$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa File: 3d59fe02-e286-37b5-a4e0-ee928379db85.roa (raw, json) Hash identifier: CUH3B/R+0rLm8IP3VX/vQmwvPHNvZufufOkQIiBhoD0= Subject key identifier: F8:98:11:84:CF:9A:33:1C:23:AC:9D:87:62:1A:B6:58:46:E5:10:09 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584AFC1C0787C7BE279424834700 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 203724 IP address blocks: 161.69.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:07:87:c7:be:27:94:24:83:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=b9a0aad9-67af-4d76-b321-5ecc491f2c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:e6:53:fa:f5:dc:fe:4d:18:c2:fc:64:8d: 26:7c:64:9a:55:c4:cf:79:68:87:16:71:28:cd:ad: ff:f4:4f:b2:b6:1d:eb:c3:77:06:87:df:e6:dd:a1: c4:88:d9:d3:74:8d:f8:fe:17:4f:9c:9e:1f:04:c8: 0a:82:a4:a2:a1:2f:79:c2:10:b6:0b:e8:45:08:89: f1:39:cb:b5:ec:e1:44:36:f2:c4:3e:7f:3b:d6:05: f1:6a:2e:d0:03:3a:9f:ff:3c:b4:2e:07:07:36:1d: ed:1a:44:fc:30:4e:dc:35:17:14:c0:68:8d:06:c8: 42:32:0c:aa:d6:45:0e:36:13:5d:76:54:69:16:64: 6c:a7:9b:87:93:c7:fa:05:ff:2a:70:08:de:03:67: 81:59:c5:85:46:cf:3c:70:d4:06:5e:57:0f:63:02: 67:62:6e:40:cf:94:7d:47:1d:dd:92:8c:61:06:ee: e7:a8:64:0f:e5:db:94:35:7a:91:2d:30:e0:f1:54: 7a:04:7d:0c:2e:31:22:6a:50:38:5a:2a:46:7a:e9: 61:1d:09:38:28:85:10:c0:99:c2:3d:5a:c3:57:17: e0:de:7a:90:99:a1:94:17:25:36:36:80:93:5a:e9: f0:92:60:57:ec:2a:c3:13:10:c2:5d:6d:71:f1:ae: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:98:11:84:CF:9A:33:1C:23:AC:9D:87:62:1A:B6:58:46:E5:10:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e4:f0:65:1a:c5:c0:eb:a4:ec:b9:69:fc:c8:3a:90:1e:6d: 90:78:62:9e:2f:e0:f5:b8:ba:5b:66:a4:0a:29:64:01:8a:6d: a9:22:e5:c2:f3:67:10:0f:41:ad:48:c7:00:1e:62:3e:f1:cf: 88:b1:b5:34:4a:87:aa:7d:75:bf:0a:1d:c3:76:6f:44:88:b0: be:ea:43:a6:b5:ba:cc:01:ac:b5:16:9d:48:9d:ed:bf:87:8d: 01:ea:6b:17:8a:95:c5:4b:11:86:8f:d5:1c:8a:9b:c8:a5:8b: 23:91:4e:91:b8:5d:c3:f3:af:1f:88:0b:7e:07:c6:de:71:aa: c8:54:0d:ba:8c:26:b7:18:3a:b0:4e:29:f5:03:ba:da:9e:ae: 61:e8:d3:15:4c:14:fa:21:bf:61:f0:ee:e0:9a:ec:f9:49:2c: 84:77:e8:d8:ae:7b:b9:2a:35:79:de:83:df:be:a7:8f:66:2c: 78:e9:e2:f0:e2:3c:96:e5:cc:39:3c:fb:7f:52:1a:e5:0f:a7: 57:67:1b:d3:ad:cc:98:99:d4:55:5f:80:a8:d0:93:27:5b:55: 08:a8:ee:ad:a6:8c:b1:77:75:72:07:72:3a:8b:74:a1:b8:53: 24:df:5c:3d:b1:b5:1f:3c:13:b7:c1:e4:75:8c:84:1e:f9:94: d4:52:58:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAeHx74nlCSDRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YjlhMGFhZDktNjdhZi00ZDc2LWIzMjEtNWVjYzQ5MWYyYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9/mU/r13P5NGML8ZI0mfGSaVcTPeWiHFnEo za3/9E+yth3rw3cGh9/m3aHEiNnTdI34/hdPnJ4fBMgKgqSioS95whC2C+hFCInx Ocu17OFENvLEPn871gXxai7QAzqf/zy0LgcHNh3tGkT8ME7cNRcUwGiNBshCMgyq 1kUONhNddlRpFmRsp5uHk8f6Bf8qcAjeA2eBWcWFRs88cNQGXlcPYwJnYm5Az5R9 Rx3dkoxhBu7nqGQP5duUNXqRLTDg8VR6BH0MLjEialA4WipGeulhHQk4KIUQwJnC PVrDVxfg3nqQmaGUFyU2NoCTWunwkmBX7CrDExDCXW1x8a4RFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiYEYTPmjMcI6ydh2IatlhG5RAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvM2Q1OWZlMDItZTI4Ni0z N2I1LWE0ZTAtZWU5MjgzNzlkYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLk8GUaxcDrpOy5afzIOpAebZB4Yp4v4PW4ultmpAopZAGKbaki5cLz ZxAPQa1IxwAeYj7xz4ixtTRKh6p9db8KHcN2b0SIsL7qQ6a1uswBrLUWnUid7b+H jQHqaxeKlcVLEYaP1RyKm8iliyORTpG4XcPzrx+IC34Hxt5xqshUDbqMJrcYOrBO KfUDutqermHo0xVMFPohv2Hw7uCa7PlJLIR36Niue7kqNXneg9++p49mLHjp4vDi PJblzDk8+39SGuUPp1dnG9OtzJiZ1FVfgKjQkydbVQio7q2mjLF3dXIHcjqLdKG4 UyTfXD2xtR88E7fB5HWMhB75lNRSWNk= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:35 2025 by rpki-client