$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa File: 1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa (raw, json) Hash identifier: Qz6EPRV3Zmn1Hv+5Ln0ooAFmM3aF2fBCxk2ReQDxmHw= Subject key identifier: D7:D1:CC:6A:67:9B:02:8C:D9:4F:FD:8E:23:4B:71:9D:6A:4A:6E:21 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B382191585E63D892FD9C6740 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 203724 IP address blocks: 161.69.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:91:58:5e:63:d8:92:fd:9c:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=7cd35fb4-2c86-4aca-9158-3a2820699691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:70:2b:dc:9f:2c:f4:d2:75:37:66:55:53:d6: 45:4a:7a:b5:59:22:17:49:9a:07:30:30:84:a6:d3: df:9d:65:3c:c5:a6:78:94:fe:b7:7c:92:b0:34:72: 3a:56:60:d0:ee:6c:2c:e3:be:60:40:13:a9:76:ce: 09:c5:fd:12:55:eb:be:1f:da:9e:05:30:1f:e3:ee: 88:11:cc:e0:c7:f4:7c:b1:d4:af:b1:6c:4d:f7:6a: ce:d1:c0:79:70:79:20:33:e3:22:fa:d4:86:37:de: fd:a5:1c:e0:91:66:f8:a1:d9:eb:ef:66:e9:0c:ad: 07:d7:47:c7:09:fe:51:1c:a4:60:f0:f1:98:ed:47: fc:08:a5:15:08:f1:6e:01:2c:f4:62:ba:a6:aa:36: 6b:2f:8d:7d:a2:f6:b2:95:38:80:94:08:ab:12:07: 0f:72:e8:92:e9:ca:ae:d2:77:68:9d:a5:35:b8:46: ee:54:50:d1:ad:ec:e9:3f:0d:b0:d6:9e:13:57:5d: f0:7b:14:1f:aa:96:93:be:6c:c2:cc:23:55:56:d0: 55:20:64:81:bf:ad:58:78:93:41:ef:d4:40:7a:7b: 2a:a0:2b:a9:3d:26:2e:14:f1:66:ab:e2:fe:6d:92: d3:99:12:9b:5d:5f:10:b6:49:ea:e4:e5:b8:c7:c0: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D1:CC:6A:67:9B:02:8C:D9:4F:FD:8E:23:4B:71:9D:6A:4A:6E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:6f:4b:a1:bc:a2:09:d5:98:30:39:a6:b5:32:e2:3d:10:95: 82:4f:9b:15:d2:c8:e3:f3:ee:75:60:76:46:0c:27:80:79:cb: 47:82:d6:ff:da:e0:6d:f0:cd:97:d0:a3:85:66:8c:4f:fb:c5: d7:84:97:fe:b1:9b:b6:76:48:24:50:6c:2c:f0:21:d3:01:bb: 3d:cb:70:e0:33:63:31:f4:97:0d:96:fa:6a:4d:03:e1:3b:23: 8b:cd:bf:71:27:44:a9:7f:9c:e6:94:9e:ae:e1:af:23:ee:4f: 85:d8:3e:79:2b:35:14:fb:a1:66:15:b0:ff:0f:f3:9b:8a:78: 48:4a:12:bc:ec:f6:53:58:00:e2:0f:35:2f:94:0e:37:ea:59: f8:a8:c8:b9:a5:68:98:57:5a:9f:e2:57:9d:19:99:72:b2:30: 21:dd:22:ab:61:8a:3b:88:28:22:76:ef:9f:60:6b:bd:13:1a: d9:1b:83:db:ac:12:8b:05:23:b3:ad:7b:ec:bb:ae:c7:42:1b: 4c:35:d1:ec:cf:f8:40:b2:3c:18:2f:b6:4e:7f:1f:57:96:ba: 53:b4:b4:90:1f:cf:00:26:f2:98:99:e6:e5:c7:1f:a4:e1:80: 94:5c:e5:5d:e4:ed:2f:ff:ae:b4:9c:79:da:45:3c:4d:60:9a: d5:92:85:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZFYXmPYkv2cZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk N2NkMzVmYjQtMmM4Ni00YWNhLTkxNTgtM2EyODIwNjk5NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Ar3J8s9NJ1N2ZVU9ZFSnq1WSIXSZoHMDCE ptPfnWU8xaZ4lP63fJKwNHI6VmDQ7mws475gQBOpds4Jxf0SVeu+H9qeBTAf4+6I Eczgx/R8sdSvsWxN92rO0cB5cHkgM+Mi+tSGN979pRzgkWb4odnr72bpDK0H10fH Cf5RHKRg8PGY7Uf8CKUVCPFuASz0YrqmqjZrL419ovaylTiAlAirEgcPcuiS6cqu 0ndonaU1uEbuVFDRrezpPw2w1p4TV13wexQfqpaTvmzCzCNVVtBVIGSBv61YeJNB 79RAensqoCupPSYuFPFmq+L+bZLTmRKbXV8Qtknq5OW4x8A2VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfRzGpnmwKM2U/9jiNLcZ1qSm4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMWViYmZkZmYtMzJiNy0z ZjA1LTg0ODEtMmVjZTQ0NjdlOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApvS6G8ognVmDA5prUy4j0QlYJPmxXSyOPz7nVgdkYMJ4B5y0eC1v/a 4G3wzZfQo4VmjE/7xdeEl/6xm7Z2SCRQbCzwIdMBuz3LcOAzYzH0lw2W+mpNA+E7 I4vNv3EnRKl/nOaUnq7hryPuT4XYPnkrNRT7oWYVsP8P85uKeEhKErzs9lNYAOIP NS+UDjfqWfioyLmlaJhXWp/iV50ZmXKyMCHdIqthijuIKCJ2759ga70TGtkbg9us EosFI7Ote+y7rsdCG0w10ezP+ECyPBgvtk5/H1eWulO0tJAfzwAm8piZ5uXHH6Th gJRc5V3k7S//rrScedpFPE1gmtWShV8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:35 2025 by rpki-client