$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4caedd40-d07c-3b26-aab0-3b6fb3599d13.roa File: 4caedd40-d07c-3b26-aab0-3b6fb3599d13.roa (raw, json) Hash identifier: tJbB9xoFWroW/AaCbZuXGtKQma2jAh8Uz6gx6a1twx0= Subject key identifier: 55:24:BC:28:4D:E0:01:A7:13:8B:33:BD:25:D0:8D:7D:6B:BD:FA:D6 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B382191BF6413B9DCAF142E00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4caedd40-d07c-3b26-aab0-3b6fb3599d13.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 161.69.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:91:bf:64:13:b9:dc:af:14:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=dd685f39-b147-45d1-83fc-0628adf33635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:73:82:f3:9e:bc:59:d7:24:43:90:d0:f2:e4: 97:91:75:00:a5:9d:80:fd:6b:be:fc:e5:27:e0:de: 47:7a:66:c1:32:e0:d8:ca:77:d8:fc:47:81:1d:45: 46:a1:08:80:35:54:7d:0f:86:c0:a7:ae:e2:98:64: 59:7f:6e:d2:e3:f5:48:69:d9:a1:53:0d:fb:bb:a4: db:88:d3:83:e6:b6:a7:ad:27:13:54:e5:20:ce:b4: 28:c1:be:14:4d:9b:8c:81:49:53:99:60:88:aa:30: 80:84:e3:87:e9:e2:96:2b:9b:b2:74:43:c1:c9:a3: 7e:f7:d1:dc:56:51:ad:7c:60:6e:5b:0b:97:63:be: 68:56:b2:ac:14:a4:07:d8:4a:b6:25:59:06:9f:02: 3c:ac:86:22:b1:83:42:94:cf:52:76:f2:13:56:74: 34:3a:19:ef:43:a1:51:c3:75:82:f8:92:e9:43:a2: 97:00:a9:6c:70:74:d0:95:18:3c:0c:33:b6:ec:af: 91:d7:64:31:f9:76:e8:6d:61:8e:14:d0:a0:1c:8a: 22:a9:ef:8a:65:f1:8e:11:81:74:a7:db:fa:1f:94: b6:71:67:b7:c3:03:e4:83:99:8d:7e:34:98:6a:c5: f0:b3:ef:cc:6c:0a:62:b5:0a:5d:b1:27:6f:22:2b: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:24:BC:28:4D:E0:01:A7:13:8B:33:BD:25:D0:8D:7D:6B:BD:FA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4caedd40-d07c-3b26-aab0-3b6fb3599d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0e:b8:aa:5e:15:42:df:77:b8:60:95:af:c7:af:76:00:2e: 0b:03:f0:49:66:99:08:8d:85:9d:ef:c2:7e:03:68:cf:99:db: e5:71:63:84:74:ee:ca:7e:4d:74:c4:4f:b7:ab:20:e3:01:63: af:83:64:9d:82:e4:0c:00:12:4a:1f:0c:c8:64:92:dc:d9:46: 9c:96:01:e0:41:7f:9e:7e:b7:91:5c:13:a2:d4:4f:5e:2c:d0: b3:7e:89:a8:07:2a:c2:58:27:3c:2b:9e:a9:fd:89:53:c4:5f: f3:ff:f9:6f:03:06:d0:b1:b8:aa:91:df:38:2e:d3:21:d0:9e: cb:02:35:75:cc:3d:ad:1c:de:21:b1:48:92:6c:bf:77:94:79: 2d:0d:67:38:45:18:2d:6d:f3:a2:0b:53:43:7e:0b:b4:eb:c6: fb:02:0c:fd:ee:33:13:af:66:20:25:18:26:cf:95:d3:60:c7: da:3f:13:6b:71:d1:54:48:a7:d4:30:34:d4:67:b9:25:22:c6: 2c:77:49:26:8a:4d:61:64:35:ea:ae:2f:fa:8d:20:c1:e1:7c: 9e:c8:07:79:91:cf:71:e3:df:e8:8d:8f:06:ed:d6:be:99:4f: 50:c1:ae:b8:2c:54:64:2a:48:c7:bb:3e:63:b5:e9:fe:a9:85: fa:e0:dc:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZG/ZBO53K8ULgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQ2ODVmMzktYjE0Ny00NWQxLTgzZmMtMDYyOGFkZjMzNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3OC8568WdckQ5DQ8uSXkXUApZ2A/Wu+/OUn 4N5HembBMuDYynfY/EeBHUVGoQiANVR9D4bAp67imGRZf27S4/VIadmhUw37u6Tb iNOD5ranrScTVOUgzrQowb4UTZuMgUlTmWCIqjCAhOOH6eKWK5uydEPByaN+99Hc VlGtfGBuWwuXY75oVrKsFKQH2Eq2JVkGnwI8rIYisYNClM9SdvITVnQ0OhnvQ6FR w3WC+JLpQ6KXAKlscHTQlRg8DDO27K+R12Qx+XbobWGOFNCgHIoiqe+KZfGOEYF0 p9v6H5S2cWe3wwPkg5mNfjSYasXws+/MbApitQpdsSdvIisugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUkvChN4AGnE4szvSXQjX1rvfrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGNhZWRkNDAtZDA3Yy0z YjI2LWFhYjAtM2I2ZmIzNTk5ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoOuKpeFULfd7hgla/Hr3YALgsD8ElmmQiNhZ3vwn4DaM+Z2+VxY4R0 7sp+TXTET7erIOMBY6+DZJ2C5AwAEkofDMhkktzZRpyWAeBBf55+t5FcE6LUT14s 0LN+iagHKsJYJzwrnqn9iVPEX/P/+W8DBtCxuKqR3zgu0yHQnssCNXXMPa0c3iGx SJJsv3eUeS0NZzhFGC1t86ILU0N+C7TrxvsCDP3uMxOvZiAlGCbPldNgx9o/E2tx 0VRIp9QwNNRnuSUixix3SSaKTWFkNequL/qNIMHhfJ7IB3mRz3Hj3+iNjwbt1r6Z T1DBrrgsVGQqSMe7PmO16f6phfrg3Fc= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:34 2025 by rpki-client