$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/386ae6d5-0cb1-3b1d-b422-3f9af0afb5d9.roa File: 386ae6d5-0cb1-3b1d-b422-3f9af0afb5d9.roa (raw, json) Hash identifier: 8AsJSlH1XBdIZYzLgG3sDh0gQILlAbXlZlH3aQa6sU4= Subject key identifier: 4D:68:F3:41:5A:2B:FA:B6:29:98:EE:FB:63:12:96:1A:69:B2:38:5B Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B1C36C9ABDA8B5F8553230B20 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/386ae6d5-0cb1-3b1d-b422-3f9af0afb5d9.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 161.69.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c9:ab:da:8b:5f:85:53:23:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3ee7dce5-efa4-4d5f-854d-56189da5cb4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:2a:b0:08:67:7e:03:81:a4:66:66:7e:ef: 28:c3:dc:99:dc:54:8f:25:09:45:80:f3:73:55:10: da:a2:f0:94:d5:e3:8f:82:65:68:16:4a:e1:6d:d8: ce:76:e6:e4:03:ff:2c:f4:2b:b6:b9:ef:15:92:b1: 31:0d:1e:89:42:9c:66:b6:fd:f4:b3:b1:60:2e:07: 74:67:70:d2:16:f4:45:db:48:01:b3:0b:16:0f:5d: f7:87:e9:6e:bd:50:00:bd:e1:4b:ae:69:6c:ef:40: 08:df:06:4f:ff:32:69:49:56:a4:d8:74:88:38:94: 12:84:65:03:c6:8e:01:62:c0:10:e9:0b:c1:49:4a: 75:8d:b8:03:91:02:5a:16:23:3c:19:f1:0b:67:ec: fd:62:a5:f1:79:df:e5:c5:61:7b:ee:aa:c1:93:18: 20:d6:13:22:c1:6f:35:63:f5:9c:ea:44:56:e9:98: bd:be:e2:22:da:18:72:6a:ee:ca:db:b0:b4:70:d6: e4:73:81:99:b1:e5:38:df:d6:f5:58:ef:26:54:2b: a3:d0:ea:08:29:cc:68:1b:1b:88:d0:e6:a0:cf:9d: 17:6e:ee:06:e1:f3:2f:80:2a:bf:2b:d4:7e:1d:5d: d4:8a:56:d1:41:c7:6e:1e:b3:25:02:19:54:ad:5a: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:68:F3:41:5A:2B:FA:B6:29:98:EE:FB:63:12:96:1A:69:B2:38:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/386ae6d5-0cb1-3b1d-b422-3f9af0afb5d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:20:78:5b:a4:10:f7:d7:37:a5:2a:74:ed:26:50:95:fb:43: 03:01:e3:97:17:6f:09:8c:a3:b0:25:e5:43:06:3f:49:66:dd: 49:fd:b7:4d:80:7c:6e:1d:63:61:32:3c:07:16:58:6c:40:66: 31:4a:6a:44:bb:ab:8b:73:79:10:db:05:e0:a0:e5:98:9f:e0: d3:4b:30:6c:8b:fc:b4:37:1c:21:4c:33:f8:7d:60:23:2e:69: 08:9d:9f:53:9e:51:43:26:f6:45:a0:da:f7:e1:b6:6b:b7:b8: 73:9b:d7:79:f2:5a:40:01:36:15:2d:71:c2:68:7e:f2:18:71: 50:90:32:c2:82:78:a9:78:ab:da:37:a4:3e:9c:8a:bd:72:b3: a8:47:2c:c7:24:06:be:3d:67:5e:fd:63:73:1d:4f:80:15:66: bf:71:3e:aa:b6:53:f4:9d:84:8c:43:24:9a:6b:32:fc:6e:ce: 96:57:bf:b8:a6:73:c4:ab:92:6e:29:e5:4c:88:4a:a8:55:85: 19:02:8c:6c:c3:b7:05:4c:dd:a2:98:ae:7c:df:a9:5a:0f:d4: 2d:78:76:a9:ef:c6:fa:d4:10:89:40:4f:d6:e8:56:23:ee:80: 69:70:c9:14:f0:cd:a8:e2:a4:98:a8:8b:62:f1:00:34:56:d4: bb:9d:55:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsmr2otfhVMjCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2VlN2RjZTUtZWZhNC00ZDVmLTg1NGQtNTYxODlkYTVjYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUoqsAhnfgOBpGZmfu8ow9yZ3FSPJQlFgPNz VRDaovCU1eOPgmVoFkrhbdjOdubkA/8s9Cu2ue8VkrExDR6JQpxmtv30s7FgLgd0 Z3DSFvRF20gBswsWD133h+luvVAAveFLrmls70AI3wZP/zJpSVak2HSIOJQShGUD xo4BYsAQ6QvBSUp1jbgDkQJaFiM8GfELZ+z9YqXxed/lxWF77qrBkxgg1hMiwW81 Y/Wc6kRW6Zi9vuIi2hhyau7K27C0cNbkc4GZseU439b1WO8mVCuj0OoIKcxoGxuI 0Oagz50Xbu4G4fMvgCq/K9R+HV3UilbRQcduHrMlAhlUrVps1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1o80FaK/q2KZju+2MSlhppsjhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMzg2YWU2ZDUtMGNiMS0z YjFkLWI0MjItM2Y5YWYwYWZiNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcgeFukEPfXN6UqdO0mUJX7QwMB45cXbwmMo7Al5UMGP0lm3Un9t02A fG4dY2EyPAcWWGxAZjFKakS7q4tzeRDbBeCg5Zif4NNLMGyL/LQ3HCFMM/h9YCMu aQidn1OeUUMm9kWg2vfhtmu3uHOb13nyWkABNhUtccJofvIYcVCQMsKCeKl4q9o3 pD6cir1ys6hHLMckBr49Z179Y3MdT4AVZr9xPqq2U/SdhIxDJJprMvxuzpZXv7im c8Srkm4p5UyISqhVhRkCjGzDtwVM3aKYrnzfqVoP1C14dqnvxvrUEIlAT9boViPu gGlwyRTwzajipJioi2LxADRW1LudVZc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:37:26 2025 by rpki-client