$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa File: 0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa (raw, json) Hash identifier: VYCBWbJHVGhZ9t/2onYhQ1WVLQtkRTVOrjeqKuE8IfU= Subject key identifier: 2A:97:B9:80:99:4E:21:3E:1D:41:7F:B6:7C:BE:D1:56:C5:81:61:C5 Certificate issuer: /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Certificate serial: 010D0C9F4328584ABF8190A12574DE356F6C1680 Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa Signing time: Mon 04 Aug 2025 20:01:13 +0000 ROA not before: Mon 04 Aug 2025 20:01:13 +0000 ROA not after: Sun 02 Nov 2025 21:01:13 +0000 asID: 2581 IP address blocks: 161.203.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:81:90:a1:25:74:de:35:6f:6c:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Validity Not Before: Aug 4 20:01:13 2025 GMT Not After : Nov 2 21:01:13 2025 GMT Subject: CN=28319873-5b85-40c2-aaf1-1790ba2acc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:24:f3:25:8f:bc:fd:c5:e2:90:7b:41:bc:2a: 05:d3:fd:bc:71:49:30:c5:fa:92:7b:08:86:37:c7: fc:c2:b2:64:3b:46:92:9d:69:c2:cd:b4:83:62:8b: de:dd:75:b9:b7:ef:ac:f8:d8:70:9a:99:ad:b0:ac: c8:0d:ec:94:f3:52:07:1c:c3:64:ee:9e:99:f3:59: be:63:06:79:0c:d6:26:81:e8:07:5c:96:69:03:32: f0:a2:5d:97:c5:8a:33:76:85:50:f3:db:fa:87:18: 48:7a:e8:a4:2a:6d:c8:ca:d9:79:e6:47:f0:05:49: 43:40:3d:b1:b6:6b:c0:46:33:aa:e1:10:62:ad:f7: 23:d9:96:b5:f1:68:62:68:3b:db:d0:c6:3c:8f:0e: c9:06:4d:63:16:3c:03:b1:6e:d2:af:26:81:ff:6a: 06:02:a6:cc:9c:8f:73:33:b5:e9:3f:22:ba:7a:3b: 0e:69:74:6f:6b:e5:ee:58:16:b7:ec:ac:fc:1b:94: be:11:34:3c:fc:f6:02:1e:ad:1c:24:48:f8:37:37: 06:c1:bb:5b:43:42:e2:80:ac:fb:1e:e9:df:43:37: be:f9:99:ec:58:a2:25:11:26:8f:04:16:f0:73:33: 82:2d:79:ce:66:2a:43:14:f9:1e:ef:3b:dc:9a:12: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:97:B9:80:99:4E:21:3E:1D:41:7F:B6:7C:BE:D1:56:C5:81:61:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl X509v3 Authority Key Identifier: keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer sbgp-ipAddrBlock: critical IPv4: 161.203.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:71:68:17:dd:28:60:2e:ce:ae:3e:e3:90:12:38:aa:b5:48: db:23:f9:0e:13:f1:c7:f2:a4:d3:34:24:99:32:e2:c2:58:84: 76:e7:2d:8c:f6:76:a3:5e:64:0f:62:1c:0e:ec:70:4b:72:ed: 22:dd:c4:8c:26:6f:08:04:05:e5:0e:51:79:b5:9a:30:66:23: 8b:06:b7:c2:50:0e:e1:69:8a:50:be:c9:a7:24:37:f9:2e:f9: 53:4d:fe:ec:01:28:3a:bb:3e:70:2e:05:74:66:4d:fd:02:8f: 9c:6f:7c:16:b0:7b:c9:5b:04:07:ee:b7:f3:89:51:a6:e9:72: 1d:80:20:2f:ef:f0:f5:b1:84:87:ce:57:ec:d2:aa:b6:4a:4e: a1:e7:d1:b1:36:20:9d:aa:09:a8:28:d6:e9:4d:4f:3e:67:8e: 13:39:a6:06:82:62:ab:55:02:61:96:11:bc:ae:9f:dd:a3:fb: ee:4e:b1:85:48:57:af:f5:8b:b8:e3:f8:9c:e1:a9:f9:e3:e0: ce:ba:46:4b:8c:9f:95:54:b6:a0:04:69:65:df:fd:6e:50:a7: 7e:a1:ca:f7:1b:cd:77:09:f7:db:c3:2e:b9:bf:2d:5e:90:ec: 5a:96:e7:1e:83:b1:bd:80:67:2d:f1:05:52:fc:2d:05:3f:b6: d4:55:b8:80 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEq/gZChJXTeNW9sFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5 YzgzMB4XDTI1MDgwNDIwMDExM1oXDTI1MTEwMjIxMDExM1owLzEtMCsGA1UEAxMk MjgzMTk4NzMtNWI4NS00MGMyLWFhZjEtMTc5MGJhMmFjYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCTzJY+8/cXikHtBvCoF0/28cUkwxfqSewiG N8f8wrJkO0aSnWnCzbSDYove3XW5t++s+NhwmpmtsKzIDeyU81IHHMNk7p6Z81m+ YwZ5DNYmgegHXJZpAzLwol2XxYozdoVQ89v6hxhIeuikKm3Iytl55kfwBUlDQD2x tmvARjOq4RBirfcj2Za18WhiaDvb0MY8jw7JBk1jFjwDsW7SryaB/2oGAqbMnI9z M7XpPyK6ejsOaXRva+XuWBa37Kz8G5S+ETQ8/PYCHq0cJEj4NzcGwbtbQ0LigKz7 HunfQze++ZnsWKIlESaPBBbwczOCLXnOZipDFPke7zvcmhLl4QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCqXuYCZTiE+HUF/tny+0VbFgWHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5 YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvMGM0YTYyMDAtNWZmYS0z YTJiLThiN2EtOWRkMzQzMWY4YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDBmOWJmNDEtMzljZC00ZmM1LTk2 N2MtZDJhNGFiMGQ5YzgzL2QwZjliZjQxLTM5Y2QtNGZjNS05NjdjLWQyYTRhYjBk OWM4My5jcmwwHwYDVR0jBBgwFoAUFA/qJiHpv8fsdjogCg5MFHhraggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0 YWIwZDljODMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAocswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAH3FoF90oYC7Orj7jkBI4qrVI2yP5DhPxx/Kk0zQkmTLiwliEductjPZ2 o15kD2IcDuxwS3LtIt3EjCZvCAQF5Q5RebWaMGYjiwa3wlAO4WmKUL7JpyQ3+S75 U03+7AEoOrs+cC4FdGZN/QKPnG98FrB7yVsEB+6384lRpulyHYAgL+/w9bGEh85X 7NKqtkpOoefRsTYgnaoJqCjW6U1PPmeOEzmmBoJiq1UCYZYRvK6f3aP77k6xhUhX r/WLuOP4nOGp+ePgzrpGS4yflVS2oARpZd/9blCnfqHK9xvNdwn328Muub8tXpDs WpbnHoOxvYBnLfEFUvwtBT+21FW4gA== -----END CERTIFICATE-----Generated at Sun Aug 10 10:41:51 2025 by rpki-client