$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa File: cfb444d2-531b-3f89-9a90-97326374d80c.roa (raw, json) Hash identifier: 8MviCpzN3EZE3lRJERSSRdH5KFdOLvAGKYWb7yMRBqk= Subject key identifier: DA:85:C5:3A:47:98:63:0A:A4:7D:9A:39:DA:9F:E9:7B:BA:44:4D:46 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B38219A65D51901E1E97EF420 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 161.69.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9a:65:d5:19:01:e1:e9:7e:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=c1a61aa4-270a-4344-9b12-3271d84fc8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:a6:79:1d:2c:3a:b7:a4:a5:d1:fd:b5:b4: 15:3f:08:ec:c7:aa:0d:f2:f2:66:ae:79:ea:b4:31: 85:8d:ce:da:d6:40:74:73:ed:75:63:8a:8d:b1:75: 3b:35:be:fe:fb:f8:be:0e:54:ac:b6:7c:c0:05:37: f8:3d:a9:d5:22:14:8a:1b:da:ed:c7:75:f2:be:80: eb:67:ef:c6:42:fa:7a:28:01:ef:e6:24:d3:29:00: c0:96:b7:a6:bb:07:25:73:af:86:a8:a1:fd:ed:70: 74:af:cd:1e:fb:92:1c:34:a0:b5:8d:d1:d0:8d:42: fe:7f:f2:fc:c1:fc:a4:9a:70:9a:c8:d6:ac:a5:93: 07:56:87:57:6e:82:09:ee:74:25:05:16:bb:c6:1c: 07:46:61:98:a8:d1:b4:07:30:b7:1c:61:1a:5f:5d: cf:5f:55:fa:b2:5f:d7:c6:38:3f:e1:41:ae:6c:9b: f9:34:0c:5f:c6:d7:3e:0e:40:b6:fe:03:88:4e:fb: 3a:26:91:da:6e:22:6a:a2:c6:fa:f6:99:19:ef:79: a4:0b:be:bb:3a:fd:96:07:9e:8a:52:b0:ab:16:be: 1d:17:21:e1:11:16:c6:16:9d:11:b7:5f:08:6e:78: ce:31:45:ee:78:dd:b8:ae:69:39:06:3d:1b:f6:0f: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:C5:3A:47:98:63:0A:A4:7D:9A:39:DA:9F:E9:7B:BA:44:4D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2f:e0:8f:56:2e:09:0c:10:ed:4b:5b:47:5b:7f:ec:74:46: 25:9d:df:4a:8e:f1:83:9c:cf:8a:cb:34:93:19:d1:e3:45:45: 92:30:dc:b3:10:6d:4e:6f:28:db:41:d0:eb:7c:68:84:b9:1a: 81:14:b3:1c:3c:35:34:ec:99:db:20:ab:fc:b6:fe:86:ca:dc: f1:6a:64:13:b0:fb:ec:6f:90:ad:57:a6:31:44:a6:d4:ca:15: 2d:ff:c8:9f:48:a2:9e:8d:86:55:fa:de:e2:ca:f3:dc:c0:6d: 23:ed:16:79:48:0d:ca:bf:b5:16:9b:63:9d:b2:cf:bb:19:b7: ca:b9:7c:8e:37:40:fd:6f:bb:cf:cb:c9:4a:5a:51:df:c1:ec: 22:a5:73:66:ed:55:40:ea:35:71:06:92:15:4c:3c:c1:bc:a8: b5:ae:33:b3:77:a9:c1:53:01:12:2a:20:01:aa:e5:de:c3:ac: 57:4b:24:28:cc:bb:f8:5f:1a:74:77:06:f9:6b:a5:94:47:a3: 1c:a2:d8:a0:e0:97:17:03:04:1c:74:50:1a:47:21:c7:03:74: c0:06:00:8e:b9:d7:1a:9f:00:60:c9:6e:b1:0a:e7:57:10:d9: 1b:6d:18:72:8d:fb:ba:44:8d:54:c9:b8:d0:08:5c:72:66:c9: c8:0f:e3:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZpl1RkB4el+9CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YzFhNjFhYTQtMjcwYS00MzQ0LTliMTItMzI3MWQ4NGZjOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg+meR0sOrekpdH9tbQVPwjsx6oN8vJmrnnq tDGFjc7a1kB0c+11Y4qNsXU7Nb7++/i+DlSstnzABTf4PanVIhSKG9rtx3XyvoDr Z+/GQvp6KAHv5iTTKQDAlremuwclc6+GqKH97XB0r80e+5IcNKC1jdHQjUL+f/L8 wfykmnCayNaspZMHVodXboIJ7nQlBRa7xhwHRmGYqNG0BzC3HGEaX13PX1X6sl/X xjg/4UGubJv5NAxfxtc+DkC2/gOITvs6JpHabiJqosb69pkZ73mkC767Ov2WB56K UrCrFr4dFyHhERbGFp0Rt18IbnjOMUXueN24rmk5Bj0b9g/HxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqFxTpHmGMKpH2aOdqf6Xu6RE1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2ZiNDQ0ZDItNTMxYi0z Zjg5LTlhOTAtOTczMjYzNzRkODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAv4I9WLgkMEO1LW0dbf+x0RiWd30qO8YOcz4rLNJMZ0eNFRZIw3LMQ bU5vKNtB0Ot8aIS5GoEUsxw8NTTsmdsgq/y2/obK3PFqZBOw++xvkK1XpjFEptTK FS3/yJ9Iop6NhlX63uLK89zAbSPtFnlIDcq/tRabY52yz7sZt8q5fI43QP1vu8/L yUpaUd/B7CKlc2btVUDqNXEGkhVMPMG8qLWuM7N3qcFTARIqIAGq5d7DrFdLJCjM u/hfGnR3BvlrpZRHoxyi2KDglxcDBBx0UBpHIccDdMAGAI651xqfAGDJbrEK51cQ 2RttGHKN+7pEjVTJuNAIXHJmycgP48s= -----END CERTIFICATE-----Generated at Sat Oct 11 05:56:14 2025 by rpki-client