$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8891f72d-79e8-3207-b7cc-72a7aa7cc4e2.roa File: 8891f72d-79e8-3207-b7cc-72a7aa7cc4e2.roa (raw, json) Hash identifier: eCuVBXxwy8FftzLxrklLOvuH2+6ytepNkaYLcUMrAAs= Subject key identifier: 72:E5:92:63:1A:01:D0:B1:A0:FA:77:31:0F:06:A6:7F:BC:A1:BB:39 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B6631F3861599D57723A74180 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8891f72d-79e8-3207-b7cc-72a7aa7cc4e2.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 203724 IP address blocks: 161.69.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f3:86:15:99:d5:77:23:a7:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=a5532028-dd9c-4003-90ef-1bfa11093fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:5f:54:ca:2e:9c:eb:31:52:2e:d5:a8:2b: 68:87:e5:4c:f8:3b:ad:56:b5:96:51:08:7d:7a:77: 99:40:fa:ae:9a:43:15:bd:cf:06:04:d5:1c:c7:b8: 2a:3b:ba:f0:20:56:b6:00:d5:db:f1:aa:c6:6d:e8: 87:38:9f:ec:e6:a5:b0:42:84:d4:be:8d:64:3f:10: 59:f4:4c:1b:e2:06:c0:aa:53:c0:4e:17:c6:99:cc: 48:6b:0d:bb:e8:a9:c7:32:26:85:e8:66:77:0e:61: 19:47:c0:45:4c:a2:84:83:04:f8:d1:40:b6:85:bf: 3c:ff:4a:f4:13:5a:06:f2:67:10:9b:66:2c:8d:10: 69:1c:e1:f9:12:31:02:b4:d0:3a:7e:f8:91:ae:eb: e8:12:7b:d6:78:99:8e:06:66:55:d2:44:26:9e:a3: c4:ab:b1:77:d1:b2:2f:60:0c:20:83:dd:d2:59:10: 1b:b8:32:92:63:da:62:50:4c:73:0e:79:a4:8a:10: a7:59:cc:5c:b5:64:92:fb:99:a2:13:45:a5:e3:31: 9e:cc:f4:8c:a0:ce:bc:20:af:78:ce:4c:34:65:30: 2f:ed:59:57:cf:36:9b:76:f3:68:b0:29:9e:c5:91: 57:92:6b:ff:f5:5d:93:b1:86:f9:1f:d0:24:68:0e: 90:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E5:92:63:1A:01:D0:B1:A0:FA:77:31:0F:06:A6:7F:BC:A1:BB:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8891f72d-79e8-3207-b7cc-72a7aa7cc4e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ea:ce:21:5f:e5:d7:4f:ff:46:4d:0d:8f:99:67:98:0f:41: f7:87:65:09:ae:1f:60:dd:20:05:49:a2:89:fc:eb:09:ee:f8: 5d:5e:31:38:92:2c:de:d7:55:cf:02:cd:eb:2c:44:48:44:d5: 14:03:7b:0c:80:1c:80:c8:9d:bd:25:36:c3:87:78:dd:2f:a8: c9:a2:9b:b9:f9:29:20:11:47:0e:6b:38:51:ea:e4:76:8e:33: a8:cf:30:ea:9f:d8:d3:9f:e6:1b:6d:da:02:78:2f:48:ef:ec: 20:f0:05:e0:eb:7e:65:55:5a:a6:2c:34:bb:43:95:ba:13:9c: d0:eb:2d:79:d9:6b:4f:82:e4:b0:b7:9b:7d:c5:72:fc:a4:ae: 96:df:f3:ae:8c:6f:7a:3f:44:f0:29:44:de:26:d3:ea:67:07: f8:1f:f5:e7:16:b9:10:76:c1:05:6a:bf:87:cc:83:4b:05:b5: 8f:48:b1:ff:24:da:7a:aa:ca:6c:bc:5a:08:9d:c7:a7:dd:e8: 9f:b4:3a:db:e5:9f:61:45:2c:d6:f5:76:41:e4:2f:c4:09:93: 3f:55:b1:01:79:ab:b8:41:ea:fc:15:cf:37:77:28:ba:6f:48: 9a:3f:a0:25:eb:35:78:48:e0:ac:b7:32:b1:00:04:7d:7d:99: 51:b7:77:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfOGFZnVdyOnQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YTU1MzIwMjgtZGQ5Yy00MDAzLTkwZWYtMWJmYTExMDkzZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd9fVMounOsxUi7VqCtoh+VM+DutVrWWUQh9 eneZQPqumkMVvc8GBNUcx7gqO7rwIFa2ANXb8arGbeiHOJ/s5qWwQoTUvo1kPxBZ 9Ewb4gbAqlPAThfGmcxIaw276KnHMiaF6GZ3DmEZR8BFTKKEgwT40UC2hb88/0r0 E1oG8mcQm2YsjRBpHOH5EjECtNA6fviRruvoEnvWeJmOBmZV0kQmnqPEq7F30bIv YAwgg93SWRAbuDKSY9piUExzDnmkihCnWcxctWSS+5miE0Wl4zGezPSMoM68IK94 zkw0ZTAv7VlXzzabdvNosCmexZFXkmv/9V2TsYb5H9AkaA6Q4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLlkmMaAdCxoPp3MQ8Gpn+8obs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvODg5MWY3MmQtNzllOC0z MjA3LWI3Y2MtNzJhN2FhN2NjNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELqziFf5ddP/0ZNDY+ZZ5gPQfeHZQmuH2DdIAVJoon86wnu+F1eMTiS LN7XVc8CzessREhE1RQDewyAHIDInb0lNsOHeN0vqMmim7n5KSARRw5rOFHq5HaO M6jPMOqf2NOf5htt2gJ4L0jv7CDwBeDrfmVVWqYsNLtDlboTnNDrLXnZa0+C5LC3 m33Fcvykrpbf866Mb3o/RPApRN4m0+pnB/gf9ecWuRB2wQVqv4fMg0sFtY9Isf8k 2nqqymy8Wgidx6fd6J+0Otvln2FFLNb1dkHkL8QJkz9VsQF5q7hB6vwVzzd3KLpv SJo/oCXrNXhI4Ky3MrEABH19mVG3d0s= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:52 2025 by rpki-client