$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa File: a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa (raw, json) Hash identifier: DLqxjshV9cSU4oKgcZafEDQLIOUwuKDwVIdaOGO3YEY= Subject key identifier: BA:46:01:91:FB:3C:A1:55:D7:57:9B:57:11:DF:2C:7E:D0:10:3E:C8 Certificate issuer: /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Certificate serial: 010D0C9F4328584BC371D199D3002C4CF1A79C40 Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa Signing time: Wed 05 Nov 2025 22:39:40 +0000 ROA not before: Wed 05 Nov 2025 22:39:40 +0000 ROA not after: Tue 03 Feb 2026 22:39:40 +0000 asID: 14298 IP address blocks: 161.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c3:71:d1:99:d3:00:2c:4c:f1:a7:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Validity Not Before: Nov 5 22:39:40 2025 GMT Not After : Feb 3 22:39:40 2026 GMT Subject: CN=cc66e79a-e992-4c86-8b75-a3a5438ea0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:dc:46:79:ea:3f:18:04:84:f9:22:d1:31: 23:da:47:4a:84:1d:a3:0e:0d:47:e5:9c:2a:28:7f: 30:c9:a8:07:71:b5:d6:76:6a:1e:84:e3:f6:c2:bd: 8d:42:33:0f:45:de:60:23:db:6b:b8:cf:37:98:98: 18:f3:dc:a5:3b:23:98:19:fb:30:08:ac:4e:53:09: ea:51:7f:2b:ad:ba:65:de:23:34:e7:43:97:7a:9f: b5:07:12:7b:8d:fa:96:85:0b:56:4c:bf:68:1c:a9: 48:c2:b1:56:1f:24:32:f7:66:2c:f5:d9:a3:06:3d: ca:aa:c9:c5:71:af:43:41:73:5e:d8:3f:7f:c7:62: 4b:60:a7:a3:47:fb:b7:44:52:12:b6:24:ef:ad:d6: a1:1d:6b:88:8d:fb:ee:ae:f3:65:6e:9d:8a:9f:42: 5d:57:d4:73:8d:b9:b3:91:1f:9e:c7:ab:96:ba:9a: ec:cb:96:d0:16:96:e1:a0:6c:a4:08:70:fd:d0:22: a3:09:ba:e9:2c:b0:60:59:c0:0a:96:84:64:f9:51: 66:eb:18:8a:89:fc:15:58:04:8e:33:c8:a1:d5:bd: fa:af:9f:42:c3:ac:ed:39:c4:41:14:88:cc:85:f1: 92:01:4c:4c:2e:f3:7b:b8:8e:3a:0c:84:6d:66:29: d0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:46:01:91:FB:3C:A1:55:D7:57:9B:57:11:DF:2C:7E:D0:10:3E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl X509v3 Authority Key Identifier: keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer sbgp-ipAddrBlock: critical IPv4: 161.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:10:1f:73:91:67:a6:8f:25:91:11:3e:2e:a0:8b:af:aa:30: 7b:65:9d:5c:a7:87:b6:95:03:4e:64:9f:ca:83:af:f9:a4:9b: 77:7b:cb:ae:01:16:97:ad:24:38:fc:16:8e:bb:61:f5:42:e9: 2c:26:91:bc:41:32:d2:d6:56:16:ce:f1:00:46:00:63:8d:21: 8d:dc:9d:da:21:49:f0:07:15:36:b3:02:b1:6f:70:75:29:31: d9:be:e0:64:23:f8:84:ad:4f:9e:e1:12:c6:de:89:e5:e3:3b: 5f:0c:ca:b8:52:f1:99:9d:d3:ba:a2:1b:5c:ed:45:73:85:ae: c1:92:a9:a6:41:5e:eb:6c:43:23:8b:4c:5b:e6:94:9f:84:bb: 8b:8f:6d:3b:4b:ba:86:da:9d:3f:72:a9:15:c8:1b:41:a5:10: 28:88:e5:42:95:01:5f:2c:f9:0d:d4:6d:ae:cf:32:f3:a4:c7: 43:86:23:ee:67:6c:c0:49:d3:7d:bd:4c:98:ec:80:0d:6d:93: 36:a1:fe:03:e6:16:16:ce:2c:07:ec:ed:44:02:78:04:35:09: 71:df:67:aa:74:f3:1b:d7:ba:56:f1:c5:db:f2:10:b4:fc:63: 3c:46:94:ab:f3:7d:88:81:49:74:d4:a6:81:f4:8d:04:5d:b6: 0f:71:a1:5d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvDcdGZ0wAsTPGnnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyMWI2MmItN2JmYy00YTBkLTgxYmMtNzdmOTk4ZGYy Y2JlMB4XDTI1MTEwNTIyMzk0MFoXDTI2MDIwMzIyMzk0MFowLzEtMCsGA1UEAxMk Y2M2NmU3OWEtZTk5Mi00Yzg2LThiNzUtYTNhNTQzOGVhMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklbcRnnqPxgEhPki0TEj2kdKhB2jDg1H5Zwq KH8wyagHcbXWdmoehOP2wr2NQjMPRd5gI9truM83mJgY89ylOyOYGfswCKxOUwnq UX8rrbpl3iM050OXep+1BxJ7jfqWhQtWTL9oHKlIwrFWHyQy92Ys9dmjBj3KqsnF ca9DQXNe2D9/x2JLYKejR/u3RFIStiTvrdahHWuIjfvurvNlbp2Kn0JdV9Rzjbmz kR+ex6uWuprsy5bQFpbhoGykCHD90CKjCbrpLLBgWcAKloRk+VFm6xiKifwVWASO M8ih1b36r59Cw6ztOcRBFIjMhfGSAUxMLvN7uI46DIRtZinQ5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLpGAZH7PKFV11ebVxHfLH7QED7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIx YjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThkZjJjYmUvYTA3YzJkODgtNGE0MC0z YTM2LWE4YTUtMThkODMxYzlkMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWUyMWI2MmItN2JmYy00YTBkLTgx YmMtNzdmOTk4ZGYyY2JlL2FlMjFiNjJiLTdiZmMtNGEwZC04MWJjLTc3Zjk5OGRm MmNiZS5jcmwwHwYDVR0jBBgwFoAULIDpo5FaoponxEGnhVWXk9ZtvFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5 OThkZjJjYmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoVAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAuxAfc5Fnpo8lkRE+LqCLr6owe2WdXKeHtpUDTmSfyoOv+aSbd3vLrgEW l60kOPwWjrth9ULpLCaRvEEy0tZWFs7xAEYAY40hjdyd2iFJ8AcVNrMCsW9wdSkx 2b7gZCP4hK1PnuESxt6J5eM7XwzKuFLxmZ3TuqIbXO1Fc4WuwZKppkFe62xDI4tM W+aUn4S7i49tO0u6htqdP3KpFcgbQaUQKIjlQpUBXyz5DdRtrs8y86THQ4Yj7mds wEnTfb1MmOyADW2TNqH+A+YWFs4sB+ztRAJ4BDUJcd9nqnTzG9e6VvHF2/IQtPxj PEaUq/N9iIFJdNSmgfSNBF22D3GhXQ== -----END CERTIFICATE-----Generated at Thu Nov 6 09:15:49 2025 by rpki-client