$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1196968c-14ad-3a94-9610-7728143a92d2.roa File: 1196968c-14ad-3a94-9610-7728143a92d2.roa (raw, json) Hash identifier: 11Nkl1H7n/5NHdQgOaEviBTzYJct+oWAQtoZaXdHZe4= Subject key identifier: 46:A2:E1:EB:2A:52:CD:CA:43:1A:CB:F5:75:3E:7B:BA:84:92:C1:03 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B1C36CA147BCA8E70EFC2B240 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1196968c-14ad-3a94-9610-7728143a92d2.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 161.69.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ca:14:7b:ca:8e:70:ef:c2:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=e532d82e-e0a3-468b-82d4-e402bd1ec79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:e7:a9:9a:f3:ba:8f:ca:7a:a0:b0:19:2f: 1f:08:f3:ae:6a:48:e8:f9:7d:8d:a0:1d:ae:79:65: 03:69:af:12:3e:aa:13:85:5a:4d:94:89:48:10:be: 06:7e:0c:1d:26:98:00:df:0e:d2:3c:06:0e:8b:b6: 55:66:c0:11:d9:6d:25:24:33:0e:36:4d:99:3d:39: 85:a6:72:ca:77:e4:bd:19:02:b3:be:af:78:5b:cb: a7:08:f4:83:56:79:75:2a:3f:2d:d9:65:13:b4:61: 74:ea:c2:e2:42:d6:ed:f8:6f:1c:0b:1b:aa:7d:be: 8f:c6:f9:12:e2:c4:b2:4e:c0:87:e7:1f:59:28:d4: f3:dc:20:da:19:34:28:f7:92:e4:a5:97:9f:01:01: 01:26:a3:02:fd:89:64:b1:3f:4e:98:6e:26:60:4a: 1d:1c:75:73:ea:4c:d4:ec:50:81:06:08:88:50:b0: 0c:8f:c5:0b:fd:bc:89:29:dc:a8:e0:0e:73:97:3a: c8:35:96:c1:f4:67:a1:f8:16:f3:91:40:11:46:17: 1c:a1:3e:48:06:2f:03:36:b6:1b:80:ce:11:64:67: c4:3a:06:cf:73:af:c6:3a:c9:50:d9:00:3a:e8:2d: f5:90:2c:ef:40:e4:a2:79:fb:a8:98:fd:2b:12:a7: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A2:E1:EB:2A:52:CD:CA:43:1A:CB:F5:75:3E:7B:BA:84:92:C1:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1196968c-14ad-3a94-9610-7728143a92d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e1:3e:97:20:39:54:7a:85:4a:5c:8a:ac:c1:ae:db:51:f7: 7a:c7:97:08:bf:43:1e:fe:db:3d:6a:bd:53:5d:9d:6e:db:cb: 72:c8:5a:c3:42:d2:cf:26:c1:a9:dd:f3:5c:47:cc:ad:0d:1a: 59:95:03:a6:d6:54:2e:46:8b:f1:be:fa:e9:bd:93:48:32:b4: 2c:dd:0f:32:0a:f5:d0:4f:1c:db:a0:ac:3e:c1:51:ac:ad:c4: 29:a5:ac:40:d0:fc:b8:92:23:3b:e7:bd:47:8a:e0:f2:bc:4d: 24:66:c6:eb:cf:f4:cf:94:7d:06:1e:45:99:65:69:9f:31:ef: bf:27:b1:72:04:a6:7d:0c:e9:66:d5:6c:93:ca:30:5a:7d:20: e1:81:d7:63:de:ad:af:de:ff:b2:6a:68:fa:6f:53:76:78:fb: 6a:6e:c4:f7:de:c8:b8:35:8d:d3:57:6e:8e:a9:02:1d:27:b5: 11:ab:f6:b3:3e:1b:76:f1:23:6e:8c:dc:9d:75:fb:dc:ab:fd: 89:14:8b:03:53:78:bb:5d:8f:d1:9f:44:6b:39:67:b5:10:ea: ad:43:a7:db:e9:49:82:94:ee:f7:32:db:49:23:85:04:81:38: c5:8c:63:ab:81:6e:19:43:91:24:6b:09:1f:b1:cf:11:19:66: 9d:7d:87:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsoUe8qOcO/CskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTUzMmQ4MmUtZTBhMy00NjhiLTgyZDQtZTQwMmJkMWVjNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnTnqZrzuo/KeqCwGS8fCPOuakjo+X2NoB2u eWUDaa8SPqoThVpNlIlIEL4GfgwdJpgA3w7SPAYOi7ZVZsAR2W0lJDMONk2ZPTmF pnLKd+S9GQKzvq94W8unCPSDVnl1Kj8t2WUTtGF06sLiQtbt+G8cCxuqfb6PxvkS 4sSyTsCH5x9ZKNTz3CDaGTQo95LkpZefAQEBJqMC/YlksT9OmG4mYEodHHVz6kzU 7FCBBgiIULAMj8UL/byJKdyo4A5zlzrINZbB9Geh+BbzkUARRhccoT5IBi8DNrYb gM4RZGfEOgbPc6/GOslQ2QA66C31kCzvQOSiefuomP0rEqegtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEai4esqUs3KQxrL9XU+e7qEksEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMTE5Njk2OGMtMTRhZC0z YTk0LTk2MTAtNzcyODE0M2E5MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDhPpcgOVR6hUpciqzBrttR93rHlwi/Qx7+2z1qvVNdnW7by3LIWsNC 0s8mwand81xHzK0NGlmVA6bWVC5Gi/G++um9k0gytCzdDzIK9dBPHNugrD7BUayt xCmlrEDQ/LiSIzvnvUeK4PK8TSRmxuvP9M+UfQYeRZllaZ8x778nsXIEpn0M6WbV bJPKMFp9IOGB12Pera/e/7JqaPpvU3Z4+2puxPfeyLg1jdNXbo6pAh0ntRGr9rM+ G3bxI26M3J11+9yr/YkUiwNTeLtdj9GfRGs5Z7UQ6q1Dp9vpSYKU7vcy20kjhQSB OMWMY6uBbhlDkSRrCR+xzxEZZp19h9A= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:28 2025 by rpki-client