$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa File: 5396e692-d7cf-352b-9d2a-cb00286b30e8.roa (raw, json) Hash identifier: CjhEytAvnYOQDZtpjpKVKHsb61k1EHqFzuStZyuhqrs= Subject key identifier: 58:E5:3F:46:F4:1B:DD:60:B4:2E:E3:D3:17:0E:D4:E7:0C:41:B0:BC Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B9E07B6353A1BF5E22F69F540 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 31898 IP address blocks: 161.69.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b6:35:3a:1b:f5:e2:2f:69:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=2767d36f-c28f-4dbe-a18a-2240e0541f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:26:c7:d8:19:90:60:1c:84:b9:cb:48:26: 12:a9:27:3a:24:b2:5e:31:5a:c7:2f:5c:44:00:e4: 70:6a:b1:36:d8:9b:2f:d1:95:ae:25:8a:86:bd:d9: 3f:d9:85:fb:4d:07:29:69:b5:3b:f4:dd:e6:1e:7c: 1e:d1:af:c1:cf:a0:1e:2c:aa:c3:f5:47:ae:bf:ae: 1c:0c:f6:56:2d:c8:66:6f:48:66:46:e5:1c:7c:6f: 3c:11:63:46:a3:38:20:34:41:fa:7f:36:91:84:5c: 17:16:88:9a:e2:01:92:1c:f4:20:03:c1:b5:ad:a8: 63:28:76:f1:00:b9:9c:eb:27:bf:d5:5b:e4:d9:1e: ea:98:74:2e:61:aa:e3:03:b3:c1:bf:f1:bb:98:38: e5:70:be:72:2a:4a:4e:d2:b9:63:a8:4a:b3:2b:b1: 95:8c:6e:0f:a9:ec:12:47:c9:59:d1:2e:6f:85:8b: 5b:8c:c1:00:9b:12:b7:f6:ff:e6:48:99:21:2b:75: 24:f6:d0:42:70:d4:1f:7e:58:50:9c:fd:65:04:29: 88:a4:84:1e:36:ed:f1:5e:fa:fb:ab:f7:95:e2:3c: 9f:e7:51:29:4e:09:5b:5b:74:27:04:b9:7d:79:e8: 4c:95:4c:0f:ee:5c:00:c9:1f:c2:03:95:9a:e0:72: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E5:3F:46:F4:1B:DD:60:B4:2E:E3:D3:17:0E:D4:E7:0C:41:B0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4a:5e:65:36:a7:9a:de:9b:54:1c:a8:c6:31:e5:49:a6:de: 45:5f:0d:7e:69:27:7d:56:3b:da:35:5c:61:c3:88:d8:06:cb: 4b:56:87:d3:14:85:da:fc:b4:ba:b9:1d:7c:64:0d:8c:67:e6: fc:77:9c:c3:0b:17:ec:c4:97:58:03:5c:ad:f9:d9:eb:03:d2: 60:c2:a2:c7:5f:fb:2d:b3:6e:ca:9f:f9:29:68:7c:84:c3:14: 30:39:9d:c7:96:cb:79:d8:4a:89:57:05:e1:e7:f5:94:e1:01: e3:57:6c:28:8e:94:fd:ef:91:eb:e5:f0:9a:f9:50:07:92:c3: bf:83:bd:71:56:6b:0e:d2:4a:f8:11:7f:66:78:49:45:f6:79: 6b:39:ea:d7:14:60:32:ee:92:63:50:1c:91:a7:51:e1:41:e9: 1b:9b:b7:d7:5f:6a:ac:85:d3:60:57:43:8a:c5:67:f1:bd:b3: 59:2e:75:53:de:9f:3b:66:d9:8c:ac:f5:6d:35:c8:52:bf:84: ca:8e:ab:6d:55:96:75:a5:19:d3:92:d2:bb:21:93:71:7a:e6: a1:9e:fa:33:e7:d8:79:bb:0f:50:c5:3f:4c:93:15:8d:19:50: c1:60:72:5c:21:4a:56:14:5b:1b:03:bb:03:5f:a3:c6:33:26: f0:c0:a1:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7Y1Ohv14i9p9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk Mjc2N2QzNmYtYzI4Zi00ZGJlLWExOGEtMjI0MGUwNTQxZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQkmx9gZkGAchLnLSCYSqSc6JLJeMVrHL1xE AORwarE22Jsv0ZWuJYqGvdk/2YX7TQcpabU79N3mHnwe0a/Bz6AeLKrD9Ueuv64c DPZWLchmb0hmRuUcfG88EWNGozggNEH6fzaRhFwXFoia4gGSHPQgA8G1rahjKHbx ALmc6ye/1Vvk2R7qmHQuYarjA7PBv/G7mDjlcL5yKkpO0rljqEqzK7GVjG4PqewS R8lZ0S5vhYtbjMEAmxK39v/mSJkhK3Uk9tBCcNQfflhQnP1lBCmIpIQeNu3xXvr7 q/eV4jyf51EpTglbW3QnBLl9eehMlUwP7lwAyR/CA5Wa4HJvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjlP0b0G91gtC7j0xcO1OcMQbC8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNTM5NmU2OTItZDdjZi0z NTJiLTlkMmEtY2IwMDI4NmIzMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtKXmU2p5rem1QcqMYx5Umm3kVfDX5pJ31WO9o1XGHDiNgGy0tWh9MU hdr8tLq5HXxkDYxn5vx3nMMLF+zEl1gDXK352esD0mDCosdf+y2zbsqf+SlofITD FDA5nceWy3nYSolXBeHn9ZThAeNXbCiOlP3vkevl8Jr5UAeSw7+DvXFWaw7SSvgR f2Z4SUX2eWs56tcUYDLukmNQHJGnUeFB6Rubt9dfaqyF02BXQ4rFZ/G9s1kudVPe nztm2Yys9W01yFK/hMqOq21VlnWlGdOS0rshk3F65qGe+jPn2Hm7D1DFP0yTFY0Z UMFgclwhSlYUWxsDuwNfo8YzJvDAoeM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:19:18 2025 by rpki-client