$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ce39d691-4e41-3676-9593-1093107776f8.roa File: ce39d691-4e41-3676-9593-1093107776f8.roa (raw, json) Hash identifier: TF5M7SfalN1z+5mftuaLnAixzsZUbLzDPtU+Y2q3YAo= Subject key identifier: BC:BA:B3:32:5D:19:9F:3D:54:9B:07:E4:CE:13:19:1D:A1:A9:D4:73 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B1806D62D74184BE1DDECE680 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ce39d691-4e41-3676-9593-1093107776f8.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 161.69.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d6:2d:74:18:4b:e1:dd:ec:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=1cec66ba-bb03-44bd-8d57-2d2648af0dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:65:91:81:ac:37:6a:f7:f6:04:a8:12:83: 55:4d:39:f1:f0:f5:c3:ab:4d:af:3c:06:2c:3a:15: cf:28:7f:e5:44:85:d8:4e:04:f5:60:4d:e3:e0:6f: 8b:5e:a8:dd:26:36:36:0e:10:ce:1a:46:1f:c5:dc: bd:40:25:3b:d6:d1:0a:51:a4:71:51:81:f1:80:fc: b6:8a:1c:8f:88:08:0a:38:ff:9c:ff:05:9e:9a:0e: 3e:bb:a3:51:61:62:be:af:03:fa:cc:a4:99:dc:c5: ad:80:93:0f:7b:1e:57:eb:63:ba:22:1c:b8:b9:47: 8d:4e:3a:28:a5:c8:79:ec:74:5f:4a:57:d9:8b:b7: e6:9d:f7:d5:0f:11:62:44:2e:4f:95:c7:dc:41:e3: 98:ed:67:61:f8:7a:31:b3:65:a9:a1:f7:72:85:5f: 28:17:6d:84:97:97:68:45:cc:fb:be:38:4c:f1:31: 8d:cc:47:f5:35:9d:d9:c2:1d:01:52:16:c3:0a:e3: 49:2f:2d:d8:9f:67:ad:c8:79:ed:f7:f3:2c:11:7a: 63:65:7c:45:d5:06:c4:de:f2:e0:21:cb:92:31:b2: 5e:a9:55:ec:7d:47:9b:af:c4:42:0c:6f:7b:87:39: c7:60:d4:0d:88:85:b3:3f:6c:64:f0:94:5c:37:94: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BA:B3:32:5D:19:9F:3D:54:9B:07:E4:CE:13:19:1D:A1:A9:D4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ce39d691-4e41-3676-9593-1093107776f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:7c:0b:d4:5c:2d:fc:bb:13:cb:78:4e:91:c1:0e:f7:43:8e: 5b:08:b0:0f:bb:89:d9:2e:9d:dd:1c:f7:33:e5:95:fa:8f:13: a0:88:ae:4b:01:4b:7c:db:c3:97:de:eb:53:0f:b6:1e:99:95: 13:53:89:d9:33:8e:29:fc:5c:e3:3f:5f:6f:19:72:60:d1:e4: 4a:16:20:e4:83:25:c8:96:7c:71:56:5e:ee:72:da:5a:b9:57: 25:58:67:cb:bd:83:67:c5:15:07:b0:84:cf:ac:83:64:9c:96: fd:fa:17:5d:0f:6c:69:a3:e4:76:3d:5e:77:fe:7c:06:22:b3: 9a:97:54:ea:29:5c:cf:26:56:9d:b2:b2:f2:02:3a:0e:f8:0a: ec:eb:10:2e:36:a4:50:cb:90:d1:bc:aa:2f:e6:ab:14:34:c4: b8:95:88:cf:5b:44:4e:b1:3c:9c:3a:6f:d1:9b:5f:2a:b1:f1: ec:a2:8b:b1:81:a5:5b:06:35:0e:c4:a5:70:98:ab:ad:54:46: dc:95:22:4f:74:b2:4c:25:f1:a9:89:39:ea:f5:4e:68:73:71: 87:a5:4f:ca:59:25:47:f7:b8:8b:a0:49:e7:0c:88:dc:b5:db: fc:ca:18:14:6e:df:15:f4:71:45:d2:0a:6d:7a:34:5e:04:86: 5a:45:d2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtYtdBhL4d3s5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MWNlYzY2YmEtYmIwMy00NGJkLThkNTctMmQyNjQ4YWYwZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnVlkYGsN2r39gSoEoNVTTnx8PXDq02vPAYs OhXPKH/lRIXYTgT1YE3j4G+LXqjdJjY2DhDOGkYfxdy9QCU71tEKUaRxUYHxgPy2 ihyPiAgKOP+c/wWemg4+u6NRYWK+rwP6zKSZ3MWtgJMPex5X62O6Ihy4uUeNTjoo pch57HRfSlfZi7fmnffVDxFiRC5PlcfcQeOY7Wdh+Hoxs2WpofdyhV8oF22El5do Rcz7vjhM8TGNzEf1NZ3Zwh0BUhbDCuNJLy3Yn2etyHnt9/MsEXpjZXxF1QbE3vLg IcuSMbJeqVXsfUebr8RCDG97hznHYNQNiIWzP2xk8JRcN5SwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy6szJdGZ89VJsH5M4TGR2hqdRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2UzOWQ2OTEtNGU0MS0z Njc2LTk1OTMtMTA5MzEwNzc3NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUURMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH98C9RcLfy7E8t4TpHBDvdDjlsIsA+7idkund0c9zPllfqPE6CIrksB S3zbw5fe61MPth6ZlRNTidkzjin8XOM/X28ZcmDR5EoWIOSDJciWfHFWXu5y2lq5 VyVYZ8u9g2fFFQewhM+sg2Sclv36F10PbGmj5HY9Xnf+fAYis5qXVOopXM8mVp2y svICOg74CuzrEC42pFDLkNG8qi/mqxQ0xLiViM9bRE6xPJw6b9GbXyqx8eyii7GB pVsGNQ7EpXCYq61URtyVIk90skwl8amJOer1TmhzcYelT8pZJUf3uIugSecMiNy1 2/zKGBRu3xX0cUXSCm16NF4EhlpF0v0= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:29 2025 by rpki-client