$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1f094957-54fc-3b19-bab4-cce67f04e4c3.roa File: 1f094957-54fc-3b19-bab4-cce67f04e4c3.roa (raw, json) Hash identifier: tmoxpBWR1GCBhhzGzYCcC1ZGmfvUEkNpoz82EFB5Ww4= Subject key identifier: 51:B4:48:BD:10:20:27:65:C9:C8:7E:CA:7F:E2:4D:EC:29:E7:EE:DA Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B477C7DE55495F8097D7D6A00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1f094957-54fc-3b19-bab4-cce67f04e4c3.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 203724 IP address blocks: 161.69.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7d:e5:54:95:f8:09:7d:7d:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=94ad2491-eec7-47ed-a546-c97df0a79ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:f5:9e:7a:62:c3:44:9c:82:0a:59:08:29: 2b:4f:60:bd:5b:09:01:36:5b:c8:2d:d1:0c:27:cf: 4f:cc:d5:8c:6d:f0:1c:2f:7c:87:d4:c8:a5:13:7c: c2:ef:42:e8:fe:96:09:89:be:74:9f:3d:3b:4b:87: fc:63:1d:c4:50:64:c3:e6:38:d5:51:98:65:5a:1c: 3f:28:49:1a:e2:3c:d1:35:80:3e:87:37:83:d5:ec: 82:2e:0a:c5:c5:94:f9:1a:ae:71:b4:6e:bd:d0:31: 4e:85:24:a3:15:b6:f2:e8:08:59:3e:81:15:fe:40: 7a:34:07:5f:d3:21:5d:02:54:5c:cc:e5:06:16:41: 0b:62:c3:a7:54:d9:0a:50:57:67:36:93:24:61:65: 14:b7:09:37:6c:4d:8f:17:bb:7c:ce:c3:1b:77:e6: 60:f3:b4:6e:95:ed:5e:3c:ce:87:24:ec:f0:4e:53: c9:64:e9:dc:59:fa:68:3d:05:6c:b5:c6:20:ee:a2: 51:12:c1:98:07:2a:ba:c2:b0:94:08:b5:f9:67:d2: 58:86:66:3a:4e:f1:28:d7:9c:5f:12:7c:d7:d7:f2: 65:cc:73:d5:99:3b:f7:75:9d:f2:4e:ce:14:ec:eb: 51:f5:54:14:31:aa:27:74:03:95:26:a6:80:ee:a7: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B4:48:BD:10:20:27:65:C9:C8:7E:CA:7F:E2:4D:EC:29:E7:EE:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1f094957-54fc-3b19-bab4-cce67f04e4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8e:ef:a3:fe:32:e7:98:bf:f1:1f:12:73:78:e6:4c:09:00: 54:25:57:72:5a:17:ff:20:2e:86:db:aa:9f:7e:77:25:54:41: 6b:3c:67:e5:a4:8b:81:0d:ba:71:99:97:bb:84:73:80:84:2c: ab:2c:0b:ab:f2:6c:d9:2d:1b:e2:aa:6e:27:86:6e:7f:c9:46: 40:fd:95:71:39:5f:1b:12:ff:a6:2b:22:4b:6d:ab:14:73:7d: a7:df:ad:5d:37:8d:35:f0:05:8b:68:0a:cd:6c:97:45:8d:5e: 8f:3b:b6:1b:d9:5c:83:7d:3e:0c:8e:62:73:51:02:7e:81:ea: 66:4b:9b:e7:77:3d:53:e6:82:a1:c6:5c:8c:c3:a6:98:ca:a3: 57:92:a7:9a:e0:b5:5f:5f:ff:0b:7a:17:ac:76:6b:fe:a4:f3: 01:17:69:67:15:7a:47:c5:33:42:5e:c7:ba:c0:9c:05:b9:fb: 02:7b:75:8d:bd:63:1e:5a:ad:77:bb:c4:45:a3:5a:e7:5b:56: b4:8a:c2:51:70:5b:45:6d:d3:37:02:1c:0b:14:12:a4:3e:51: 45:e4:f8:56:ff:5f:6a:03:c7:fe:0b:ff:8a:e4:83:b7:fc:16: 93:3c:68:34:0c:58:13:f4:87:ed:6a:7e:47:85:d9:19:9a:1a: 81:80:61:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfH3lVJX4CX19agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OTRhZDI0OTEtZWVjNy00N2VkLWE1NDYtYzk3ZGYwYTc5Y2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmT1nnpiw0ScggpZCCkrT2C9WwkBNlvILdEM J89PzNWMbfAcL3yH1MilE3zC70Lo/pYJib50nz07S4f8Yx3EUGTD5jjVUZhlWhw/ KEka4jzRNYA+hzeD1eyCLgrFxZT5Gq5xtG690DFOhSSjFbby6AhZPoEV/kB6NAdf 0yFdAlRczOUGFkELYsOnVNkKUFdnNpMkYWUUtwk3bE2PF7t8zsMbd+Zg87Rule1e PM6HJOzwTlPJZOncWfpoPQVstcYg7qJREsGYByq6wrCUCLX5Z9JYhmY6TvEo15xf EnzX1/JlzHPVmTv3dZ3yTs4U7OtR9VQUMaondAOVJqaA7qfHdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFG0SL0QICdlych+yn/iTewp5+7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMWYwOTQ5NTctNTRmYy0z YjE5LWJhYjQtY2NlNjdmMDRlNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6O76P+MueYv/EfEnN45kwJAFQlV3JaF/8gLobbqp9+dyVUQWs8Z+Wk i4ENunGZl7uEc4CELKssC6vybNktG+KqbieGbn/JRkD9lXE5XxsS/6YrIkttqxRz faffrV03jTXwBYtoCs1sl0WNXo87thvZXIN9PgyOYnNRAn6B6mZLm+d3PVPmgqHG XIzDppjKo1eSp5rgtV9f/wt6F6x2a/6k8wEXaWcVekfFM0Jex7rAnAW5+wJ7dY29 Yx5arXe7xEWjWudbVrSKwlFwW0Vt0zcCHAsUEqQ+UUXk+Fb/X2oDx/4L/4rkg7f8 FpM8aDQMWBP0h+1qfkeF2RmaGoGAYQo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:41:55 2025 by rpki-client