$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa File: 536a1a59-e74e-326e-909f-14a772e3d7fe.roa (raw, json) Hash identifier: ufb3PVNLNfwGlHq9umjGHy+qNnhzeKunEf7sN8rGPMo= Subject key identifier: BF:5E:4E:57:11:4D:A0:01:92:67:FF:2E:D2:AA:AA:00:D8:FC:F2:B0 Certificate issuer: /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8 Certificate serial: 010D0C9F4328584BA0D245C7F39A53A4EFCFDF00 Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 161.199.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:45:c7:f3:9a:53:a4:ef:cf:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a9d4995f-209b-4435-a98b-5532c604662c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:6e:87:1a:13:74:49:9c:43:a6:61:a4:72: ef:4e:0b:8d:8e:48:35:f7:a2:81:e8:20:43:89:30: 25:86:b0:a4:f2:e4:5b:c1:cf:62:73:b2:00:22:64: 1c:d8:3b:9f:63:fd:87:04:4f:3e:18:48:da:b5:48: 41:ed:ce:7b:c6:0b:be:9a:00:e0:da:b3:0a:6c:f9: 49:c0:82:4c:4b:c6:f0:22:17:3a:46:b4:6d:cb:2b: 97:3a:99:57:86:23:c2:d6:a3:82:c9:42:5b:3c:de: ed:a1:41:82:5b:d1:b6:3b:52:74:0d:0c:a3:7b:94: a6:25:2a:11:dd:2c:d4:9c:39:6d:54:a1:be:44:fb: ac:52:d6:f5:7a:24:8c:a5:df:b4:8c:3c:80:17:fd: be:d0:26:44:37:87:a3:11:20:65:f0:c9:b5:2a:f7: 62:b9:aa:b4:67:ea:29:01:5b:4d:c5:1f:fa:42:e3: 55:ee:ff:a1:fb:e0:0d:8b:2c:99:eb:3d:a9:7d:69: 96:96:72:33:62:09:6f:8a:bb:90:9b:67:0f:8f:0b: bf:83:35:23:7f:63:63:8e:2e:7f:75:7a:2a:dc:ae: 18:5f:d0:ec:cf:8b:9c:bf:a7:39:54:68:03:40:a3: 98:8f:aa:9d:b5:8e:a0:fa:c5:14:7e:27:e5:c1:38: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5E:4E:57:11:4D:A0:01:92:67:FF:2E:D2:AA:AA:00:D8:FC:F2:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl X509v3 Authority Key Identifier: keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer sbgp-ipAddrBlock: critical IPv4: 161.199.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:65:e1:67:35:0c:b8:d2:30:4a:3f:33:0d:3a:ec:06:f5:16: 12:dc:f9:07:ea:03:0c:fa:f2:12:5c:36:ae:ca:07:15:7e:43: 41:28:0b:00:42:74:96:8f:82:5d:96:7c:9d:18:4a:b7:a8:be: 92:5e:a2:2e:b5:6b:cc:9b:63:16:95:9e:88:02:0e:8e:c4:2c: e1:cd:0e:12:40:bb:19:f8:d9:ff:e1:33:8d:6c:10:bd:3a:39: 2a:b3:5e:24:af:64:63:5a:78:11:3e:79:35:f5:ed:18:cc:73: 1a:7f:a6:f1:51:f8:c1:1e:41:e4:93:ed:f4:f2:8e:62:f0:9d: b1:91:c8:60:5e:9a:5f:bd:f8:96:42:d5:da:e9:cf:ae:18:f4: c5:d2:a2:83:1c:d2:27:7d:fc:22:df:a7:88:9e:a1:5e:91:2c: 6d:be:88:f0:d7:37:83:e7:02:99:9c:7d:8e:6a:e4:63:dd:09: 41:dd:19:3a:ac:92:8a:eb:59:5a:6e:bf:2b:2a:88:db:e8:31: d1:5a:2c:04:a5:52:02:e8:3e:d9:11:a8:26:6c:49:ed:8d:44: 0e:45:1d:4c:ff:3d:04:11:38:1f:b0:25:62:00:b2:3c:75:bc: 97:90:81:1b:17:2b:20:8f:f4:5c:86:da:68:c3:45:36:e1:05: d9:aa:af:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kXH85pTpO/P3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliNzk0NDctZGE4OC00NTI4LThmZjctMGQzNjdkMmQ3 NmU4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTlkNDk5NWYtMjA5Yi00NDM1LWE5OGItNTUzMmM2MDQ2NjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWpuhxoTdEmcQ6ZhpHLvTguNjkg196KB6CBD iTAlhrCk8uRbwc9ic7IAImQc2DufY/2HBE8+GEjatUhB7c57xgu+mgDg2rMKbPlJ wIJMS8bwIhc6RrRtyyuXOplXhiPC1qOCyUJbPN7toUGCW9G2O1J0DQyje5SmJSoR 3SzUnDltVKG+RPusUtb1eiSMpd+0jDyAF/2+0CZEN4ejESBl8Mm1Kvdiuaq0Z+op AVtNxR/6QuNV7v+h++ANiyyZ6z2pfWmWlnIzYglviruQm2cPjwu/gzUjf2Njji5/ dXoq3K4YX9Dsz4ucv6c5VGgDQKOYj6qdtY6g+sUUfiflwTh5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9eTlcRTaABkmf/LtKqqgDY/PKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3 OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2QyZDc2ZTgvNTM2YTFhNTktZTc0ZS0z MjZlLTkwOWYtMTRhNzcyZTNkN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjliNzk0NDctZGE4OC00NTI4LThm ZjctMGQzNjdkMmQ3NmU4L2I5Yjc5NDQ3LWRhODgtNDUyOC04ZmY3LTBkMzY3ZDJk NzZlOC5jcmwwHwYDVR0jBBgwFoAUHiwkM9lMpkRaA/NOR07DQO2LIoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2 N2QyZDc2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoceAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpl4Wc1DLjSMEo/Mw067Ab1FhLc+QfqAwz68hJcNq7KBxV+Q0EoCwBC dJaPgl2WfJ0YSreovpJeoi61a8ybYxaVnogCDo7ELOHNDhJAuxn42f/hM41sEL06 OSqzXiSvZGNaeBE+eTX17RjMcxp/pvFR+MEeQeST7fTyjmLwnbGRyGBeml+9+JZC 1drpz64Y9MXSooMc0id9/CLfp4ieoV6RLG2+iPDXN4PnApmcfY5q5GPdCUHdGTqs korrWVpuvysqiNvoMdFaLASlUgLoPtkRqCZsSe2NRA5FHUz/PQQROB+wJWIAsjx1 vJeQgRsXKyCP9FyG2mjDRTbhBdmqr8A= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:14 2025 by rpki-client