$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa File: fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa (raw, json) Hash identifier: CL+kux6EuAg4Ecm96NFG8cXMg53o0jIYE9+qRrJhoPk= Subject key identifier: 9C:9E:95:42:CC:49:31:D7:E1:39:9D:0D:22:A8:20:98:DC:ED:25:5B Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584BBFA5A3DCCD5D815DE68DB0E0 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 31898 IP address blocks: 161.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a3:dc:cd:5d:81:5d:e6:8d:b0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=088c9ccf-ae78-431f-8eff-9788c55a1bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:63:80:66:3c:42:c7:53:f7:fe:eb:8c:42: b3:5e:45:27:50:67:83:dc:d8:7d:41:4a:80:77:53: 5b:48:5d:ce:89:7e:99:3f:58:bd:9d:3d:b2:2f:6a: 80:45:70:93:54:9f:63:65:a6:58:37:bb:91:73:69: 40:21:2a:99:49:f4:64:64:53:07:15:7b:bc:65:b9: b3:0a:f1:16:a0:a8:a3:cf:ef:37:8b:8e:55:7f:a6: 0a:57:be:1c:55:81:67:33:c1:55:10:a1:c5:f8:74: fb:1d:e9:8b:6d:a5:d6:be:b8:f5:43:58:13:9b:2c: 30:1c:6a:9a:7c:ef:58:06:9d:ca:74:59:8b:45:93: 55:02:7c:06:6e:0f:c2:80:c8:ab:56:bf:84:ad:d3: 00:1f:9e:66:48:ee:f1:9e:af:cb:c9:12:bb:d0:6e: 83:7d:5b:40:f5:94:2b:b4:19:5c:26:27:d3:04:30: f7:9e:c5:02:a5:6e:16:b6:6a:0f:26:cc:78:9f:30: 23:53:2c:11:48:cc:a5:f2:25:99:dc:1a:02:49:ff: 3b:9a:5c:5c:46:97:22:24:ab:b3:11:5f:17:f6:f1: ec:8d:5b:42:62:c0:a6:f6:4f:21:56:6b:a9:67:8b: 4a:5b:ee:64:03:08:77:fd:c0:d9:f9:ba:06:65:07: 9c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9E:95:42:CC:49:31:D7:E1:39:9D:0D:22:A8:20:98:DC:ED:25:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:87:60:28:c2:e7:7c:3e:99:a0:13:7e:e6:23:bf:c8:01:88: da:fd:23:6f:43:6b:ff:30:27:32:78:6c:d7:22:96:6a:c3:9f: 48:23:7f:d5:c5:ef:6c:f5:22:26:c6:f4:fc:4e:2d:6a:1a:94: f1:a5:99:0f:1c:5f:17:5b:6e:0e:33:c4:16:d9:10:83:ff:1d: 5d:51:c4:92:2d:f4:2b:71:14:e8:56:8f:fb:4d:95:16:ea:e3: 6e:ef:06:3e:23:1d:a7:1a:d5:91:4d:05:55:21:80:87:b8:18: a7:f2:c4:c0:65:47:c0:56:cd:2a:23:97:5a:63:24:6c:13:7f: 04:79:65:21:20:b9:78:29:f5:5d:75:7a:59:17:b9:49:49:4a: b4:a0:33:70:43:8a:9a:dc:45:69:ee:b4:08:db:af:cb:93:bd: 3d:b1:3b:67:08:87:b9:a5:49:6b:46:f0:9d:67:9c:bf:c7:6f: 04:6c:98:da:5d:d9:7d:86:3f:ee:49:56:61:49:c6:47:2b:3d: 39:c8:53:08:a5:77:9e:f7:0f:35:2e:fe:6f:82:94:f3:e4:53: db:a4:a9:15:58:e9:2a:86:56:4a:61:c5:ea:08:73:35:fe:5a: 53:ce:07:2d:59:82:37:ab:20:36:b2:e2:1e:11:69:0d:59:ce: 5b:bf:a2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paPczV2BXeaNsOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MDg4YzljY2YtYWU3OC00MzFmLThlZmYtOTc4OGM1NWExYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3pjgGY8QsdT9/7rjEKzXkUnUGeD3Nh9QUqA d1NbSF3OiX6ZP1i9nT2yL2qARXCTVJ9jZaZYN7uRc2lAISqZSfRkZFMHFXu8Zbmz CvEWoKijz+83i45Vf6YKV74cVYFnM8FVEKHF+HT7HemLbaXWvrj1Q1gTmywwHGqa fO9YBp3KdFmLRZNVAnwGbg/CgMirVr+ErdMAH55mSO7xnq/LyRK70G6DfVtA9ZQr tBlcJifTBDD3nsUCpW4WtmoPJsx4nzAjUywRSMyl8iWZ3BoCSf87mlxcRpciJKuz EV8X9vHsjVtCYsCm9k8hVmupZ4tKW+5kAwh3/cDZ+boGZQecYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyelULMSTHX4TmdDSKoIJjc7SVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvZmI5YWE2ZmItZGFkYi0z MmU2LWE2MmMtZmExNzE5Mjk0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACHYCjC53w+maATfuYjv8gBiNr9I29Da/8wJzJ4bNcilmrDn0gjf9XF 72z1IibG9PxOLWoalPGlmQ8cXxdbbg4zxBbZEIP/HV1RxJIt9CtxFOhWj/tNlRbq 427vBj4jHaca1ZFNBVUhgIe4GKfyxMBlR8BWzSojl1pjJGwTfwR5ZSEguXgp9V11 elkXuUlJSrSgM3BDiprcRWnutAjbr8uTvT2xO2cIh7mlSWtG8J1nnL/HbwRsmNpd 2X2GP+5JVmFJxkcrPTnIUwild573DzUu/m+ClPPkU9ukqRVY6SqGVkphxeoIczX+ WlPOBy1ZgjerIDay4h4RaQ1Zzlu/oq8= -----END CERTIFICATE-----Generated at Thu Nov 6 00:22:32 2025 by rpki-client