$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4678bc6b-b184-3c6d-a8a6-25c0d6198e62.roa File: 4678bc6b-b184-3c6d-a8a6-25c0d6198e62.roa (raw, json) Hash identifier: hegMFyqAMMe+d7WTRBimkiC7sCWyeHH9x+VqCCuFqpI= Subject key identifier: 27:A5:96:F6:30:BD:C6:57:FB:A6:FA:AA:BF:5B:6F:7E:33:F3:BB:2C Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B48E1BD6EABBDA45E79A3D440 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4678bc6b-b184-3c6d-a8a6-25c0d6198e62.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 161.69.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bd:6e:ab:bd:a4:5e:79:a3:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=b09c0cd0-56ac-4710-8901-d12b67604c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:cc:4b:ce:9d:8d:3b:8f:a8:1d:24:2b:a2: a5:72:91:d8:7c:87:59:0f:28:d0:f3:b3:77:f7:1f: d0:b9:fb:dc:09:57:69:73:e1:2e:62:97:89:cc:a4: 59:cd:6e:ff:19:88:e4:30:34:96:ec:84:3d:c2:e3: 34:66:c6:42:3c:45:bb:c3:c1:96:dc:55:0e:8f:73: d2:34:23:39:62:59:a0:c4:4c:62:b6:b7:8e:77:4d: 6d:0c:0e:d6:8e:5f:be:05:16:1f:c9:84:ca:d2:21: b0:d8:c4:61:73:1d:4a:dc:6b:d9:be:7c:55:fd:0b: 0e:51:de:df:5d:18:14:10:ce:60:82:c0:bd:9d:4c: 93:ce:1f:ba:7d:b2:81:a2:3f:a8:90:27:07:bb:0d: e6:ae:6b:ee:6c:31:87:ae:c7:77:75:ed:8b:15:fe: be:43:48:ca:a4:d6:af:96:eb:1b:ee:9c:f7:79:fe: 29:68:eb:90:1d:76:15:28:e9:c7:92:95:d7:59:e3: b7:2d:44:c8:cb:e6:e8:fc:db:cf:a2:5b:f0:ef:81: 39:e0:de:cc:30:05:3a:5d:fe:a9:0d:12:31:02:b0: 0c:38:27:71:c5:3f:72:3a:99:01:4c:d8:b5:60:2d: dd:9e:51:93:dd:18:56:2d:78:d2:38:a8:a4:62:1a: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A5:96:F6:30:BD:C6:57:FB:A6:FA:AA:BF:5B:6F:7E:33:F3:BB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4678bc6b-b184-3c6d-a8a6-25c0d6198e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:52:66:5a:eb:6d:ea:87:c5:5d:5c:db:5e:16:52:1d:9a:1d: 58:af:c0:f3:72:c0:68:06:00:6d:a2:bd:90:18:b6:0d:67:10: b6:86:20:31:0d:b8:20:e2:dd:db:ec:65:73:af:04:c7:82:82: 4f:73:de:91:dc:ae:91:59:8f:7e:70:bc:3c:d6:e9:ff:64:d9: 18:2a:8a:89:59:e1:3e:f6:39:4d:77:2d:9a:bd:6a:c8:9f:f3: 6d:33:83:f8:90:9f:54:72:34:7c:04:7b:3a:23:33:11:ec:54: 36:2b:64:db:8e:e6:81:d5:96:30:7d:fa:d5:19:af:85:bf:17: 20:00:5b:40:49:29:d9:5d:54:98:fa:ba:27:ec:1a:86:9b:b5: be:fe:6e:ae:b6:0c:f5:ce:9e:44:de:53:9e:ba:71:1b:51:de: 39:f8:58:35:e4:a2:ae:fa:b9:0d:e6:e0:ec:4e:e9:61:99:c7: e9:9b:38:51:80:f1:c6:27:a5:f0:e6:33:1a:0d:60:08:12:7c: fc:d2:21:ae:50:b2:85:a1:62:d9:6e:11:58:03:2d:3c:4b:e5: e7:b1:d3:a7:8f:1c:86:e9:82:08:4e:71:66:93:13:ac:57:25: 61:56:7f:b9:1b:cc:67:25:76:6b:b7:d6:91:95:24:ea:0b:5d: e8:0d:c8:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b1uq72kXnmj1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjA5YzBjZDAtNTZhYy00NzEwLTg5MDEtZDEyYjY3NjA0YzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy3MS86djTuPqB0kK6KlcpHYfIdZDyjQ87N3 9x/QufvcCVdpc+EuYpeJzKRZzW7/GYjkMDSW7IQ9wuM0ZsZCPEW7w8GW3FUOj3PS NCM5YlmgxExitreOd01tDA7Wjl++BRYfyYTK0iGw2MRhcx1K3GvZvnxV/QsOUd7f XRgUEM5ggsC9nUyTzh+6fbKBoj+okCcHuw3mrmvubDGHrsd3de2LFf6+Q0jKpNav lusb7pz3ef4paOuQHXYVKOnHkpXXWeO3LUTIy+bo/NvPolvw74E54N7MMAU6Xf6p DRIxArAMOCdxxT9yOpkBTNi1YC3dnlGT3RhWLXjSOKikYhoakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCellvYwvcZX+6b6qr9bb34z87ssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNDY3OGJjNmItYjE4NC0z YzZkLWE4YTYtMjVjMGQ2MTk4ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdSZlrrbeqHxV1c214WUh2aHVivwPNywGgGAG2ivZAYtg1nELaGIDEN uCDi3dvsZXOvBMeCgk9z3pHcrpFZj35wvDzW6f9k2RgqiolZ4T72OU13LZq9asif 820zg/iQn1RyNHwEezojMxHsVDYrZNuO5oHVljB9+tUZr4W/FyAAW0BJKdldVJj6 uifsGoabtb7+bq62DPXOnkTeU566cRtR3jn4WDXkoq76uQ3m4OxO6WGZx+mbOFGA 8cYnpfDmMxoNYAgSfPzSIa5QsoWhYtluEVgDLTxL5eex06ePHIbpgghOcWaTE6xX JWFWf7kbzGcldmu31pGVJOoLXegNyJ0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:37:11 2025 by rpki-client