$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7638d7ef-f4e0-3d1d-b51e-9c8ec31a06f5.roa File: 7638d7ef-f4e0-3d1d-b51e-9c8ec31a06f5.roa (raw, json) Hash identifier: 3SDnsbMR7il8NQES5PHLhHI4v68Z1fzd8GV022FR6Hc= Subject key identifier: 62:31:C7:D0:CD:9C:36:A4:F6:CD:8E:54:18:31:9F:1E:1C:9A:22:BD Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584BBE4042CC69B72D5EADB81380 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7638d7ef-f4e0-3d1d-b51e-9c8ec31a06f5.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 203724 IP address blocks: 161.69.32.0/22 maxlen: 24 161.69.48.0/23 maxlen: 24 161.69.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:42:cc:69:b7:2d:5e:ad:b8:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=8a1b3f43-12bb-443a-b078-871487e340b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:46:99:11:32:0f:1f:bf:b6:cc:50:ab:72: 94:dd:37:23:7c:c5:fb:66:33:b1:db:19:6d:5b:44: f8:a5:35:a7:2a:c6:e2:a0:67:57:bd:9a:24:a8:02: 4e:cc:78:b0:5b:b4:61:a0:81:2a:92:17:c7:58:b5: 48:3f:41:ea:0a:f2:dc:1c:74:5d:f8:a0:23:c0:34: 78:1e:35:ea:b6:cf:17:f1:bd:91:31:a7:9c:b8:1b: f6:a9:75:6b:57:79:14:56:37:20:82:b7:6e:f8:ea: 23:1b:bb:38:de:f5:5a:40:34:b2:48:b6:73:e2:97: 91:d7:5e:84:29:c7:66:dd:6c:fc:8f:86:9c:98:d9: ac:15:75:ae:e2:be:ec:f1:2b:9c:b6:d5:76:4b:01: 91:2b:3d:84:c0:a3:d0:3a:0f:56:68:b2:0c:94:15: 21:7b:75:57:16:d4:45:24:1f:24:51:a1:d1:ee:de: 8b:fc:5e:8f:92:00:91:c1:53:f1:00:83:80:32:46: 2f:90:4f:dc:f9:f3:20:75:26:8f:0c:83:af:6e:d4: 9e:4f:30:f7:24:c3:e3:18:c0:ba:b8:01:86:9c:9a: 68:a4:06:ad:d5:4b:e0:41:bc:29:7a:78:f1:a2:ca: 55:0a:53:15:5c:c1:92:ef:e7:cc:60:8f:62:15:e0: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:31:C7:D0:CD:9C:36:A4:F6:CD:8E:54:18:31:9F:1E:1C:9A:22:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7638d7ef-f4e0-3d1d-b51e-9c8ec31a06f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.32.0/22 161.69.48.0/23 161.69.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a0:a3:55:d3:a9:cd:2c:12:e4:f5:04:3f:52:a0:e4:b8:53: 1c:4c:5a:9f:0d:84:ce:ca:0a:5c:c8:1e:38:dd:f3:84:d5:36: ed:34:64:45:b5:65:27:49:3e:c2:0f:91:cc:a4:c1:2f:78:be: 66:60:3d:ff:81:5c:9d:de:06:a2:5a:d7:dc:7e:01:a9:43:10: 69:c5:58:51:09:c1:cf:45:02:ea:a4:f4:7e:4f:25:14:bd:73: d5:60:1a:9d:6b:0e:cf:50:cf:be:43:de:ce:dd:09:4a:76:0d: dd:57:7d:ee:f1:e6:64:7d:26:2b:1c:32:3a:6c:90:2b:fb:11: fd:b7:85:05:a1:23:13:d3:0a:cb:d7:ad:9c:e6:c6:d8:44:c9: 00:37:4c:53:37:cc:01:d3:28:9b:04:66:64:c2:ef:29:c3:cb: 47:e7:7f:38:14:12:7d:2f:dd:fb:04:8c:c1:dc:57:1d:39:69: 52:b0:d9:67:d7:18:b5:7f:b2:f4:21:24:60:47:e5:25:dc:dd: 9a:3a:3e:7b:5d:9d:56:27:bc:a9:2b:46:5f:f5:4a:71:ad:17: 98:2e:b2:b6:cd:98:5a:89:15:84:15:89:6e:63:5d:31:d0:7e: ab:a7:28:41:b8:06:c5:53:09:e3:fd:73:c2:1f:97:00:fa:2e: 24:c5:22:7f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEu+QELMabctXq24E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OGExYjNmNDMtMTJiYi00NDNhLWIwNzgtODcxNDg3ZTM0MGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntVGmREyDx+/tsxQq3KU3TcjfMX7ZjOx2xlt W0T4pTWnKsbioGdXvZokqAJOzHiwW7RhoIEqkhfHWLVIP0HqCvLcHHRd+KAjwDR4 HjXqts8X8b2RMaecuBv2qXVrV3kUVjcggrdu+OojG7s43vVaQDSySLZz4peR116E Kcdm3Wz8j4acmNmsFXWu4r7s8SucttV2SwGRKz2EwKPQOg9WaLIMlBUhe3VXFtRF JB8kUaHR7t6L/F6PkgCRwVPxAIOAMkYvkE/c+fMgdSaPDIOvbtSeTzD3JMPjGMC6 uAGGnJpopAat1UvgQbwpenjxospVClMVXMGS7+fMYI9iFeCZnwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGIxx9DNnDak9s2OVBgxnx4cmiK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNzYzOGQ3ZWYtZjRlMC0z ZDFkLWI1MWUtOWM4ZWMzMWEwNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCoUUgAwQB oUUwAwQAoUVVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACCgo1XTqc0sEuT1BD9SoOS4UxxMWp8NhM7KClzI Hjjd84TVNu00ZEW1ZSdJPsIPkcykwS94vmZgPf+BXJ3eBqJa19x+AalDEGnFWFEJ wc9FAuqk9H5PJRS9c9VgGp1rDs9Qz75D3s7dCUp2Dd1Xfe7x5mR9JiscMjpskCv7 Ef23hQWhIxPTCsvXrZzmxthEyQA3TFM3zAHTKJsEZmTC7ynDy0fnfzgUEn0v3fsE jMHcVx05aVKw2WfXGLV/svQhJGBH5SXc3Zo6PntdnVYnvKkrRl/1SnGtF5gusrbN mFqJFYQViW5jXTHQfqunKEG4BsVTCeP9c8IflwD6LiTFIn8= -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:44 2025 by rpki-client