$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a94bb32a-312a-3839-b682-65a8d00d5d63.roa File: a94bb32a-312a-3839-b682-65a8d00d5d63.roa (raw, json) Hash identifier: 8KXBzL7L3m8nXBGGoJ3/P8P74LBUqJ8ig7hdnWZNJ0o= Subject key identifier: 47:08:7C:EE:F8:86:F7:C1:2B:45:F8:51:77:D1:71:40:A5:39:14:77 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B477C77A481D4BFD787AF2700 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a94bb32a-312a-3839-b682-65a8d00d5d63.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 203724 IP address blocks: 161.69.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:77:a4:81:d4:bf:d7:87:af:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=deec10b4-ac74-477f-b6c6-e1f77853e8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:8f:f5:65:09:f7:85:00:5f:16:7f:e4:a6: fb:91:5c:ca:d7:b8:94:ea:5b:a8:37:5e:41:39:f6: b2:85:bb:0e:b8:61:fd:77:93:3c:43:85:e6:d3:55: 3b:c7:b4:5a:f7:6e:76:86:52:3d:02:ed:73:f8:a9: 69:6f:26:99:ab:ff:90:75:ef:47:ac:7c:6f:a8:6f: 18:69:85:aa:d1:b5:a2:82:55:f6:e2:8d:ae:3a:c3: df:a0:5d:d5:13:26:b5:32:60:ee:a4:b9:aa:f1:07: 99:00:78:b9:fb:44:ec:7e:9b:95:28:1a:f6:01:d2: da:dc:44:2f:55:8c:f7:61:9e:5f:4d:13:87:a9:86: 85:0b:e0:3b:0a:4c:00:22:58:b3:b1:aa:58:36:6f: 27:c1:90:0b:08:a2:65:1d:ba:1b:a4:06:af:31:bd: 9a:c0:b7:d0:65:9a:ff:07:bb:97:dc:99:d5:83:e9: b6:c8:3f:48:07:c7:19:48:57:bf:a1:87:67:0a:03: 9d:aa:af:e5:49:04:0a:28:75:ac:bd:f5:f9:41:00: 1a:da:db:8d:6f:d8:fd:54:5e:7a:ea:6b:61:c2:ae: 98:ae:12:b6:4b:ea:a8:90:25:fb:c7:e4:4e:0d:76: d8:46:1a:0f:c2:be:6e:eb:b4:09:8e:ef:fe:bc:40: 62:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:08:7C:EE:F8:86:F7:C1:2B:45:F8:51:77:D1:71:40:A5:39:14:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a94bb32a-312a-3839-b682-65a8d00d5d63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e8:9a:e1:f7:50:1b:5a:b9:a1:4c:dc:48:52:08:00:03:4c: 46:3b:b1:4d:df:1f:a0:d3:fb:c5:d8:b2:cb:4d:22:e6:4b:56: 76:2e:d8:e4:07:c8:5d:1a:43:d2:c2:bb:b1:ee:df:f3:1e:28: 2b:17:78:0d:5a:b8:b6:90:6e:50:6d:01:03:0d:5e:0c:a8:f8: e8:a1:c3:07:af:23:dc:86:52:80:70:c3:0d:c0:d7:dd:8c:f8: a4:3a:ac:03:96:76:1b:ce:36:f7:66:0d:4c:16:32:19:09:e5: a5:c8:cc:d6:36:94:16:30:dd:24:f3:10:9e:78:70:f8:00:36: 7e:f9:1e:8a:92:37:96:ed:7e:b6:9e:ee:99:9a:f3:81:2f:18: a2:30:69:e7:c5:7a:2d:79:af:56:7d:be:b9:a3:ab:95:e8:6b: 86:b0:d0:b1:b6:7c:32:1b:7c:99:1d:58:d7:d0:e0:36:b3:d1: 49:80:cc:53:12:67:fb:ef:05:bc:fd:a9:4b:60:17:0f:35:3b: 32:24:92:0b:af:72:f1:eb:ab:2b:dd:e8:fc:8d:dc:f6:12:bf: 93:25:69:f8:d2:29:9f:86:ea:6b:d8:96:93:45:47:6d:6e:d0: 8d:d1:8e:5c:85:77:3d:0b:1a:bf:46:ab:65:3c:dc:f2:71:5d: 28:cb:dc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHekgdS/14evJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZGVlYzEwYjQtYWM3NC00NzdmLWI2YzYtZTFmNzc4NTNlOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseeP9WUJ94UAXxZ/5Kb7kVzK17iU6luoN15B OfayhbsOuGH9d5M8Q4Xm01U7x7Ra9252hlI9Au1z+KlpbyaZq/+Qde9HrHxvqG8Y aYWq0bWiglX24o2uOsPfoF3VEya1MmDupLmq8QeZAHi5+0TsfpuVKBr2AdLa3EQv VYz3YZ5fTROHqYaFC+A7CkwAIlizsapYNm8nwZALCKJlHbobpAavMb2awLfQZZr/ B7uX3JnVg+m2yD9IB8cZSFe/oYdnCgOdqq/lSQQKKHWsvfX5QQAa2tuNb9j9VF56 6mthwq6YrhK2S+qokCX7x+RODXbYRhoPwr5u67QJju/+vEBi3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcIfO74hvfBK0X4UXfRcUClORR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYTk0YmIzMmEtMzEyYS0z ODM5LWI2ODItNjVhOGQwMGQ1ZDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzomuH3UBtauaFM3EhSCAADTEY7sU3fH6DT+8XYsstNIuZLVnYu2OQH yF0aQ9LCu7Hu3/MeKCsXeA1auLaQblBtAQMNXgyo+OihwwevI9yGUoBwww3A192M +KQ6rAOWdhvONvdmDUwWMhkJ5aXIzNY2lBYw3STzEJ54cPgANn75HoqSN5btfrae 7pma84EvGKIwaefFei15r1Z9vrmjq5Xoa4aw0LG2fDIbfJkdWNfQ4Daz0UmAzFMS Z/vvBbz9qUtgFw81OzIkkguvcvHrqyvd6PyN3PYSv5MlafjSKZ+G6mvYlpNFR21u 0I3RjlyFdz0LGr9Gq2U83PJxXSjL3OA= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:24 2025 by rpki-client