$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3331e406-c85e-3ee6-8ad0-51f361655571.roa File: 3331e406-c85e-3ee6-8ad0-51f361655571.roa (raw, json) Hash identifier: c0lCUAQhjTdvzi0iqwylpphSgveSG1uhAXeHQMiQtfc= Subject key identifier: 85:3E:93:61:6B:9D:CD:17:32:2C:54:D5:47:9A:D1:0E:65:2D:80:D5 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B1C36CA0180B0D23D307961E0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3331e406-c85e-3ee6-8ad0-51f361655571.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 203724 IP address blocks: 161.69.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ca:01:80:b0:d2:3d:30:79:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=00a05831-b0f6-44eb-b527-53932592d32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:59:fd:42:df:a2:cb:da:cb:00:b9:db:d1: 63:52:77:2b:2a:a2:88:13:3f:48:91:66:7f:a5:54: fc:f4:5a:49:20:10:c3:3c:d7:a9:65:fd:f6:c9:7f: d8:29:61:a2:f2:4b:59:26:11:5f:06:94:65:c9:c1: d7:a9:3c:72:27:e1:98:b0:db:1f:99:61:82:c3:92: 9c:b9:22:45:ca:0f:42:ff:8e:89:db:4a:d3:9e:56: 47:c8:9d:6f:ae:db:52:36:de:56:9a:d7:fd:5a:fe: b0:a5:25:cc:b0:df:b4:b7:14:25:3e:61:dc:2b:c0: 49:c5:a0:4d:b6:11:f7:01:88:5d:f3:93:ec:ae:44: 8a:5b:9c:1a:36:bc:98:96:eb:d8:d7:8f:1f:9b:60: e5:cb:4e:e1:d3:b2:05:7a:d6:b3:74:70:39:ea:46: da:d5:d1:a1:50:31:f0:32:09:59:63:a7:8c:5a:f5: 41:54:09:13:0b:53:a5:2e:b8:c7:31:5d:f0:1c:2a: 17:60:33:13:82:ab:93:80:06:23:66:29:db:2c:e7: 17:82:3b:40:41:a1:95:53:13:8d:fb:2e:1e:08:1a: 16:43:c7:09:24:b7:f3:db:72:69:4e:ac:c7:8e:bb: 6c:39:21:ee:0c:bc:98:fd:59:1f:b3:69:c0:bd:e9: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:93:61:6B:9D:CD:17:32:2C:54:D5:47:9A:D1:0E:65:2D:80:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3331e406-c85e-3ee6-8ad0-51f361655571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:63:4d:9c:99:15:22:92:b7:d8:16:98:dc:b8:6c:d4:48:7c: 61:40:24:15:59:9c:c3:aa:43:2b:1c:08:a9:8a:8e:91:6b:2c: a1:41:37:f6:50:64:cb:9d:49:5f:c6:71:3e:14:d0:5c:ff:86: ff:fe:60:07:bb:56:ef:a0:4c:12:fe:d0:ac:3e:3c:5d:8a:75: 60:06:d5:93:13:a3:df:2f:93:d9:4d:78:b9:ce:33:95:6a:3b: b2:b5:76:4d:1d:e6:9b:f9:4b:d3:de:77:9a:97:ad:4a:18:43: 45:ea:0d:cb:9d:b2:87:42:1c:7e:a2:5f:e7:97:ed:ed:7b:dd: 3c:8f:0a:0f:b1:38:83:d7:9a:2d:78:6f:96:e2:c2:71:6a:86: b0:94:08:f7:64:8e:b6:5c:92:ab:b9:d9:a6:f6:0d:d9:77:93: d4:63:d8:e6:f2:98:d0:06:a6:fb:39:cd:56:94:fb:ee:3e:f1: 6b:ff:8c:f7:ee:15:19:0f:30:1a:26:0c:9c:43:20:a4:28:67: c5:fb:de:f6:00:f5:60:92:be:42:19:9d:31:9a:cc:80:89:cc: fb:da:80:d8:3d:6d:c6:a0:79:6a:ed:ec:fb:4e:c5:c3:13:38: 03:49:32:8e:da:ec:05:c3:93:f3:75:cf:e8:dc:20:df:c9:f1: 09:00:c1:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsoBgLDSPTB5YeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MDBhMDU4MzEtYjBmNi00NGViLWI1MjctNTM5MzI1OTJkMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFJZ/ULfosvaywC529FjUncrKqKIEz9IkWZ/ pVT89FpJIBDDPNepZf32yX/YKWGi8ktZJhFfBpRlycHXqTxyJ+GYsNsfmWGCw5Kc uSJFyg9C/46J20rTnlZHyJ1vrttSNt5Wmtf9Wv6wpSXMsN+0txQlPmHcK8BJxaBN thH3AYhd85PsrkSKW5waNryYluvY148fm2Dly07h07IFetazdHA56kba1dGhUDHw MglZY6eMWvVBVAkTC1OlLrjHMV3wHCoXYDMTgquTgAYjZinbLOcXgjtAQaGVUxON +y4eCBoWQ8cJJLfz23JpTqzHjrtsOSHuDLyY/Vkfs2nAvekhWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU+k2Frnc0XMixU1Uea0Q5lLYDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMzMzMWU0MDYtYzg1ZS0z ZWU2LThhZDAtNTFmMzYxNjU1NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpjTZyZFSKSt9gWmNy4bNRIfGFAJBVZnMOqQyscCKmKjpFrLKFBN/ZQ ZMudSV/GcT4U0Fz/hv/+YAe7Vu+gTBL+0Kw+PF2KdWAG1ZMTo98vk9lNeLnOM5Vq O7K1dk0d5pv5S9Ped5qXrUoYQ0XqDcudsodCHH6iX+eX7e173TyPCg+xOIPXmi14 b5biwnFqhrCUCPdkjrZckqu52ab2Ddl3k9Rj2ObymNAGpvs5zVaU++4+8Wv/jPfu FRkPMBomDJxDIKQoZ8X73vYA9WCSvkIZnTGazICJzPvagNg9bcageWrt7PtOxcMT OANJMo7a7AXDk/N1z+jcIN/J8QkAweU= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:35 2025 by rpki-client