$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d2a207b-f934-3b52-90a2-08dbed9e5741.roa File: 4d2a207b-f934-3b52-90a2-08dbed9e5741.roa (raw, json) Hash identifier: csb1iavXEyUEYNrFfRKBojWYcd1FvV8CNAhSfrugKYE= Subject key identifier: 3C:C5:5B:63:98:C1:06:BD:9A:97:68:2A:00:35:36:29:88:2D:C7:94 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B1806D650A83B042F702EDD10 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d2a207b-f934-3b52-90a2-08dbed9e5741.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 161.69.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d6:50:a8:3b:04:2f:70:2e:dd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ba57802c-8f43-45ce-95d8-ce6afa43eaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:08:d4:ca:82:a1:c9:3b:5e:f1:83:e3:4f: 4b:37:d5:ca:6c:a5:b3:3a:75:fb:0a:bc:bf:70:0a: f2:4c:30:1c:24:81:b7:2c:b5:42:f2:f1:86:89:f0: 12:ba:90:f2:72:a9:41:a5:db:d9:9e:e9:a2:c5:52: c7:d9:63:b0:5a:55:59:a0:4f:a9:86:fb:1c:05:53: 6b:be:69:51:62:7e:d7:1a:20:11:26:6d:1f:d5:c8: 94:19:ad:60:a7:ab:cf:bd:c2:80:3e:58:a7:f2:7d: d8:4f:60:69:83:87:ab:a4:e7:b5:98:e7:d1:5c:76: f6:8b:f0:d3:2c:70:bb:92:06:d7:7f:48:cf:d4:b7: 42:9a:e2:65:ef:5c:e7:d3:68:dd:04:c3:32:9c:bf: c3:74:9d:e8:2b:c2:34:02:f5:f9:dd:af:06:e4:ff: 85:87:e8:88:bc:3a:cf:6f:9d:f1:78:e3:29:b3:19: 49:0c:36:b2:4b:4b:84:32:a4:90:d5:6a:25:51:88: 5a:06:ae:5f:08:ab:72:95:8d:9a:0f:8f:96:03:bc: 33:65:4d:67:9f:62:e4:36:35:cf:3a:e6:56:a4:ef: 03:5c:f7:5e:04:fa:68:10:9a:2c:f4:b6:56:89:b6: c2:e1:60:04:b6:02:5f:c3:83:e6:7f:25:e4:6f:f4: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C5:5B:63:98:C1:06:BD:9A:97:68:2A:00:35:36:29:88:2D:C7:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d2a207b-f934-3b52-90a2-08dbed9e5741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5b:eb:5c:95:49:9f:35:0d:12:86:87:91:cb:95:ce:c5:8e: f3:52:86:ba:5e:28:f5:ad:76:69:31:2c:aa:5f:a3:d0:6d:3a: 4f:45:db:f6:e4:5c:43:fb:07:4e:58:37:9a:ae:c0:af:48:71: d0:1f:06:86:aa:65:04:c1:07:45:ba:2e:4a:23:ce:8d:81:8f: 49:8a:9a:03:42:60:2e:53:7a:da:92:ba:e4:78:58:a8:6e:12: fd:2d:b9:ec:9a:68:a9:1d:4c:b9:e9:4e:99:35:c1:4f:7e:69: 91:24:d1:8f:33:1c:af:0a:d8:6c:b4:32:f7:c8:6e:31:29:98: 01:9d:3e:96:54:e9:2e:98:35:d8:66:6e:53:5e:71:5e:79:b0: 27:ac:ec:62:0f:48:b7:b1:28:1f:9e:8b:86:e9:2a:5e:9f:12: 21:24:89:43:4c:c7:b8:5f:f3:56:bb:6c:47:04:27:9a:90:49: 61:f7:ba:ac:a1:48:e7:bc:3c:af:2c:65:8e:05:65:44:a6:73: cd:e0:fc:21:a5:f6:98:6f:56:6a:4f:3b:4f:b9:bf:1f:ac:4a: 97:da:24:1c:83:43:24:9d:2d:4b:04:81:f5:cc:2a:c0:09:48: c7:85:5b:61:a5:94:9c:fb:48:e0:26:e3:06:27:e9:d9:74:7a: ae:f6:b3:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtZQqDsEL3Au3RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YmE1NzgwMmMtOGY0My00NWNlLTk1ZDgtY2U2YWZhNDNlYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZYI1MqCock7XvGD409LN9XKbKWzOnX7Cry/ cAryTDAcJIG3LLVC8vGGifASupDycqlBpdvZnumixVLH2WOwWlVZoE+phvscBVNr vmlRYn7XGiARJm0f1ciUGa1gp6vPvcKAPlin8n3YT2Bpg4erpOe1mOfRXHb2i/DT LHC7kgbXf0jP1LdCmuJl71zn02jdBMMynL/DdJ3oK8I0AvX53a8G5P+Fh+iIvDrP b53xeOMpsxlJDDayS0uEMqSQ1WolUYhaBq5fCKtylY2aD4+WA7wzZU1nn2LkNjXP OuZWpO8DXPdeBPpoEJos9LZWibbC4WAEtgJfw4PmfyXkb/T3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzFW2OYwQa9mpdoKgA1NimILceUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGQyYTIwN2ItZjkzNC0z YjUyLTkwYTItMDhkYmVkOWU1NzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRb61yVSZ81DRKGh5HLlc7FjvNShrpeKPWtdmkxLKpfo9BtOk9F2/bk XEP7B05YN5quwK9IcdAfBoaqZQTBB0W6Lkojzo2Bj0mKmgNCYC5TetqSuuR4WKhu Ev0tueyaaKkdTLnpTpk1wU9+aZEk0Y8zHK8K2Gy0MvfIbjEpmAGdPpZU6S6YNdhm blNecV55sCes7GIPSLexKB+ei4bpKl6fEiEkiUNMx7hf81a7bEcEJ5qQSWH3uqyh SOe8PK8sZY4FZUSmc83g/CGl9phvVmpPO0+5vx+sSpfaJByDQySdLUsEgfXMKsAJ SMeFW2GllJz7SOAm4wYn6dl0eq72s4c= -----END CERTIFICATE-----Generated at Thu Oct 9 06:23:55 2025 by rpki-client