5e:90:8a: 5f:ce:dc:d7:d8:fa:99:bf:dd:65:98:5b:7d:a1:a2:09:aa:a5: 1f:47:bb:bc:de:5d:70:d1:37:da:04:61:c3:7f:5c:a7:48:78: cf:34:1b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97LSxE01E8MI1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTc3MWQ2NmMtNTJlNS00ZjdlLWJlYTEtNzQ1N2YyZDNhNmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tV8AUmFPttrhrsjmgdNHmt9nuvdrQcKURf6 9YE/nIT4I+5K/5+TYn3xosUHNwF+TSjPfR9RdZG41SI/vivKVg7PN3SHa2fjXXeK FKJnN+o7Rmmk9W6sGlBlF2n/4TSQsOb3nvNfaGg+fWi6NLMSXTdQ+0QgexlgnrW0 4vnX+CfhNihhSTg/HXnqRzCG+3d6fWt8DmZ2iFxA/EIiiiDoabbcThKATsUxzNIa 8u/ckJjGgxMUBB+DQ72uLJlUWdVz1Qi+bgOhF6uQSbZRJt28hGZYzVsPGemJR3d1 xdRMr/bfesTMz7FRUCkB/8BiwbSu9tisJTaTi82rx7EkRAOPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU8s2x+lmZuJ1stPQTAQ0jiI8/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvNTc2ZWJmZWEtZjdmMi0z NmYyLWIwYzgtMWQ3Mzg5MDc2ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+s6vp5qNGwhhl4SEc2+LcWaJCllapVGQhoYkbw38/W0xeRhFhDiyDL UxliRJGsevpFrV4/dcQQQ4l6WilAP1SvDmOTkSUWJW0sXFlU2vZjV/2vyeAFxIY0 vq0vEvF/I0YWhCcN0F0fba9vZ77AA29wht+qtOcBuTvPg+pRqwWIXEoQPJopp0cZ PYuZ2MUWe6qqf5YoV67cEy1S7R6TRe+cklw5y0VXwOn6SeU945cuK16Y3G3SuEGH WtfJtrNsu4yiyJIY2SXBLnuZxMvo7Cei44DLYl6Qil/O3NfY+pm/3WWYW32hogmq pR9Hu7zeXXDRN9oEYcN/XKdIeM80G9U= -----END CERTIFICATE-----Generated at Wed Nov 5 18:22:09 2025 by rpki-client