$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e409aa55-cfee-3015-8016-8d4c25b4543b.roa File: e409aa55-cfee-3015-8016-8d4c25b4543b.roa (raw, json) Hash identifier: ec4b37JC4hMntiZzOpbXWUywyZB+stkHAGTg31891Rw= Subject key identifier: 77:72:41:BE:5B:E0:C5:B0:F9:F6:52:42:BA:EF:9C:A1:27:2A:D0:47 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B3821929C8AF33953F2F29B80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e409aa55-cfee-3015-8016-8d4c25b4543b.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 203724 IP address blocks: 161.69.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:92:9c:8a:f3:39:53:f2:f2:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=a4d6b7f8-c06c-4dbe-b241-2b875b50d02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:36:9e:14:c9:87:5a:12:d0:8d:8c:c6:38: 74:49:82:87:a8:9c:c9:85:26:cf:bc:65:e3:76:ab: 0a:02:4f:a2:25:1b:90:cd:98:2e:a0:55:44:69:a2: 42:a0:e7:6c:c1:2a:ce:64:5c:96:8f:bd:9c:07:9d: 7a:ce:dd:30:b8:bf:58:d9:ff:30:92:69:5e:a5:f3: eb:33:69:b0:28:2b:82:8c:a3:69:ff:c1:d2:5e:60: e3:e6:1f:62:e9:80:50:ee:cb:c2:b3:3a:bf:ea:ba: 4a:d0:fa:be:e8:5f:28:ad:ff:90:c5:f4:8f:d9:1b: 8d:48:e7:4a:54:68:63:4b:13:d7:c9:c5:22:9c:c5: ff:65:d7:73:8a:e6:5c:90:2f:54:8e:0e:81:ff:8f: 1b:35:1b:6f:d0:b2:a2:ac:93:92:1d:05:0c:e3:d2: 13:60:79:1d:22:e4:c4:70:57:7b:fc:69:3b:b9:73: 20:31:ad:34:23:b8:5f:ac:ca:18:8e:e3:bd:b8:bc: a0:ed:09:f5:17:67:c7:51:e2:69:ee:1d:7b:6a:1c: ec:c0:78:04:f8:b8:52:e4:46:55:2f:92:51:fd:27: cb:b3:bf:43:94:d7:04:7e:55:30:d5:d3:aa:6c:95: b6:1c:9b:a1:72:2a:c0:fc:bc:f4:ad:8e:4b:c1:8b: c5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:72:41:BE:5B:E0:C5:B0:F9:F6:52:42:BA:EF:9C:A1:27:2A:D0:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e409aa55-cfee-3015-8016-8d4c25b4543b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a9:fe:13:78:f2:8e:e4:0e:72:1e:5e:6f:aa:c5:56:a7:33: 29:bc:01:fc:88:13:c0:86:c0:eb:88:14:65:95:76:d1:5d:66: 1a:90:38:d8:a5:73:84:24:f6:b5:97:95:b0:97:01:1f:59:8a: 72:d6:0a:43:b3:2e:ed:d4:76:08:dd:46:ac:f9:32:08:ad:01: 64:81:84:f9:e8:d6:cb:f5:7c:2d:58:eb:f8:db:fc:7b:25:ff: 1d:57:e6:86:b7:01:16:e0:f2:02:83:e9:cb:12:08:79:28:93: 94:63:00:98:0e:e5:17:e4:95:fe:21:5d:93:7a:68:0c:0c:91: 98:6a:a1:cf:f8:80:e6:61:2d:48:9d:a4:18:d8:21:3a:d0:8e: 5a:b2:8a:b1:0d:79:f7:17:fc:1a:7c:55:5f:ba:34:fb:33:63: ff:47:33:c4:ad:9f:78:00:66:2c:2f:f1:c9:eb:b3:81:d5:e6: 46:9c:9f:fa:15:d0:79:4f:e1:50:4e:5b:f2:3e:fe:46:ac:21: 22:25:ed:ff:b4:8d:46:4d:88:ef:25:b6:34:94:51:6e:18:b6: b0:c2:80:16:d4:90:2c:c9:7f:b6:33:e5:97:e4:e1:ec:c1:4a: fa:0d:00:6f:07:af:f5:d2:cb:10:0e:21:9d:c4:74:0b:f8:bf: 32:d1:87:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZKcivM5U/Lym4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YTRkNmI3ZjgtYzA2Yy00ZGJlLWIyNDEtMmI4NzViNTBkMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBw2nhTJh1oS0I2Mxjh0SYKHqJzJhSbPvGXj dqsKAk+iJRuQzZguoFVEaaJCoOdswSrOZFyWj72cB516zt0wuL9Y2f8wkmlepfPr M2mwKCuCjKNp/8HSXmDj5h9i6YBQ7svCszq/6rpK0Pq+6F8orf+QxfSP2RuNSOdK VGhjSxPXycUinMX/ZddziuZckC9Ujg6B/48bNRtv0LKirJOSHQUM49ITYHkdIuTE cFd7/Gk7uXMgMa00I7hfrMoYjuO9uLyg7Qn1F2fHUeJp7h17ahzswHgE+LhS5EZV L5JR/SfLs79DlNcEflUw1dOqbJW2HJuhcirA/Lz0rY5LwYvFswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdyQb5b4MWw+fZSQrrvnKEnKtBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZTQwOWFhNTUtY2ZlZS0z MDE1LTgwMTYtOGQ0YzI1YjQ1NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFep/hN48o7kDnIeXm+qxVanMym8AfyIE8CGwOuIFGWVdtFdZhqQONil c4Qk9rWXlbCXAR9ZinLWCkOzLu3UdgjdRqz5MgitAWSBhPno1sv1fC1Y6/jb/Hsl /x1X5oa3ARbg8gKD6csSCHkok5RjAJgO5Rfklf4hXZN6aAwMkZhqoc/4gOZhLUid pBjYITrQjlqyirENefcX/Bp8VV+6NPszY/9HM8Stn3gAZiwv8cnrs4HV5kacn/oV 0HlP4VBOW/I+/kasISIl7f+0jUZNiO8ltjSUUW4YtrDCgBbUkCzJf7Yz5Zfk4ezB SvoNAG8Hr/XSyxAOIZ3EdAv4vzLRh24= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:32 2025 by rpki-client