$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa File: 2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa (raw, json) Hash identifier: 2+TmNk7l/+H+VFUn26pXGypbprcBEtMmP1zY8tromJE= Subject key identifier: 48:DA:73:90:39:38:10:EC:51:9D:50:88:1E:36:68:0F:35:C3:B2:B7 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B382199E33281A9E6A7F39240 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 203724 IP address blocks: 161.69.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:99:e3:32:81:a9:e6:a7:f3:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=714b6458-1159-426d-bdbd-f2c24f1f5024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:2a:87:c1:37:ed:54:56:bb:1c:e8:ee:03: db:46:a4:96:9d:d9:7d:63:d2:61:f8:ea:f9:11:a6: 83:28:19:14:4e:4b:b9:20:09:48:53:34:81:c9:98: 69:31:fb:23:23:73:fb:8a:24:41:eb:c1:7c:ea:c3: ac:ab:09:4f:83:62:0e:d2:a4:83:1c:ce:97:ab:ed: b7:42:c0:7d:95:62:44:26:e9:d2:46:e0:77:b4:75: 9a:5f:00:0c:a8:ec:ab:63:c8:fa:b7:98:d5:f0:ac: 12:d8:2d:2c:ef:51:25:fb:d5:4c:24:c4:d6:5e:7a: e6:8c:70:a6:53:0b:45:92:93:86:cc:b4:14:80:0f: 53:5d:1e:5e:87:eb:12:75:1b:13:23:9c:df:d4:b6: e3:d8:63:69:d5:f2:6a:8f:7e:40:28:05:8e:f7:62: 9e:73:2d:d6:05:60:44:60:db:8d:ea:8b:9e:5f:37: 9a:03:66:e4:f3:ba:84:f0:7e:39:e8:97:30:f2:8c: 58:d1:a4:3c:57:fe:77:fd:bb:4d:13:14:9d:17:83: 95:e5:98:4b:1a:70:d2:01:96:52:f5:b3:f4:43:0d: ee:9c:b9:36:15:ed:8f:39:ca:a4:b0:8d:d9:34:ee: cf:42:7a:e0:a3:af:5f:ec:ee:68:cf:18:1a:e3:75: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:73:90:39:38:10:EC:51:9D:50:88:1E:36:68:0F:35:C3:B2:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:42:a4:34:71:bd:14:31:8b:8b:80:e9:8f:17:ad:2a:79:b2: 39:6a:6c:02:e6:46:f8:75:38:72:23:44:bb:81:6f:02:b2:75: 1f:a5:f1:95:41:4c:8d:a0:cc:23:c4:87:2c:ab:51:0a:da:8a: 68:62:e7:8f:2c:a4:e1:99:3d:a6:1d:5a:71:f1:82:3b:02:99: 7d:0c:09:6b:4a:7b:37:2e:4d:e7:3b:76:cb:d3:e9:68:25:8f: a8:7b:d3:c6:2d:b5:41:4c:77:c9:c1:35:e3:c6:3c:62:46:f1: 88:66:0e:aa:f9:41:b8:fc:dd:6f:e5:c2:61:94:f5:b7:0b:6b: 49:5e:43:51:f9:a4:22:5a:09:f3:5c:c0:cb:04:90:5a:28:b5: 8c:46:35:6a:66:8d:d8:4a:e7:ce:48:2a:18:0b:a1:7f:aa:8f: fe:d6:27:5b:6f:82:8c:f8:b6:69:90:f0:a4:81:48:46:e6:68: f1:37:f6:3a:70:1a:2a:c5:67:08:39:d6:06:40:1a:54:67:4e: ee:95:2e:7c:85:c8:66:9d:f6:3a:28:e4:ac:33:ab:13:b2:2e: 55:43:27:6d:69:ee:c4:31:cf:64:d7:13:cb:ff:19:41:66:34: c6:ad:2f:87:26:bf:61:37:e8:d1:6b:df:b6:b9:aa:6c:5d:25: 1d:85:6c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZnjMoGp5qfzkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NzE0YjY0NTgtMTE1OS00MjZkLWJkYmQtZjJjMjRmMWY1MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfoqh8E37VRWuxzo7gPbRqSWndl9Y9Jh+Or5 EaaDKBkUTku5IAlIUzSByZhpMfsjI3P7iiRB68F86sOsqwlPg2IO0qSDHM6Xq+23 QsB9lWJEJunSRuB3tHWaXwAMqOyrY8j6t5jV8KwS2C0s71El+9VMJMTWXnrmjHCm UwtFkpOGzLQUgA9TXR5eh+sSdRsTI5zf1Lbj2GNp1fJqj35AKAWO92Kecy3WBWBE YNuN6oueXzeaA2bk87qE8H456Jcw8oxY0aQ8V/53/btNExSdF4OV5ZhLGnDSAZZS 9bP0Qw3unLk2Fe2POcqksI3ZNO7PQnrgo69f7O5ozxga43Vz7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjac5A5OBDsUZ1QiB42aA81w7K3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMmU4ZDk4M2MtYTA2ZS0z M2I1LWFkNDgtYTVjMGQ5OTY0NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNCpDRxvRQxi4uA6Y8XrSp5sjlqbALmRvh1OHIjRLuBbwKydR+l8ZVB TI2gzCPEhyyrUQraimhi548spOGZPaYdWnHxgjsCmX0MCWtKezcuTec7dsvT6Wgl j6h708YttUFMd8nBNePGPGJG8YhmDqr5Qbj83W/lwmGU9bcLa0leQ1H5pCJaCfNc wMsEkFootYxGNWpmjdhK585IKhgLoX+qj/7WJ1tvgoz4tmmQ8KSBSEbmaPE39jpw GirFZwg51gZAGlRnTu6VLnyFyGad9joo5KwzqxOyLlVDJ21p7sQxz2TXE8v/GUFm NMatL4cmv2E36NFr37a5qmxdJR2FbEY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:31 2025 by rpki-client