$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa File: cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa (raw, json) Hash identifier: CKwhxdgu0Iciwj7vrp9ZExH1WtJNIsRZG7CQ7+4z2FI= Subject key identifier: DE:EA:C4:3E:F4:C1:29:A5:4F:D6:20:3D:89:92:1A:6A:5C:F4:06:BF Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B477C7842D3A86D10329A5980 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 203724 IP address blocks: 161.69.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:78:42:d3:a8:6d:10:32:9a:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=c030c1f5-bc14-42c0-96cc-7d0ea78a109f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:76:b0:fa:f5:22:b5:52:9a:6e:f6:52:ad: eb:4c:d2:5b:a4:0d:cd:db:cb:1e:17:6d:4c:0d:d6: 37:4e:8e:f6:06:99:75:0d:44:90:e6:f5:ff:0d:29: aa:9b:07:5d:09:57:61:7d:fc:12:d8:94:2d:5b:c1: 20:b6:89:af:67:79:4d:45:8a:22:0e:a9:63:0b:a8: 59:41:24:5b:8a:51:02:58:7b:66:5c:b2:83:22:56: 2c:de:c2:51:b7:25:5f:0a:3e:f8:e0:5d:5b:8d:4a: 44:e3:9f:29:b4:e8:45:62:6c:48:e3:f8:0c:54:05: d0:53:76:cf:09:ea:8e:0f:a7:c9:b1:59:74:c3:41: 4c:3b:e6:71:7b:b7:09:d8:da:07:9d:6f:5a:3c:94: 5b:77:2e:63:83:c4:f5:28:91:b2:a6:91:98:a5:06: 49:d0:49:36:a6:ef:c1:c2:b2:f9:41:dd:e9:0f:24: ba:c2:8a:6d:d6:de:a3:75:c3:b5:59:25:e4:25:e0: cc:bd:94:96:4f:08:ed:c1:cc:2b:19:18:8b:26:c6: b4:47:44:2b:3f:60:6e:17:e3:79:6b:01:86:72:fb: dd:be:1c:a9:85:84:87:96:14:d7:6b:3b:c4:4f:65: bb:c1:1d:a9:fc:60:56:e6:3c:c6:ba:65:be:83:31: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EA:C4:3E:F4:C1:29:A5:4F:D6:20:3D:89:92:1A:6A:5C:F4:06:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c1:c6:a9:c0:e0:31:3c:4a:89:3c:83:c3:8e:80:76:0e:8c: b1:de:8e:17:ab:af:30:7f:16:b1:26:aa:fb:8e:fc:01:32:ae: 1d:2a:9f:a0:42:7e:19:15:de:16:12:a3:56:c9:9c:59:65:77: ad:e9:23:38:72:a9:43:e6:e4:d8:a3:0d:40:6b:b7:b6:46:7a: a7:5d:4d:5e:cd:e8:40:6a:85:36:5c:1f:63:f4:82:6c:b2:fe: 2c:f6:6c:25:99:91:1c:db:d2:86:b8:b5:ea:ab:2a:32:14:1a: 22:6e:a4:af:c0:44:e4:05:38:23:4a:6f:df:4b:b6:7c:84:35: 1c:58:53:05:0d:ba:fa:3b:22:81:b2:04:e4:39:fa:b0:9e:fc: c9:13:f8:0e:8e:15:57:3a:0e:ac:eb:fe:4c:c0:88:53:65:ff: 82:91:83:ef:38:84:69:ac:4c:0b:58:f0:64:8e:2d:aa:e5:1c: be:8a:a8:65:67:35:f3:6f:8e:14:ab:72:30:91:8b:ba:96:c5: 44:5a:bb:71:f6:24:59:8c:f5:0e:01:15:43:11:dd:93:d0:d6: 74:81:61:4d:aa:7f:55:f1:eb:fa:b4:7b:c8:7e:2b:56:e6:32: a5:33:90:2f:74:3e:4d:2a:51:f4:8e:66:d5:40:4a:d1:ef:83: d5:d1:d9:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHhC06htEDKaWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YzAzMGMxZjUtYmMxNC00MmMwLTk2Y2MtN2QwZWE3OGExMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbZ2sPr1IrVSmm72Uq3rTNJbpA3N28seF21M DdY3To72Bpl1DUSQ5vX/DSmqmwddCVdhffwS2JQtW8EgtomvZ3lNRYoiDqljC6hZ QSRbilECWHtmXLKDIlYs3sJRtyVfCj744F1bjUpE458ptOhFYmxI4/gMVAXQU3bP CeqOD6fJsVl0w0FMO+Zxe7cJ2NoHnW9aPJRbdy5jg8T1KJGyppGYpQZJ0Ek2pu/B wrL5Qd3pDyS6wopt1t6jdcO1WSXkJeDMvZSWTwjtwcwrGRiLJsa0R0QrP2BuF+N5 awGGcvvdvhyphYSHlhTXazvET2W7wR2p/GBW5jzGumW+gzF02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7qxD70wSmlT9YgPYmSGmpc9Aa/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2ZjNzBhZjMtMmU5NC0z OWI0LTk3MTMtMjlhMGJlYmNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjBxqnA4DE8Sok8g8OOgHYOjLHejherrzB/FrEmqvuO/AEyrh0qn6BC fhkV3hYSo1bJnFlld63pIzhyqUPm5NijDUBrt7ZGeqddTV7N6EBqhTZcH2P0gmyy /iz2bCWZkRzb0oa4teqrKjIUGiJupK/AROQFOCNKb99LtnyENRxYUwUNuvo7IoGy BOQ5+rCe/MkT+A6OFVc6Dqzr/kzAiFNl/4KRg+84hGmsTAtY8GSOLarlHL6KqGVn NfNvjhSrcjCRi7qWxURau3H2JFmM9Q4BFUMR3ZPQ1nSBYU2qf1Xx6/q0e8h+K1bm MqUzkC90Pk0qUfSOZtVAStHvg9XR2X0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:54 2025 by rpki-client