$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa File: 5af02877-cfb6-3e11-ab01-56751afb3817.roa (raw, json) Hash identifier: W92A/cwv5obch0Hyk+kfmdCWY7nW+gBhNmklAD3WGDc= Subject key identifier: 49:9E:E5:5C:CF:F6:B4:A8:B1:EA:A8:5B:59:2D:04:29:98:EC:CC:AA Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B382193649905600BAE05EC80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 161.69.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:93:64:99:05:60:0b:ae:05:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=56ec920c-e62c-46b9-afaf-946eb1826097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:e5:85:af:98:00:60:b4:a7:ce:c9:7c:13: 72:16:3d:d4:da:dc:26:0d:74:8a:db:b5:2c:68:aa: 6f:b2:2c:ab:43:39:09:50:c8:9c:4b:47:43:b4:66: d1:bb:a6:d7:50:45:69:d7:fb:6f:a8:96:af:5a:50: 83:68:80:25:b7:68:1f:7a:9e:b7:93:40:aa:4a:8a: 7f:08:62:fb:2b:84:f5:08:1a:a4:bc:ba:f3:ee:3f: 11:0b:1d:dc:02:bf:50:9f:75:3f:ac:ba:8f:92:fb: c1:47:9c:75:51:8c:94:04:24:e8:a5:12:f2:84:bb: 3f:a4:c4:6a:fa:3d:3a:24:7d:15:24:12:49:f7:bb: 5e:ec:70:03:fd:15:6f:3c:f4:35:93:1d:02:e0:d3: 0c:61:cf:85:82:9c:cd:bb:7e:18:63:d0:cd:ad:bb: 93:80:8d:2d:6c:bd:e7:5a:23:66:84:c7:18:fd:d0: fb:95:c0:cb:e3:6c:3c:9d:1b:9b:77:73:20:a2:42: 41:e8:1b:7a:17:32:65:43:04:a1:d9:ff:f9:5d:2d: fa:74:10:06:33:1f:01:c1:84:e0:e5:a2:60:cc:bd: f9:1c:e3:1c:cb:3a:1a:42:49:05:e4:59:b6:2b:43: 9d:e1:88:ee:34:d3:6b:5a:4a:ad:94:8e:0a:d5:70: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9E:E5:5C:CF:F6:B4:A8:B1:EA:A8:5B:59:2D:04:29:98:EC:CC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e5:0b:99:89:44:d4:36:06:5c:e2:8e:56:e5:bc:3e:d9:51: dc:9e:83:c2:d0:10:e6:aa:21:08:61:da:29:69:bf:23:19:91: 05:b6:09:88:79:58:24:0b:11:54:55:5c:9f:2f:ae:89:0d:25: ca:28:95:90:30:8f:7a:6a:c6:3e:e3:ee:c4:17:4e:4a:66:2a: 41:89:ce:d6:ab:8e:40:1d:ed:e9:f3:b2:61:d8:6e:cf:b1:bc: e7:95:f0:06:c6:ae:dc:8b:e9:90:ce:75:bd:ea:f1:98:76:87: f0:d2:ba:b8:42:b4:67:f5:d2:11:12:02:69:e6:a5:c1:61:fd: 14:c1:80:87:7b:0d:de:8c:0d:d2:79:0f:3e:45:47:29:00:ac: 5e:8a:5d:a2:e5:c7:22:8e:15:61:82:3c:3e:3a:dc:a9:5c:93: 42:82:4d:dd:15:25:3e:53:47:4b:2a:f2:5c:a5:35:ec:23:be: 24:b5:9c:df:7f:91:ac:33:6e:1a:87:0e:a8:af:50:02:3f:1e: 65:74:b0:2f:b5:e6:5b:1d:59:d5:dd:55:90:8c:6a:83:2c:f4: 1c:46:82:7f:b9:9e:b2:a3:1d:91:28:c3:63:d5:b5:c3:e4:63: d0:74:27:c9:d5:64:3f:be:74:38:7b:ab:91:b8:52:aa:9c:92: d9:a4:60:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZNkmQVgC64F7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk NTZlYzkyMGMtZTYyYy00NmI5LWFmYWYtOTQ2ZWIxODI2MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPLlha+YAGC0p87JfBNyFj3U2twmDXSK27Us aKpvsiyrQzkJUMicS0dDtGbRu6bXUEVp1/tvqJavWlCDaIAlt2gfep63k0CqSop/ CGL7K4T1CBqkvLrz7j8RCx3cAr9Qn3U/rLqPkvvBR5x1UYyUBCTopRLyhLs/pMRq +j06JH0VJBJJ97te7HAD/RVvPPQ1kx0C4NMMYc+FgpzNu34YY9DNrbuTgI0tbL3n WiNmhMcY/dD7lcDL42w8nRubd3MgokJB6Bt6FzJlQwSh2f/5XS36dBAGMx8BwYTg 5aJgzL35HOMcyzoaQkkF5Fm2K0Od4YjuNNNrWkqtlI4K1XB1rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEme5VzP9rSoseqoW1ktBCmY7MyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNWFmMDI4NzctY2ZiNi0z ZTExLWFiMDEtNTY3NTFhZmIzODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLlC5mJRNQ2BlzijlblvD7ZUdyeg8LQEOaqIQhh2ilpvyMZkQW2CYh5 WCQLEVRVXJ8vrokNJcoolZAwj3pqxj7j7sQXTkpmKkGJztarjkAd7enzsmHYbs+x vOeV8AbGrtyL6ZDOdb3q8Zh2h/DSurhCtGf10hESAmnmpcFh/RTBgId7Dd6MDdJ5 Dz5FRykArF6KXaLlxyKOFWGCPD463Klck0KCTd0VJT5TR0sq8lylNewjviS1nN9/ kawzbhqHDqivUAI/HmV0sC+15lsdWdXdVZCMaoMs9BxGgn+5nrKjHZEow2PVtcPk Y9B0J8nVZD++dDh7q5G4UqqcktmkYIg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:35:54 2025 by rpki-client