$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8667f623-ff19-3d77-bafe-bc233bb08a6b.roa File: 8667f623-ff19-3d77-bafe-bc233bb08a6b.roa (raw, json) Hash identifier: rwgYhO3wCKKi/Yqk4SKi3VlXKAUYCoetnFohyzehdFI= Subject key identifier: BA:E8:D8:DF:62:7A:59:D0:37:B8:0A:F3:58:F7:6F:0B:8A:4C:95:53 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B1C36C99631456CF134C55500 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8667f623-ff19-3d77-bafe-bc233bb08a6b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 203724 IP address blocks: 161.69.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c9:96:31:45:6c:f1:34:c5:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=bbbfc312-ff04-4ea0-a074-00c7465efdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ac:a3:30:09:5d:54:12:4a:bd:ec:89:8f:cd: f4:f8:78:93:1a:ab:78:18:3b:69:3c:0b:f9:b8:e8: d8:92:1e:4a:58:20:40:78:07:b6:02:ad:9b:a4:75: 37:38:93:a1:3c:86:0b:8a:b9:e3:d0:30:27:ee:58: e8:bf:e7:86:ad:a5:fa:bf:32:c1:c6:f4:b8:db:c2: 0c:14:4a:72:04:9d:17:7f:4d:14:c6:46:4f:c1:a0: 6c:46:22:01:72:9d:ed:44:f5:5f:39:94:49:70:5f: 58:f6:95:d0:26:39:0b:c3:de:6f:d4:dc:2a:2c:e2: 3c:a0:45:5a:e1:35:37:e2:c7:09:9f:8a:b0:44:41: 09:fe:da:f2:bb:57:37:b8:f9:31:1d:12:31:5d:e9: ee:98:54:e8:6a:9a:46:bf:89:55:17:20:62:f8:b3: 04:ee:95:9e:3d:f8:33:7c:3e:f3:68:78:ff:cf:e9: f5:7a:ba:f6:6b:2e:c4:0f:33:8b:77:92:ad:55:4a: a0:87:55:af:49:8e:e5:d6:c1:cf:ce:97:fb:7f:a8: c7:d5:a3:bf:49:86:b0:b6:2b:c8:aa:b6:94:94:6f: 0f:70:63:a9:ea:7b:dc:ed:9c:b0:f1:63:ac:a6:97: 08:e5:67:24:63:25:1a:c1:1e:c8:ae:ef:7d:56:ab: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E8:D8:DF:62:7A:59:D0:37:B8:0A:F3:58:F7:6F:0B:8A:4C:95:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8667f623-ff19-3d77-bafe-bc233bb08a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2c:68:40:ab:5f:b7:1c:3f:db:9d:55:58:5b:1a:0a:e4:2d: 5d:bb:54:e6:66:25:fc:92:48:a9:10:9c:ec:86:03:d0:2c:ab: 23:ae:c7:7d:fc:68:3e:2a:99:a5:41:bf:40:23:3f:79:34:0d: 5d:77:a7:d6:5c:fc:42:89:db:1b:a7:cb:79:00:56:2b:8e:ad: 28:39:c7:6d:d1:50:4f:49:4e:c0:2a:b9:5e:40:00:6c:62:91: 3a:a7:a7:bb:4a:2b:d6:d2:b2:07:c9:e6:01:c2:ad:16:87:6b: 28:78:b1:2c:fc:fb:b2:5c:59:6a:41:7e:9d:aa:d2:33:f0:14: 01:d6:47:8f:79:7d:cb:8a:93:9e:e7:28:e1:89:65:6e:72:bc: bf:a2:03:5e:21:f1:50:b4:60:2f:69:7d:3a:25:77:e0:78:a0: e1:6a:0c:db:b3:74:1b:ce:19:35:d0:ac:19:53:81:aa:2c:f1: 03:78:da:1d:32:4c:25:36:91:a7:1a:95:e5:62:36:29:bd:89: 87:54:c3:a5:1b:6a:d5:87:f9:dc:ae:87:d4:07:6a:99:cb:60: 37:b9:2e:4e:87:c2:bb:48:59:09:53:4c:fb:1c:f1:47:3f:72: b3:d9:0b:c3:3a:67:88:a7:cc:f1:70:d8:e0:1b:d6:95:cd:d9: c4:f5:fb:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsmWMUVs8TTFVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YmJiZmMzMTItZmYwNC00ZWEwLWEwNzQtMDBjNzQ2NWVmZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26yjMAldVBJKveyJj830+HiTGqt4GDtpPAv5 uOjYkh5KWCBAeAe2Aq2bpHU3OJOhPIYLirnj0DAn7ljov+eGraX6vzLBxvS428IM FEpyBJ0Xf00UxkZPwaBsRiIBcp3tRPVfOZRJcF9Y9pXQJjkLw95v1NwqLOI8oEVa 4TU34scJn4qwREEJ/tryu1c3uPkxHRIxXenumFToappGv4lVFyBi+LME7pWePfgz fD7zaHj/z+n1err2ay7EDzOLd5KtVUqgh1WvSY7l1sHPzpf7f6jH1aO/SYawtivI qraUlG8PcGOp6nvc7Zyw8WOsppcI5WckYyUawR7Iru99Vquh0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLro2N9ielnQN7gK81j3bwuKTJVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvODY2N2Y2MjMtZmYxOS0z ZDc3LWJhZmUtYmMyMzNiYjA4YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEsaECrX7ccP9udVVhbGgrkLV27VOZmJfySSKkQnOyGA9AsqyOux338 aD4qmaVBv0AjP3k0DV13p9Zc/EKJ2xuny3kAViuOrSg5x23RUE9JTsAquV5AAGxi kTqnp7tKK9bSsgfJ5gHCrRaHayh4sSz8+7JcWWpBfp2q0jPwFAHWR495fcuKk57n KOGJZW5yvL+iA14h8VC0YC9pfTold+B4oOFqDNuzdBvOGTXQrBlTgaos8QN42h0y TCU2kacaleViNim9iYdUw6UbatWH+dyuh9QHapnLYDe5Lk6HwrtIWQlTTPsc8Uc/ crPZC8M6Z4inzPFw2OAb1pXN2cT1+yY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:36 2025 by rpki-client