$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa File: dc98a4c9-b167-347d-b53a-d1d1192777fa.roa (raw, json) Hash identifier: 5gv1rmruM96LJkPAcGnPa2EQHRPWunOwd+CrvlcOn3Q= Subject key identifier: A9:F2:58:60:A9:F4:D3:02:06:71:21:46:E7:3C:7D:06:77:9B:73:95 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B382198FC434B14998477A780 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 203724 IP address blocks: 161.69.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:98:fc:43:4b:14:99:84:77:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=d84baf37-c9e6-4976-8ca5-dbbbdcd1cb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ff:bd:d4:5b:61:6d:12:48:1c:2a:48:59:b0: 1a:10:5b:32:10:44:50:38:65:fc:e1:b2:91:25:ca: 09:79:70:17:02:e1:7f:34:26:59:30:5e:a5:a5:0e: 50:f0:8b:b6:bc:0b:46:47:25:c2:65:36:a4:e3:b0: 8b:ce:1f:af:0d:60:4b:d4:fe:e3:d3:32:3a:62:eb: a3:17:21:66:0a:3a:6a:56:29:c3:23:34:86:81:9c: f6:8f:23:de:22:8f:e0:a9:09:5c:e8:3d:55:54:2d: 11:35:e3:69:1f:83:d9:63:15:28:3b:b7:07:d4:97: b2:ce:ec:8d:af:19:8b:35:08:75:41:e9:c6:ea:cd: 5a:0e:45:50:5e:e2:35:d5:7b:c5:d2:59:e6:0d:c4: 8f:8c:f0:4c:c8:b3:9a:0d:35:58:d2:43:9d:a4:4f: cc:96:b2:6e:90:7d:a1:01:51:ed:8f:dc:b5:d1:0c: 38:bc:f7:84:da:c7:9f:8b:4d:01:3e:a8:4a:7f:1f: d2:c3:a2:61:3d:26:61:5c:e8:f7:ab:b9:a8:28:66: de:f9:06:2e:f8:23:fb:32:3a:26:63:13:07:20:a6: 3a:91:7b:3a:7a:1c:7c:ca:02:f5:1b:e2:84:d1:ac: b8:44:46:83:cc:4e:80:eb:c8:72:cc:e0:bf:40:5a: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:58:60:A9:F4:D3:02:06:71:21:46:E7:3C:7D:06:77:9B:73:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3b:68:22:d0:5e:da:6d:5c:6e:c7:a2:8a:a0:10:ad:5d:38: 2b:04:00:e5:40:e1:2c:6c:e3:1b:96:52:81:6a:a1:d4:00:5e: 71:bc:64:05:69:18:b6:c1:a7:35:00:32:54:c5:06:e1:16:25: 24:d2:61:c9:0f:3b:5b:39:24:06:25:a7:99:0b:3a:45:ce:ad: b4:97:90:96:a2:79:55:07:99:17:c0:7c:ba:1e:f2:a4:ca:72: 39:11:1a:10:d0:e9:e1:9b:b8:68:96:ac:05:ef:0c:9c:83:9a: fe:95:97:be:8c:81:8a:c0:d2:29:8c:5e:76:43:96:5a:b7:66: 02:bc:b0:53:74:4f:aa:40:b3:11:f3:b5:87:1e:95:32:cd:7c: b8:56:8c:38:52:43:5b:f4:e5:15:99:6c:c4:2e:49:a3:0e:2b: 10:a5:c0:55:55:dc:55:7b:fd:f1:37:5a:ae:a3:6c:77:e2:64: f9:a4:99:67:97:a5:a7:8a:bd:47:4f:43:ef:07:28:bc:6e:d3: 4e:6d:d7:13:2d:1e:74:5b:b1:d4:dd:ad:49:9e:44:e2:fe:0e: b2:4a:40:b1:82:19:59:5c:0a:5c:37:22:60:77:42:84:2f:30: dd:93:f7:8d:5f:3d:23:d8:34:55:8f:79:d6:9f:fb:63:64:87: 56:57:a1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZj8Q0sUmYR3p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDg0YmFmMzctYzllNi00OTc2LThjYTUtZGJiYmRjZDFjYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP+91FthbRJIHCpIWbAaEFsyEERQOGX84bKR JcoJeXAXAuF/NCZZMF6lpQ5Q8Iu2vAtGRyXCZTak47CLzh+vDWBL1P7j0zI6Yuuj FyFmCjpqVinDIzSGgZz2jyPeIo/gqQlc6D1VVC0RNeNpH4PZYxUoO7cH1JeyzuyN rxmLNQh1QenG6s1aDkVQXuI11XvF0lnmDcSPjPBMyLOaDTVY0kOdpE/MlrJukH2h AVHtj9y10Qw4vPeE2sefi00BPqhKfx/Sw6JhPSZhXOj3q7moKGbe+QYu+CP7Mjom YxMHIKY6kXs6ehx8ygL1G+KE0ay4REaDzE6A68hyzOC/QFrt5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnyWGCp9NMCBnEhRuc8fQZ3m3OVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZGM5OGE0YzktYjE2Ny0z NDdkLWI1M2EtZDFkMTE5Mjc3N2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE7aCLQXtptXG7HooqgEK1dOCsEAOVA4Sxs4xuWUoFqodQAXnG8ZAVp GLbBpzUAMlTFBuEWJSTSYckPO1s5JAYlp5kLOkXOrbSXkJaieVUHmRfAfLoe8qTK cjkRGhDQ6eGbuGiWrAXvDJyDmv6Vl76MgYrA0imMXnZDllq3ZgK8sFN0T6pAsxHz tYcelTLNfLhWjDhSQ1v05RWZbMQuSaMOKxClwFVV3FV7/fE3Wq6jbHfiZPmkmWeX paeKvUdPQ+8HKLxu005t1xMtHnRbsdTdrUmeROL+DrJKQLGCGVlcClw3ImB3QoQv MN2T941fPSPYNFWPedaf+2Nkh1ZXoV8= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:18 2025 by rpki-client