$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa File: cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa (raw, json) Hash identifier: V5mhZNHL+vY1lfG4bhie+JrBhGW52h5BvKKVb7N+7uE= Subject key identifier: 64:A7:02:F2:E5:05:B0:53:F0:30:96:D1:11:99:2F:E2:44:11:8A:22 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584BB2F7B2ACDA51900D300ECF00 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 8075 IP address blocks: 161.221.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b2:ac:da:51:90:0d:30:0e:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a5e5d176-6670-4a91-a4cf-924c862cebd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:55:e4:80:fc:bb:b8:72:c6:64:fb:2c:70: d1:c5:ee:62:e3:39:7a:25:f5:38:ea:81:ed:dc:b6: bd:0f:22:f0:d4:fe:52:9c:e7:df:cb:fe:ff:2f:67: 17:ed:19:6c:b6:4e:1a:66:49:28:d5:ff:96:7c:ad: de:a3:85:de:c1:30:ed:e5:1f:e6:b4:af:ac:12:6e: 96:04:79:13:b9:b0:26:31:59:64:21:54:6f:d4:00: f8:06:32:5f:54:38:db:8d:12:0a:39:ed:c7:82:b8: e0:87:fd:70:26:1c:7d:41:22:ee:2f:b5:b0:66:09: c5:40:67:82:94:94:c2:8b:d5:01:18:89:47:d9:21: a5:42:3b:6a:25:23:ed:7e:a0:36:da:8c:b4:82:f7: 7a:2b:86:70:25:16:66:18:6e:ae:97:c4:46:81:ab: e1:5c:7e:fa:1d:53:53:d2:4c:92:ed:03:12:62:23: 99:e2:ce:53:49:e3:43:9b:8b:e3:18:c7:e5:81:e6: 68:f7:8f:fe:ca:df:bc:59:f4:53:a6:98:a1:b5:55: 49:f8:20:a8:bb:68:86:79:b5:75:dc:36:5f:f3:82: d0:59:fb:3b:90:8d:2d:ce:6e:7f:8b:98:98:75:4e: 20:eb:d5:0c:66:a8:70:ae:a0:ea:d0:c6:67:c8:78: ca:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A7:02:F2:E5:05:B0:53:F0:30:96:D1:11:99:2F:E2:44:11:8A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:36:c3:32:09:59:d8:0e:db:18:77:21:77:5e:b7:fd:75:8c: 04:7b:7d:d2:25:d8:ac:1a:1d:54:31:52:8b:e7:13:6e:a1:a9: 61:cf:3d:d2:86:32:ee:1c:be:c4:d9:cf:b4:44:c4:a9:d8:cb: cf:49:40:19:79:65:ff:2a:be:80:48:f0:cd:cc:7b:b6:df:2a: f5:44:1e:dd:bb:98:84:88:39:ea:ff:74:02:32:8b:e3:f9:21: a5:f0:da:db:d4:b4:4c:93:3a:9d:2b:1c:5a:45:ba:75:9f:4a: 73:dc:10:0a:0a:73:49:00:05:97:5b:0b:c2:10:ea:5e:4a:dd: 48:31:17:f6:96:1e:ad:6d:7d:a5:0b:75:4c:60:42:81:79:33: ea:47:18:b4:aa:ec:79:e9:35:ca:88:94:30:ee:93:f2:1e:d8: 47:67:08:06:62:d9:73:91:08:7e:e8:07:66:bf:d5:1c:03:3d: a1:fa:1d:4c:21:69:dc:b8:9b:d8:d4:4e:5e:d3:7a:eb:fe:e6: 2e:b1:aa:6c:fe:7d:bc:62:a2:c6:eb:59:0e:96:55:7c:0f:9e: 69:0f:97:0d:23:02:44:43:77:e6:96:7d:f1:71:53:7e:8c:ca: f0:07:02:46:54:05:73:6c:9b:4b:1c:28:65:59:22:49:27:68: 7a:e0:37:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97Ks2lGQDTAOzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTVlNWQxNzYtNjY3MC00YTkxLWE0Y2YtOTI0Yzg2MmNlYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ilV5ID8u7hyxmT7LHDRxe5i4zl6JfU46oHt 3La9DyLw1P5SnOffy/7/L2cX7Rlstk4aZkko1f+WfK3eo4XewTDt5R/mtK+sEm6W BHkTubAmMVlkIVRv1AD4BjJfVDjbjRIKOe3Hgrjgh/1wJhx9QSLuL7WwZgnFQGeC lJTCi9UBGIlH2SGlQjtqJSPtfqA22oy0gvd6K4ZwJRZmGG6ul8RGgavhXH76HVNT 0kyS7QMSYiOZ4s5TSeNDm4vjGMflgeZo94/+yt+8WfRTppihtVVJ+CCou2iGebV1 3DZf84LQWfs7kI0tzm5/i5iYdU4g69UMZqhwrqDq0MZnyHjK2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSnAvLlBbBT8DCW0RGZL+JEEYoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvY2Q3ZTc4YzItZTllZi0z MWVhLWFkMzgtMjZhYzMwNTE5ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg2wzIJWdgO2xh3IXdet/11jAR7fdIl2KwaHVQxUovnE26hqWHPPdKG Mu4cvsTZz7RExKnYy89JQBl5Zf8qvoBI8M3Me7bfKvVEHt27mISIOer/dAIyi+P5 IaXw2tvUtEyTOp0rHFpFunWfSnPcEAoKc0kABZdbC8IQ6l5K3UgxF/aWHq1tfaUL dUxgQoF5M+pHGLSq7HnpNcqIlDDuk/Ie2EdnCAZi2XORCH7oB2a/1RwDPaH6HUwh ady4m9jUTl7Teuv+5i6xqmz+fbxiosbrWQ6WVXwPnmkPlw0jAkRDd+aWffFxU36M yvAHAkZUBXNsm0scKGVZIkknaHrgN4Y= -----END CERTIFICATE-----Generated at Wed Nov 5 10:20:17 2025 by rpki-client