$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/561f4cde-424c-36d7-8e84-46e53de133f0.roa File: 561f4cde-424c-36d7-8e84-46e53de133f0.roa (raw, json) Hash identifier: ZVW7RAcpbMb8VYmIcr9Khgxvk4wJwQhLAhpPqaXOOrE= Subject key identifier: 83:FA:F3:3C:CA:9E:9F:A8:EF:73:CA:F1:2B:17:18:74:D7:AA:9C:C9 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B38219AA76E7819620F6D38E0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/561f4cde-424c-36d7-8e84-46e53de133f0.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 161.69.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9a:a7:6e:78:19:62:0f:6d:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=f8fa215b-7f93-461c-ba40-015b57d1e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5d:75:89:27:fb:a1:7b:5d:15:aa:ba:d6:3c: a3:87:66:02:7f:37:46:0f:dc:90:31:4d:14:3f:2c: 40:b2:1c:72:20:cc:56:55:33:bf:e0:b7:c8:c0:cc: c7:31:08:ca:eb:8d:22:5b:87:91:7d:d0:8b:4a:90: 07:8c:10:ff:4f:c4:af:88:49:4c:a3:9f:37:b9:84: 12:77:6f:e8:ad:86:1a:25:8f:88:c2:8a:b6:5d:e7: a7:1e:e9:23:11:25:99:7b:41:9f:03:e6:75:37:35: 51:3a:1e:61:1a:86:85:1e:bd:da:48:0a:6d:be:ca: 8a:52:ce:ed:a7:2c:97:c2:83:42:c6:8a:e4:98:3f: b5:7c:cd:db:9c:96:00:b8:5a:b3:fd:25:74:d7:52: e1:8c:ad:46:65:95:89:87:f7:42:8b:75:40:ef:6d: 49:64:42:66:20:aa:ce:2c:b2:a6:73:58:80:2d:80: 4a:e0:07:b3:3f:fd:db:ae:ef:ee:3a:d1:f6:b2:be: c8:6e:08:93:40:98:69:ee:31:ad:7a:05:84:34:f0: 37:2e:f8:39:c2:8f:c6:8d:3a:31:a1:f8:ab:36:87: c8:a2:3b:f6:26:2d:ee:c8:d1:1b:be:bc:92:6c:84: 98:a9:f7:06:aa:88:47:fb:dc:a7:7a:dc:3f:fc:c8: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FA:F3:3C:CA:9E:9F:A8:EF:73:CA:F1:2B:17:18:74:D7:AA:9C:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/561f4cde-424c-36d7-8e84-46e53de133f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:eb:db:8b:30:b1:a8:4b:94:12:76:08:ae:60:49:c1:d5:5f: d5:e7:39:b8:35:92:0a:37:f8:7e:3b:27:e1:62:9f:2e:e8:e4: c0:01:27:59:be:c6:b2:4b:72:bf:9e:b8:6e:07:8b:f3:c0:66: 80:07:43:fb:a8:87:33:fd:f1:12:36:2b:99:dc:d1:a6:bc:62: 47:02:83:95:24:96:b5:58:97:bd:1a:ab:b7:29:a0:29:5b:f2: 3f:38:98:19:c3:cc:82:0d:b4:ce:af:33:88:a1:d3:8f:7e:0c: e8:5b:65:4e:d1:90:8d:d3:bf:5d:65:b9:13:9d:f0:f8:b4:2e: 27:32:5b:55:ab:c3:ba:c9:68:7b:da:68:ff:bf:ed:32:e7:31: 9b:4e:3f:a5:d5:73:01:89:3f:93:07:c7:b2:9b:d6:4b:91:1f: aa:29:56:4b:5f:da:59:73:b9:87:a7:45:3b:6c:2f:af:b8:f9: ad:b0:6b:5d:7a:ad:6f:ec:b4:31:6c:19:c9:e3:a5:84:58:db: a9:99:8e:b1:43:59:75:9f:29:95:80:16:16:80:91:13:3e:79: 69:71:d0:0d:39:8e:d0:ea:97:c0:e3:b8:3c:3e:ee:e5:1a:07: 63:90:68:15:00:34:d8:7c:03:51:7b:1a:f2:70:8c:4d:14:17: b5:5a:ff:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZqnbngZYg9tOOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjhmYTIxNWItN2Y5My00NjFjLWJhNDAtMDE1YjU3ZDFlNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV11iSf7oXtdFaq61jyjh2YCfzdGD9yQMU0U PyxAshxyIMxWVTO/4LfIwMzHMQjK640iW4eRfdCLSpAHjBD/T8SviElMo583uYQS d2/orYYaJY+Iwoq2XeenHukjESWZe0GfA+Z1NzVROh5hGoaFHr3aSAptvsqKUs7t pyyXwoNCxorkmD+1fM3bnJYAuFqz/SV011LhjK1GZZWJh/dCi3VA721JZEJmIKrO LLKmc1iALYBK4AezP/3bru/uOtH2sr7IbgiTQJhp7jGtegWENPA3Lvg5wo/GjTox ofirNofIojv2Ji3uyNEbvrySbISYqfcGqohH+9ynetw//Mgs+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIP68zzKnp+o73PK8SsXGHTXqpzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNTYxZjRjZGUtNDI0Yy0z NmQ3LThlODQtNDZlNTNkZTEzM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUULMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnr24swsahLlBJ2CK5gScHVX9XnObg1kgo3+H47J+Finy7o5MABJ1m+ xrJLcr+euG4Hi/PAZoAHQ/uohzP98RI2K5nc0aa8YkcCg5UklrVYl70aq7cpoClb 8j84mBnDzIINtM6vM4ih049+DOhbZU7RkI3Tv11luROd8Pi0LicyW1Wrw7rJaHva aP+/7TLnMZtOP6XVcwGJP5MHx7Kb1kuRH6opVktf2llzuYenRTtsL6+4+a2wa116 rW/stDFsGcnjpYRY26mZjrFDWXWfKZWAFhaAkRM+eWlx0A05jtDql8DjuDw+7uUa B2OQaBUANNh8A1F7GvJwjE0UF7Va/xQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:23:36 2025 by rpki-client