$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa File: b9dd9788-1f88-3890-b233-520f9602c142.roa (raw, json) Hash identifier: v3OUZqnjQ2NWNTZVv4oXbdXQej9cdpuiJ1htrpLIGjQ= Subject key identifier: 30:E0:18:E6:88:7B:AA:3A:3F:33:8B:98:D3:6A:94:17:B3:2F:90:A9 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584BB2F7B2E64EE076E62466BB80 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 8075 IP address blocks: 161.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b2:e6:4e:e0:76:e6:24:66:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=89e11b99-b59c-4966-8944-4b55f9a720d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:5b:f2:fc:48:fb:d2:a9:33:43:9d:af:d6: 65:ed:e2:29:a7:66:e8:f3:a8:48:33:84:8b:2b:d7: c4:8e:41:40:12:8a:e1:44:11:b7:a8:e9:6f:fe:af: 5c:dd:91:d1:02:4b:f6:36:58:cd:18:70:79:02:87: 98:af:80:39:b0:63:8d:fe:3d:21:28:96:5d:72:34: 8c:b8:a6:67:af:6a:79:b8:f3:1d:74:91:32:7f:51: 08:4e:67:81:e2:b0:9c:30:c3:0c:75:74:d0:95:87: 53:f6:b2:ba:2e:17:58:d1:5a:f7:0f:90:12:e5:b3: 4e:06:b3:a4:bf:1d:d9:c6:80:69:83:30:01:02:cb: 60:12:c0:0b:83:8f:3a:1a:31:5e:b2:62:c1:4a:5e: 46:5e:aa:c1:3f:40:96:1b:ff:10:b8:7a:ba:50:cc: 1b:ff:c4:b3:3c:7d:21:a8:ce:16:f9:d5:14:c5:56: da:0c:d5:68:71:a5:4f:24:71:dc:98:8e:34:ac:58: 21:58:0c:2a:64:3f:be:3c:92:77:3c:b7:eb:9f:c9: 16:a9:8c:40:a7:85:c8:54:0e:f1:d6:e3:cb:4d:27: b1:04:5a:71:7e:7b:5d:ee:a4:be:4f:d0:61:95:19: 13:e0:d5:ee:3e:08:9b:66:fe:c6:2b:df:11:a8:9f: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E0:18:E6:88:7B:AA:3A:3F:33:8B:98:D3:6A:94:17:B3:2F:90:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b9dd9788-1f88-3890-b233-520f9602c142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:40:d0:2a:92:34:6f:6e:cc:4a:1d:50:9e:ef:83:1f:fd:1d: c4:50:06:75:fe:63:eb:59:35:2f:52:7e:53:3f:ed:2c:d2:4f: 74:47:bd:ff:93:89:33:dc:94:f0:cc:a5:ec:3c:d2:fa:c5:8d: 83:68:71:76:db:f0:36:25:60:39:77:d9:28:f6:41:3f:33:9d: 27:28:5a:ef:7b:1f:a9:a4:19:dc:de:c5:ac:09:af:4b:74:3f: 2a:f5:be:bb:e7:8d:ff:6a:96:27:d4:62:7d:2f:12:7b:1a:1c: 32:af:69:da:1b:92:1f:33:7b:5e:a5:1e:b5:cf:30:39:06:a8: 4f:2f:c0:1f:e7:e8:b8:6d:03:ac:bd:7e:9f:aa:2c:08:7a:7f: c2:8f:8f:73:23:b0:80:92:9b:90:f8:7a:a0:39:d7:82:b6:77: 69:01:a4:39:c2:b9:e0:0e:b5:68:9a:a8:0b:1f:cb:1c:17:ec: d3:0d:d6:ad:dd:59:35:9e:cc:54:a1:e5:7c:1b:f3:56:2b:04: b4:a8:ac:04:94:fe:57:43:08:64:36:09:86:15:9a:41:fe:7a: 79:41:7e:70:22:ca:32:1b:0b:0a:f0:7a:ae:f4:77:fc:b6:76: be:51:c7:f6:49:e4:87:1b:a9:0b:ea:06:e1:fe:55:7b:31:7c: d8:11:0d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97LmTuB25iRmu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ODllMTFiOTktYjU5Yy00OTY2LTg5NDQtNGI1NWY5YTcyMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfRb8vxI+9KpM0Odr9Zl7eIpp2bo86hIM4SL K9fEjkFAEorhRBG3qOlv/q9c3ZHRAkv2NljNGHB5AoeYr4A5sGON/j0hKJZdcjSM uKZnr2p5uPMddJEyf1EITmeB4rCcMMMMdXTQlYdT9rK6LhdY0Vr3D5AS5bNOBrOk vx3ZxoBpgzABAstgEsALg486GjFesmLBSl5GXqrBP0CWG/8QuHq6UMwb/8SzPH0h qM4W+dUUxVbaDNVocaVPJHHcmI40rFghWAwqZD++PJJ3PLfrn8kWqYxAp4XIVA7x 1uPLTSexBFpxfntd7qS+T9BhlRkT4NXuPgibZv7GK98RqJ/YNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDgGOaIe6o6PzOLmNNqlBezL5CpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvYjlkZDk3ODgtMWY4OC0z ODkwLWIyMzMtNTIwZjk2MDJjMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpA0CqSNG9uzEodUJ7vgx/9HcRQBnX+Y+tZNS9SflM/7SzST3RHvf+T iTPclPDMpew80vrFjYNocXbb8DYlYDl32Sj2QT8znScoWu97H6mkGdzexawJr0t0 Pyr1vrvnjf9qlifUYn0vEnsaHDKvadobkh8ze16lHrXPMDkGqE8vwB/n6LhtA6y9 fp+qLAh6f8KPj3MjsICSm5D4eqA514K2d2kBpDnCueAOtWiaqAsfyxwX7NMN1q3d WTWezFSh5Xwb81YrBLSorASU/ldDCGQ2CYYVmkH+enlBfnAiyjIbCwrweq70d/y2 dr5Rx/ZJ5IcbqQvqBuH+VXsxfNgRDR8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:11:05 2025 by rpki-client