$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa File: 6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa (raw, json) Hash identifier: QT7UlWMzGNKb+Pnc4N7b/bvib9BGVRgnubelpVxHxzc= Subject key identifier: DD:CD:D0:FE:A7:96:39:C8:85:70:BB:6C:7C:95:6F:2D:6D:D6:E0:E6 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B382199B38696C88D8CD2B300 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 203724 IP address blocks: 161.69.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:99:b3:86:96:c8:8d:8c:d2:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=c29fa037-20a7-4a77-a38c-fc6975cc2aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:c7:12:0d:44:33:e3:bf:7b:96:77:bc:74: bf:66:16:32:7c:01:69:6f:81:2c:ed:3e:1c:99:4e: 9c:b5:86:7d:c1:f3:45:b9:b3:de:ec:e0:a3:72:14: 37:a1:a3:3b:b3:c8:79:b4:49:2b:13:3a:2b:e7:33: 3b:48:a7:88:89:bd:86:1d:f8:1a:3e:99:e9:b7:b8: a6:50:63:9b:b1:da:5c:a7:23:57:85:56:7a:0b:1b: 62:d0:2e:2b:34:d9:f9:76:54:07:d3:73:a4:b8:74: d6:45:c6:69:07:63:bc:fc:f5:fa:11:ca:b7:25:53: f2:d1:1f:3d:99:cf:2f:ac:9d:56:57:e5:98:b0:f2: b3:c9:fd:1e:75:ed:f9:28:d2:0c:ea:9e:63:d7:5e: d0:65:0d:9d:36:2b:7d:4e:3b:58:30:9b:fc:0d:b6: c0:88:7e:ea:d6:af:94:ab:39:c0:98:78:8d:54:ae: ce:9a:93:67:2d:7a:95:04:d1:6e:e8:2c:33:c2:20: c4:42:60:b7:f2:f2:76:c6:16:6f:aa:89:11:40:59: 18:dd:22:25:f7:dd:bf:64:d3:85:ac:d3:24:75:ac: 15:1d:b1:f1:e0:51:a5:bb:db:36:79:d9:13:b3:97: fc:1b:bc:97:e7:0c:6d:55:df:05:a3:66:f9:d8:c2: fd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CD:D0:FE:A7:96:39:C8:85:70:BB:6C:7C:95:6F:2D:6D:D6:E0:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:68:35:43:4c:07:e7:83:1e:8d:31:25:ff:7f:58:cd:37:a7: f9:70:e3:66:67:98:69:66:7a:fd:05:10:bc:bb:9f:1d:a0:94: 88:c5:4d:15:7b:3e:c2:75:16:d2:77:16:fb:d7:b2:4c:26:ea: 67:9c:65:03:f3:38:88:d9:ca:5f:63:9d:9a:90:e6:5a:82:cb: 7a:81:77:0b:70:b8:7a:22:e6:20:e8:66:2e:a4:65:56:f6:b9: 9a:b4:b9:5e:c1:35:c1:b2:de:af:d3:67:18:5a:a8:fc:f8:4e: bb:34:7d:3e:07:29:f5:db:a7:7f:1f:39:6a:81:ba:ad:e1:a5: 05:43:7c:b2:b8:cd:6d:b0:ad:5d:fa:04:ba:20:94:43:f4:ea: e9:6d:d7:43:b7:84:a0:df:72:69:de:9d:b2:6e:4c:b0:dd:bd: 51:22:7a:64:b9:98:fa:c6:31:40:e2:af:dd:16:77:91:e8:60: 00:8f:48:f6:78:b7:49:ee:f5:e8:68:cd:ff:7c:6c:5c:c5:80: b3:74:69:28:8b:38:04:44:52:e5:4f:b6:cd:cb:52:37:67:01: 1f:0c:c2:2b:2f:8b:b6:92:b4:c7:6e:5f:95:c0:dd:bf:15:ef: f7:1e:34:b2:99:4b:d7:9a:61:05:ae:a2:43:61:07:0d:c0:48: 00:63:87:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZmzhpbIjYzSswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YzI5ZmEwMzctMjBhNy00YTc3LWEzOGMtZmM2OTc1Y2MyYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1bHEg1EM+O/e5Z3vHS/ZhYyfAFpb4Es7T4c mU6ctYZ9wfNFubPe7OCjchQ3oaM7s8h5tEkrEzor5zM7SKeIib2GHfgaPpnpt7im UGObsdpcpyNXhVZ6Cxti0C4rNNn5dlQH03OkuHTWRcZpB2O8/PX6Ecq3JVPy0R89 mc8vrJ1WV+WYsPKzyf0ede35KNIM6p5j117QZQ2dNit9TjtYMJv8DbbAiH7q1q+U qznAmHiNVK7OmpNnLXqVBNFu6CwzwiDEQmC38vJ2xhZvqokRQFkY3SIl992/ZNOF rNMkdawVHbHx4FGlu9s2edkTs5f8G7yX5wxtVd8Fo2b52ML9xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3N0P6nljnIhXC7bHyVby1t1uDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNmRjOTVhN2MtMTU0Ni0z ZmQ0LTg4N2ItN2NhMWUxMmE4YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdoNUNMB+eDHo0xJf9/WM03p/lw42ZnmGlmev0FELy7nx2glIjFTRV7 PsJ1FtJ3FvvXskwm6mecZQPzOIjZyl9jnZqQ5lqCy3qBdwtwuHoi5iDoZi6kZVb2 uZq0uV7BNcGy3q/TZxhaqPz4Trs0fT4HKfXbp38fOWqBuq3hpQVDfLK4zW2wrV36 BLoglEP06ult10O3hKDfcmnenbJuTLDdvVEiemS5mPrGMUDir90Wd5HoYACPSPZ4 t0nu9ehozf98bFzFgLN0aSiLOAREUuVPts3LUjdnAR8Mwisvi7aStMduX5XA3b8V 7/ceNLKZS9eaYQWuokNhBw3ASABjh+c= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:49 2025 by rpki-client