$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ac0a4bda-9170-3a4b-8a24-a7d90031a142.roa File: ac0a4bda-9170-3a4b-8a24-a7d90031a142.roa (raw, json) Hash identifier: NntfLzRCT8U+D9fbVZfdDdM/GqhKiPP5DxUedCAd+uU= Subject key identifier: 3F:BB:17:30:DE:23:CC:9E:BE:39:A6:27:65:2A:1A:78:99:4D:A9:13 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B1C36C9EF176B0C8DCC96C200 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ac0a4bda-9170-3a4b-8a24-a7d90031a142.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 161.69.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c9:ef:17:6b:0c:8d:cc:96:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b239cecf-5053-479b-8aa9-55a506863a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:8b:3c:83:bb:1f:de:b9:84:48:e4:98:a2: ab:ab:34:85:8e:7f:97:b1:db:2c:4d:ab:6b:05:d3: 89:38:a0:d5:7e:01:6d:e9:dc:5c:fa:f6:69:f8:79: d6:84:6d:39:78:17:ce:08:91:60:49:5f:34:bd:4d: 71:31:88:02:b1:ed:c6:e1:d2:55:05:7f:8d:33:5c: e1:10:9b:8a:d2:e4:f6:ac:48:46:83:ae:ee:c5:d2: 58:b1:03:8b:5a:0e:69:b5:20:af:8e:81:73:5c:6d: 53:3e:31:b2:ca:ff:df:44:ac:23:42:da:a3:81:5c: cc:9c:00:14:f7:1b:9f:6a:a6:3b:ec:88:71:a6:13: 4b:c3:47:12:5e:b7:1e:f6:63:4d:c3:69:58:8a:f2: a2:03:7c:58:3b:59:3a:d8:fe:0a:90:d1:4c:a3:f7: 81:18:77:2d:e8:53:8b:48:7a:7f:06:8d:79:85:5a: d9:da:97:08:a9:54:aa:81:0f:90:d1:f6:99:8e:ac: 53:63:e6:3a:91:43:7e:ad:0f:cd:72:91:2e:c2:d5: e5:3c:94:e1:09:ec:62:1d:8d:57:84:35:e2:78:28: e9:43:7a:6b:db:16:7e:74:5e:54:d7:42:f0:e5:95: 28:97:d9:3c:51:24:ea:3c:83:c8:68:50:5a:6b:94: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BB:17:30:DE:23:CC:9E:BE:39:A6:27:65:2A:1A:78:99:4D:A9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ac0a4bda-9170-3a4b-8a24-a7d90031a142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:21:87:65:7e:56:bd:b4:3d:9f:33:b0:2d:03:81:bc:95:c9: 0c:e0:dc:dc:01:d3:f5:10:50:76:d6:e3:27:07:37:4f:00:1c: 5d:5d:17:a1:28:44:bf:22:86:41:93:71:ef:7d:6f:25:60:ac: 34:9c:3c:c4:7f:23:6e:3e:15:db:53:43:27:09:fb:2a:e9:20: 73:45:82:62:43:84:ed:6f:64:35:f6:cf:b9:bf:1e:70:ee:b5: 48:33:58:34:7e:93:09:30:0d:fe:2c:9b:74:4a:bb:c4:68:08: 88:2a:5b:1b:eb:0d:94:55:6f:3d:79:6a:44:cf:17:c8:bb:bd: 2c:38:e4:cf:f1:05:f9:0a:e5:a2:4c:20:d1:ff:8b:aa:23:67: 46:a7:ff:fb:b6:f4:8e:b9:39:a6:8c:4a:c1:a8:fe:ae:34:3b: 3f:ca:67:80:86:d4:23:24:cb:ce:ff:10:32:d7:86:f5:9a:c2: 2e:ee:6c:3e:cc:ab:b8:3a:d8:cd:af:f4:ea:7f:3a:0e:58:a7: 94:1e:97:eb:df:fa:df:33:8d:7d:01:9d:ca:35:1e:34:14:c0: 4f:e0:b6:6b:0e:64:cf:ec:f5:f5:d6:e4:60:99:cc:ec:26:a6: 82:a0:de:2b:ca:d3:10:7d:48:75:bc:c6:c5:02:11:0f:1e:86: 93:a5:26:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsnvF2sMjcyWwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjIzOWNlY2YtNTA1My00NzliLThhYTktNTVhNTA2ODYzYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15WLPIO7H965hEjkmKKrqzSFjn+XsdssTatr BdOJOKDVfgFt6dxc+vZp+HnWhG05eBfOCJFgSV80vU1xMYgCse3G4dJVBX+NM1zh EJuK0uT2rEhGg67uxdJYsQOLWg5ptSCvjoFzXG1TPjGyyv/fRKwjQtqjgVzMnAAU 9xufaqY77IhxphNLw0cSXrce9mNNw2lYivKiA3xYO1k62P4KkNFMo/eBGHct6FOL SHp/Bo15hVrZ2pcIqVSqgQ+Q0faZjqxTY+Y6kUN+rQ/NcpEuwtXlPJThCexiHY1X hDXieCjpQ3pr2xZ+dF5U10Lw5ZUol9k8USTqPIPIaFBaa5SQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+7FzDeI8yevjmmJ2UqGniZTakTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYWMwYTRiZGEtOTE3MC0z YTRiLThhMjQtYTdkOTAwMzFhMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUhh2V+Vr20PZ8zsC0DgbyVyQzg3NwB0/UQUHbW4ycHN08AHF1dF6Eo RL8ihkGTce99byVgrDScPMR/I24+FdtTQycJ+yrpIHNFgmJDhO1vZDX2z7m/HnDu tUgzWDR+kwkwDf4sm3RKu8RoCIgqWxvrDZRVbz15akTPF8i7vSw45M/xBfkK5aJM INH/i6ojZ0an//u29I65OaaMSsGo/q40Oz/KZ4CG1CMky87/EDLXhvWawi7ubD7M q7g62M2v9Op/Og5Yp5Qel+vf+t8zjX0Bnco1HjQUwE/gtmsOZM/s9fXW5GCZzOwm poKg3ivK0xB9SHW8xsUCEQ8ehpOlJqI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:23 2025 by rpki-client