$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/c1a3bdd2-f1ab-3d46-877f-e21649647c57.roa File: c1a3bdd2-f1ab-3d46-877f-e21649647c57.roa (raw, json) Hash identifier: DGbpRQkqsR7beZIhEAp8oo5E3SEkfZwCxeqr4Pxx7kA= Subject key identifier: 94:A5:8B:D6:B8:75:9E:26:2D:A8:79:BD:42:8A:72:EA:A6:30:E3:6F Certificate issuer: /CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5 Certificate serial: 010D0C9F4328584BBE405D09030D03239639FDB0 Authority key identifier: FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/c1a3bdd2-f1ab-3d46-877f-e21649647c57.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 401838 IP address blocks: 163.123.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5d:09:03:0d:03:23:96:39:fd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5b677e6d-6d4b-41b5-bc40-6dc4b19d30e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:f3:7c:0d:79:42:4e:42:96:76:62:80:96: 24:1c:df:33:a4:13:f3:79:b8:bb:6d:de:ba:7b:4c: 86:dc:6f:b1:99:23:9b:5b:ac:e3:2c:f6:55:36:f0: cd:d4:9f:84:6b:93:94:be:17:b2:62:d2:55:b7:8b: 94:de:a7:e8:92:44:ec:55:07:b1:c4:61:02:b1:03: bf:9f:78:2b:14:84:5c:02:a7:a3:55:9f:c4:f0:16: 29:f3:da:7d:85:d0:3b:ec:5e:e5:bb:54:15:e4:09: c2:e2:a1:15:28:a2:fd:55:47:30:0b:2a:e3:b3:f1: ae:14:8a:01:e8:be:70:61:9c:0a:48:5c:87:7e:91: 2e:74:b0:f9:c1:44:b9:82:79:f7:d6:43:d2:14:72: 64:84:23:0b:04:1d:41:2e:21:b1:7d:2f:63:38:2c: 14:10:fa:a8:c4:ec:29:5a:f0:11:f0:19:9d:65:2f: d8:c2:ca:0a:dd:51:e8:66:0f:cb:b5:3f:58:fb:4b: 5c:a8:6d:c7:cf:a1:9e:47:af:fa:43:2a:49:cf:3c: da:44:a5:cc:25:ee:0f:08:9c:cc:f3:2c:5b:b4:b3: 9c:0b:40:d9:ef:5c:93:75:74:6e:7e:b2:1f:b2:56: 39:76:c7:40:6c:5f:50:f8:f6:8e:bc:76:03:66:be: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A5:8B:D6:B8:75:9E:26:2D:A8:79:BD:42:8A:72:EA:A6:30:E3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/c1a3bdd2-f1ab-3d46-877f-e21649647c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl X509v3 Authority Key Identifier: keyid:FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer sbgp-ipAddrBlock: critical IPv4: 163.123.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ab:5a:9a:04:2d:43:b7:8a:82:d5:a8:4e:f4:62:96:0c:fd: bf:20:f2:f7:c4:b3:b5:10:50:68:01:4f:78:4f:42:28:a4:c9: 16:23:1c:79:57:51:12:ca:49:5d:d7:f5:57:ee:db:c7:1a:7c: 41:84:d0:34:c5:2c:67:96:50:0e:3e:0c:5a:b3:3b:6d:9c:f3: 4f:f7:26:2c:37:f4:11:2d:44:3a:90:9d:f3:9d:2d:5c:62:e5: d6:ea:b5:54:17:9c:3b:fc:42:d8:cc:b3:01:5a:fd:73:1c:7b: f4:cc:13:ea:09:1e:20:fc:12:02:77:ed:e5:c7:ed:1b:74:03: 72:cd:60:0c:c5:d0:a4:b3:36:31:43:06:db:33:81:7d:42:ae: 9c:7a:cc:ea:df:07:00:5d:61:66:d4:ee:1e:c2:ea:92:a8:6f: ff:de:f4:eb:28:55:da:27:9c:7f:b5:33:55:a4:ce:1d:2c:b5: b5:10:ac:96:30:a6:dc:99:1e:ea:5b:b7:b0:af:af:ae:00:18: 3f:0b:dd:0f:e1:8f:de:d8:7a:7f:45:d0:71:3d:34:45:64:d8: 4e:38:01:92:2f:71:4b:ed:59:96:2c:ab:81:33:21:20:d2:c2: dc:ae:ec:e7:7a:dc:5a:82:e0:75:e4:24:c9:8e:8c:12:d0:a9: 6f:76:ab:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QF0JAw0DI5Y5/bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE5YzBmZTUtOGFjNi00MmEyLTljMGEtNTA1MzRhYWEw MWM1MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NWI2NzdlNmQtNmQ0Yi00MWI1LWJjNDAtNmRjNGIxOWQzMGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP3zfA15Qk5ClnZigJYkHN8zpBPzebi7bd66 e0yG3G+xmSObW6zjLPZVNvDN1J+Ea5OUvheyYtJVt4uU3qfokkTsVQexxGECsQO/ n3grFIRcAqejVZ/E8BYp89p9hdA77F7lu1QV5AnC4qEVKKL9VUcwCyrjs/GuFIoB 6L5wYZwKSFyHfpEudLD5wUS5gnn31kPSFHJkhCMLBB1BLiGxfS9jOCwUEPqoxOwp WvAR8BmdZS/YwsoK3VHoZg/LtT9Y+0tcqG3Hz6GeR6/6QypJzzzaRKXMJe4PCJzM 8yxbtLOcC0DZ71yTdXRufrIfslY5dsdAbF9Q+PaOvHYDZr7OCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSli9a4dZ4mLah5vUKKcuqmMONvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYTlj MGZlNS04YWM2LTQyYTItOWMwYS01MDUzNGFhYTAxYzUvYzFhM2JkZDItZjFhYi0z ZDQ2LTg3N2YtZTIxNjQ5NjQ3YzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmE5YzBmZTUtOGFjNi00MmEyLTlj MGEtNTA1MzRhYWEwMWM1L2JhOWMwZmU1LThhYzYtNDJhMi05YzBhLTUwNTM0YWFh MDFjNS5jcmwwHwYDVR0jBBgwFoAU+h7Anv0VMfFaXkG2fQcGq3byLAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYTljMGZlNS04YWM2LTQyYTItOWMwYS01MDUz NGFhYTAxYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3v1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGirWpoELUO3ioLVqE70YpYM/b8g8vfEs7UQUGgBT3hPQiikyRYjHHlX URLKSV3X9Vfu28cafEGE0DTFLGeWUA4+DFqzO22c80/3Jiw39BEtRDqQnfOdLVxi 5dbqtVQXnDv8QtjMswFa/XMce/TME+oJHiD8EgJ37eXH7Rt0A3LNYAzF0KSzNjFD BtszgX1Crpx6zOrfBwBdYWbU7h7C6pKob//e9OsoVdonnH+1M1Wkzh0stbUQrJYw ptyZHupbt7Cvr64AGD8L3Q/hj97Yen9F0HE9NEVk2E44AZIvcUvtWZYsq4EzISDS wtyu7Od63FqC4HXkJMmOjBLQqW92q7E= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:05 2025 by rpki-client