$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa File: 640896d2-3779-3ec9-a9f8-7165c4473520.roa (raw, json) Hash identifier: ptM9d6NsomJ55n4EuqRLun7PdosIGXn02wH01tgx2Xs= Subject key identifier: 69:5F:6B:3E:AA:38:E3:4C:F3:09:E0:CD:75:A2:DE:25:9F:AD:87:E3 Certificate issuer: /CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2 Certificate serial: 010D0C9F4328584BA39D14C58651FEEF21F90100 Authority key identifier: 69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 393770 IP address blocks: 161.129.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:14:c5:86:51:fe:ef:21:f9:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=ca95fa3f-edf6-4660-b72c-649424c8c8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:22:eb:29:a9:5b:04:87:84:c1:8f:f9:05:da: e0:7c:b0:7e:4b:da:79:46:78:e5:59:6a:8f:eb:18: e1:9c:c5:e9:5f:4d:fd:56:3c:1e:82:f0:b3:42:de: e2:a8:71:e1:cc:a2:37:cf:e4:ae:b8:64:18:ab:d6: 43:1e:ec:32:df:fb:99:af:26:0e:69:e7:2e:79:ea: f8:4b:23:e1:9b:c9:4c:b1:dc:b9:dc:de:c8:36:af: 92:b3:8a:c1:53:28:0f:8e:a4:a4:8b:34:93:98:a4: 58:aa:f4:b0:6e:51:e8:ad:ea:1d:77:5c:73:9f:f9: 2d:25:cc:69:c1:db:9b:b9:76:70:27:e4:2f:a7:fb: f0:cd:8b:f3:8d:96:79:c4:91:3e:da:ee:43:15:7b: f3:95:58:4b:7b:35:a4:8e:b9:70:00:9f:eb:dd:dc: 51:6c:6e:8c:50:59:db:63:9f:6a:2c:c4:9f:6c:ab: 76:34:d1:43:62:1f:7a:50:82:91:57:cd:a2:fd:01: 60:fc:2e:51:4c:2f:1b:11:dd:11:54:67:a8:39:d4: 1d:34:52:e5:84:a7:0e:38:68:43:32:93:5d:97:9f: a7:a2:49:af:1f:1f:a0:6b:3f:41:02:04:1c:38:6b: e3:dc:7f:05:7c:e7:ce:d0:7d:8b:ad:6b:af:cf:c3: 99:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5F:6B:3E:AA:38:E3:4C:F3:09:E0:CD:75:A2:DE:25:9F:AD:87:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl X509v3 Authority Key Identifier: keyid:69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer sbgp-ipAddrBlock: critical IPv4: 161.129.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:93:40:71:61:b5:89:28:e2:53:9c:10:86:6b:82:ae:ba:69: ad:f4:7e:d5:9e:10:da:19:4c:bb:d3:04:83:1d:e9:a0:c9:26: 63:64:9d:58:7a:2b:9a:8d:01:56:6f:73:33:7a:66:e0:e4:d2: 04:45:75:25:8f:d0:d1:78:49:2a:30:ee:e4:10:89:d3:47:80: 52:e0:8e:37:0f:14:20:1f:e4:c0:ee:80:44:04:c0:62:26:00: 8f:81:b6:9f:90:9d:1d:94:15:41:29:3a:94:5f:9c:b2:24:68: 16:63:a6:59:64:f7:dd:98:31:3c:0b:fa:df:02:ca:f0:69:64: 4e:49:7b:fa:67:1d:e3:47:30:83:5d:10:be:ef:17:f0:2f:46: 92:a1:b6:ac:29:58:b8:73:e0:8e:80:17:3a:fa:f6:31:b5:6a: 3f:48:a1:3b:f4:92:aa:fc:24:e8:73:76:64:67:91:73:9e:fa: ef:6c:a4:b7:1d:2a:04:c8:2b:82:32:46:29:69:2d:60:6d:1e: 16:ea:cc:aa:4e:b9:10:fd:0b:f8:fd:03:a8:92:b2:e4:b4:21: 59:42:9a:91:23:86:f1:85:0e:c4:35:7c:d0:e7:18:c2:a7:4f: 40:0f:da:d0:b1:95:be:dd:08:1e:af:c0:eb:66:92:0a:5c:26: 7d:7b:d2:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRTFhlH+7yH5AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZDdmYmEtNjBjNC00NWJmLTllZDQtOTBjNjU4MGU3 MWYyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2E5NWZhM2YtZWRmNi00NjYwLWI3MmMtNjQ5NDI0YzhjOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCLrKalbBIeEwY/5BdrgfLB+S9p5RnjlWWqP 6xjhnMXpX039VjwegvCzQt7iqHHhzKI3z+SuuGQYq9ZDHuwy3/uZryYOaecueer4 SyPhm8lMsdy53N7INq+Ss4rBUygPjqSkizSTmKRYqvSwblHoreodd1xzn/ktJcxp wdubuXZwJ+Qvp/vwzYvzjZZ5xJE+2u5DFXvzlVhLezWkjrlwAJ/r3dxRbG6MUFnb Y59qLMSfbKt2NNFDYh96UIKRV82i/QFg/C5RTC8bEd0RVGeoOdQdNFLlhKcOOGhD MpNdl5+nokmvHx+gaz9BAgQcOGvj3H8FfOfO0H2LrWuvz8OZpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlfaz6qOONM8wngzXWi3iWfrYfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDZk N2ZiYS02MGM0LTQ1YmYtOWVkNC05MGM2NTgwZTcxZjIvNjQwODk2ZDItMzc3OS0z ZWM5LWE5ZjgtNzE2NWM0NDczNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ2ZDdmYmEtNjBjNC00NWJmLTll ZDQtOTBjNjU4MGU3MWYyLzc0NmQ3ZmJhLTYwYzQtNDViZi05ZWQ0LTkwYzY1ODBl NzFmMi5jcmwwHwYDVR0jBBgwFoAUaUNEoG0fOGXE4kVeGx0qWrqCHbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDZkN2ZiYS02MGM0LTQ1YmYtOWVkNC05MGM2 NTgwZTcxZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoYE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWTQHFhtYko4lOcEIZrgq66aa30ftWeENoZTLvTBIMd6aDJJmNknVh6 K5qNAVZvczN6ZuDk0gRFdSWP0NF4SSow7uQQidNHgFLgjjcPFCAf5MDugEQEwGIm AI+Btp+QnR2UFUEpOpRfnLIkaBZjpllk992YMTwL+t8CyvBpZE5Je/pnHeNHMINd EL7vF/AvRpKhtqwpWLhz4I6AFzr69jG1aj9IoTv0kqr8JOhzdmRnkXOe+u9spLcd KgTIK4IyRilpLWBtHhbqzKpOuRD9C/j9A6iSsuS0IVlCmpEjhvGFDsQ1fNDnGMKn T0AP2tCxlb7dCB6vwOtmkgpcJn170sI= -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:30 2025 by rpki-client