$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa File: d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa (raw, json) Hash identifier: AJCqh0B/9egjx4MlGGiGRO+TMj3QEscrJ5hG1Q0nLU4= Subject key identifier: A1:96:37:39:42:C4:E3:B0:EA:B5:C2:90:AB:4C:8F:04:CD:E4:1E:F8 Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584BA39D0564C80D8C5C9866F480 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 52347 IP address blocks: 162.217.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:05:64:c8:0d:8c:5c:98:66:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8608a2fd-3ad5-496c-85e2-93eb5db546c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:5e:17:d1:f1:45:62:75:44:a7:6d:c6:22: a4:56:0a:f1:e0:f3:ad:d1:47:73:5f:d6:eb:63:85: 97:c5:37:58:c2:2f:5e:66:76:06:1d:5e:29:47:c8: 11:34:59:51:06:c3:09:76:a3:66:26:e9:a6:27:ac: f4:ef:f0:0b:a8:69:28:ba:9e:1e:b2:4f:02:6c:0f: 44:7c:bb:00:fa:99:97:72:b4:3a:c6:69:9f:eb:e5: c0:fd:8e:6e:74:9f:35:04:bd:ed:7c:3a:f4:2a:63: 5f:00:7a:56:2d:f4:9a:60:49:69:83:ca:32:75:97: 4d:74:2b:b1:1d:5c:27:5e:01:02:86:43:69:f2:59: 08:dd:67:78:09:75:87:ae:ef:b5:da:c9:0b:f3:b8: f8:79:77:d5:70:50:d3:f0:2b:5c:20:19:86:5f:28: ea:d3:1d:14:3b:37:b3:89:09:9f:fe:bb:29:a7:58: c1:3a:09:08:75:ff:77:1d:4e:ea:aa:2f:4d:bd:41: 52:d7:cb:03:00:ae:85:d5:91:d2:de:13:d1:00:47: e9:b7:cc:12:24:aa:1d:8f:d1:97:90:8c:f7:e2:06: c3:97:02:1e:59:b6:f9:29:2a:0c:8c:e0:df:11:93: 26:de:31:86:f4:0c:8e:46:db:16:b1:af:f1:45:aa: 8c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:96:37:39:42:C4:E3:B0:EA:B5:C2:90:AB:4C:8F:04:CD:E4:1E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/d866dcb4-7bb0-3385-a304-e6d7c3588a6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 162.217.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:5a:41:34:7b:e0:65:60:60:f8:d4:e3:b5:bb:30:20:02:c0: d3:e0:aa:03:9a:88:7b:d8:29:93:74:02:41:a1:f6:15:02:69: 93:32:14:b0:ba:42:1d:8a:55:02:c1:98:12:52:44:47:d6:05: f8:56:b5:c5:b6:60:49:d9:c6:fb:25:c6:ab:89:84:c3:11:1a: 55:22:75:08:b6:11:57:45:f4:21:6f:3f:4e:e7:4a:c0:a3:92: f9:04:da:5b:b4:e5:aa:98:e3:fb:11:20:ed:b2:94:da:74:6f: 4c:b2:65:50:d6:5a:f3:82:c6:7d:c0:e8:dc:94:63:ec:67:f0: b9:f8:c0:0d:0d:32:c8:de:fb:60:0f:75:02:64:df:1e:72:9f: 25:2f:9d:b1:99:72:e9:36:93:6b:23:d1:b2:f7:fd:95:27:4b: b1:32:76:da:99:69:18:d0:ee:46:f6:2f:81:fb:90:b3:2e:11: c2:b7:cc:b1:40:3b:3e:f7:48:d8:3d:45:68:68:91:e6:7b:a7: 72:b8:93:8f:6d:3e:94:78:8c:b5:7c:04:54:a0:0d:53:79:6a: 8b:6f:a3:5f:64:69:7e:d8:24:08:68:2a:83:57:99:f1:ed:54: 89:d3:2f:c3:09:39:bf:e3:4e:c6:26:c3:a8:24:32:11:b0:29: 0a:66:4d:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQVkyA2MXJhm9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODYwOGEyZmQtM2FkNS00OTZjLTg1ZTItOTNlYjVkYjU0NmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz01eF9HxRWJ1RKdtxiKkVgrx4POt0UdzX9br Y4WXxTdYwi9eZnYGHV4pR8gRNFlRBsMJdqNmJummJ6z07/ALqGkoup4esk8CbA9E fLsA+pmXcrQ6xmmf6+XA/Y5udJ81BL3tfDr0KmNfAHpWLfSaYElpg8oydZdNdCux HVwnXgEChkNp8lkI3Wd4CXWHru+12skL87j4eXfVcFDT8CtcIBmGXyjq0x0UOzez iQmf/rspp1jBOgkIdf93HU7qqi9NvUFS18sDAK6F1ZHS3hPRAEfpt8wSJKodj9GX kIz34gbDlwIeWbb5KSoMjODfEZMm3jGG9AyORtsWsa/xRaqMQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGWNzlCxOOw6rXCkKtMjwTN5B74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvZDg2NmRjYjQtN2JiMC0z Mzg1LWEzMDQtZTZkN2MzNTg4YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotlFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdaQTR74GVgYPjU47W7MCACwNPgqgOaiHvYKZN0AkGh9hUCaZMyFLC6 Qh2KVQLBmBJSREfWBfhWtcW2YEnZxvslxquJhMMRGlUidQi2EVdF9CFvP07nSsCj kvkE2lu05aqY4/sRIO2ylNp0b0yyZVDWWvOCxn3A6NyUY+xn8Ln4wA0NMsje+2AP dQJk3x5ynyUvnbGZcuk2k2sj0bL3/ZUnS7EydtqZaRjQ7kb2L4H7kLMuEcK3zLFA Oz73SNg9RWhokeZ7p3K4k49tPpR4jLV8BFSgDVN5aotvo19kaX7YJAhoKoNXmfHt VInTL8MJOb/jTsYmw6gkMhGwKQpmTUI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:31 2025 by rpki-client