$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa401d64-29b4-3588-8961-f065e07b0734.roa File: fa401d64-29b4-3588-8961-f065e07b0734.roa (raw, json) Hash identifier: A2FkDOEPO3dD6iveZqOv6r0dhKPvMYUg6vlHg14Hv9k= Subject key identifier: 81:9E:9D:C7:DE:8A:E5:13:EA:80:F6:4D:3E:45:1B:B5:E8:02:76:E0 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B382191EAC1A050D8B88A9280 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa401d64-29b4-3588-8961-f065e07b0734.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 161.69.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:91:ea:c1:a0:50:d8:b8:8a:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=3fec66cc-e78c-4438-a941-6860cd5f7b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2f:01:c9:46:3b:6e:42:83:62:46:2f:7d:5b: cf:87:f2:fd:fe:0f:1b:8f:c8:ff:13:a7:da:bb:c8: e5:0b:bf:06:41:2c:df:e1:f8:32:6b:6d:e2:7f:f3: 6a:66:1b:f0:a5:6b:36:94:e8:f5:47:7d:39:d8:fb: b9:a0:3c:fc:10:e2:0a:52:d6:28:b7:51:77:64:72: 69:4b:b5:d8:d2:82:14:53:c5:74:e7:77:75:f7:92: 3a:78:e0:91:c8:a1:31:f0:f1:98:75:ef:f5:60:6a: 41:e8:56:f9:6d:bf:1a:6c:7f:83:86:47:ef:1a:25: 00:85:ea:6d:c0:f1:d1:dc:02:0d:e2:4c:50:c5:2c: 74:ca:c6:ed:ba:69:b0:3b:6f:7d:18:fb:02:af:8c: 8f:ee:7d:be:b1:b2:f2:a6:59:bc:5e:a7:c2:bf:0b: 0f:e5:48:4a:19:65:0e:1e:47:82:9a:95:81:cc:cc: 69:c9:54:a7:57:97:6f:10:71:f9:fa:e8:f9:7b:62: e6:99:1f:1d:5a:27:49:06:a4:c8:f9:98:7d:04:08: c1:b9:32:61:85:22:2f:ad:6f:74:f4:f9:29:1c:bc: e3:ba:82:0f:e2:b2:92:99:cb:dd:f3:47:d7:95:de: 9f:45:95:61:0a:cd:d0:97:f8:d5:ca:17:1e:29:89: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9E:9D:C7:DE:8A:E5:13:EA:80:F6:4D:3E:45:1B:B5:E8:02:76:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa401d64-29b4-3588-8961-f065e07b0734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f6:06:ef:ac:07:f5:0d:3f:17:e6:5d:e9:f5:a5:50:d0:53: 9c:12:40:28:60:05:9f:e4:28:0e:47:84:3e:6a:e4:e0:0e:4a: d3:db:14:d7:02:6c:e8:62:f6:77:e9:03:c9:47:b1:3e:28:88: 80:2c:20:74:fc:6b:b7:64:68:9b:81:46:fc:69:c1:4c:cb:67: 74:43:48:68:5d:86:5f:82:cb:ae:e2:19:52:06:f2:11:fe:55: a2:28:ab:03:11:76:77:23:96:ad:2c:fa:55:a4:cd:17:71:e1: 42:86:9c:a9:f8:4c:3a:5d:ce:73:64:af:25:8f:a0:b2:0c:a2: 66:ef:a7:8d:40:6f:d3:6a:41:5a:e1:b8:70:60:81:61:b8:72: 4c:17:60:dd:5a:89:56:07:fd:bf:c1:c6:d3:8f:b2:30:01:06: ac:e2:79:84:59:a6:b2:d7:c1:4b:32:92:18:ec:79:8b:0d:58: d8:50:ed:24:f0:f6:50:8f:cd:07:19:84:2c:46:1a:56:ca:ac: 4c:ba:a6:27:2e:56:cf:81:06:03:0f:65:eb:83:e2:7e:10:34: 0a:74:86:83:e0:27:b8:e4:d1:7f:10:58:41:c4:08:28:cb:e9: 40:b6:9a:00:85:5a:fd:70:14:6a:ce:a8:2d:20:89:57:0e:d1: 19:a0:83:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZHqwaBQ2LiKkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk M2ZlYzY2Y2MtZTc4Yy00NDM4LWE5NDEtNjg2MGNkNWY3YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti8ByUY7bkKDYkYvfVvPh/L9/g8bj8j/E6fa u8jlC78GQSzf4fgya23if/NqZhvwpWs2lOj1R3052Pu5oDz8EOIKUtYot1F3ZHJp S7XY0oIUU8V053d195I6eOCRyKEx8PGYde/1YGpB6Fb5bb8abH+DhkfvGiUAhept wPHR3AIN4kxQxSx0ysbtummwO299GPsCr4yP7n2+sbLyplm8XqfCvwsP5UhKGWUO HkeCmpWBzMxpyVSnV5dvEHH5+uj5e2LmmR8dWidJBqTI+Zh9BAjBuTJhhSIvrW90 9PkpHLzjuoIP4rKSmcvd80fXld6fRZVhCs3Ql/jVyhceKYm5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGencfeiuUT6oD2TT5FG7XoAnbgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZmE0MDFkNjQtMjliNC0z NTg4LTg5NjEtZjA2NWUwN2IwNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL2Bu+sB/UNPxfmXen1pVDQU5wSQChgBZ/kKA5HhD5q5OAOStPbFNcC bOhi9nfpA8lHsT4oiIAsIHT8a7dkaJuBRvxpwUzLZ3RDSGhdhl+Cy67iGVIG8hH+ VaIoqwMRdncjlq0s+lWkzRdx4UKGnKn4TDpdznNkryWPoLIMombvp41Ab9NqQVrh uHBggWG4ckwXYN1aiVYH/b/BxtOPsjABBqzieYRZprLXwUsykhjseYsNWNhQ7STw 9lCPzQcZhCxGGlbKrEy6picuVs+BBgMPZeuD4n4QNAp0hoPgJ7jk0X8QWEHECCjL 6UC2mgCFWv1wFGrOqC0giVcO0Rmgg4c= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:41 2025 by rpki-client