$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa File: 0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa (raw, json) Hash identifier: vJJV1+WHmhN4Z3khhAbqvAVN71HFqGql4V65LIr+FeY= Subject key identifier: B6:B6:EC:64:87:5F:3A:D2:8C:3D:0F:EF:C5:D5:D4:FA:24:ED:0D:2F Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584ADD668223231F0271667E1E80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 31898 IP address blocks: 161.69.32.0/22 maxlen: 24 161.69.48.0/23 maxlen: 24 161.69.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:82:23:23:1f:02:71:66:7e:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=6aae1a70-3f97-4a07-98fe-1dcfad319747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:20:2b:02:92:e0:f3:86:fe:8f:46:72:b4:b2: af:7e:22:69:9e:a2:05:b8:3a:bb:34:62:bb:f6:62: 0e:ad:1a:0c:76:11:77:f7:85:71:5c:b1:f2:d7:24: d3:6a:48:6b:91:1d:52:19:15:2d:cc:03:84:01:22: 3f:71:9b:bb:c8:ef:48:b1:9b:4a:81:4a:d5:b2:04: af:36:49:25:f6:2d:c4:7d:ad:a4:6c:a7:b0:38:ab: 3e:5c:6f:8c:c1:7f:53:3e:f5:32:bc:ea:48:3e:82: 39:a5:4b:9e:4f:b8:db:6b:6a:7e:03:39:8c:7c:bb: ce:e6:e9:c7:61:28:43:02:b9:95:40:2e:82:9e:67: 63:7a:60:62:8d:6c:79:fd:15:98:df:9a:32:6f:1a: 4c:ad:3a:04:a1:88:1d:08:8b:32:77:5b:a3:b3:82: 84:03:85:fb:2b:ab:6f:a8:68:2c:68:f4:61:a4:94: 36:4c:e6:ff:45:fb:0d:a2:39:fe:93:2d:86:5f:c0: ce:7c:53:da:78:d5:0f:f8:a0:a4:5a:cb:34:6f:17: 81:5f:16:c2:b0:52:6d:6f:d0:eb:6d:9d:5e:15:e8: 82:15:9b:d3:3e:f7:c5:fe:ed:9c:4b:30:91:a5:97: cb:5c:06:13:17:13:07:4a:33:65:f3:e4:34:2a:5f: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B6:EC:64:87:5F:3A:D2:8C:3D:0F:EF:C5:D5:D4:FA:24:ED:0D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.32.0/22 161.69.48.0/23 161.69.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fb:9b:1b:75:c4:4c:45:83:b4:bf:13:53:b1:d1:19:aa:6d: 22:17:44:9c:53:2c:6d:35:6e:e6:7d:66:ff:28:79:27:14:ec: d3:3a:d5:32:3f:37:84:81:03:0f:80:51:ef:c0:d2:ea:c1:15: df:3b:f4:df:93:90:13:0a:39:04:02:89:94:39:aa:a8:b6:82: fe:8a:d2:a2:93:9b:9a:49:18:88:d9:db:e7:48:ef:74:6f:e8: 5c:f6:18:9b:2a:ec:6c:eb:81:eb:b1:41:31:d2:11:97:eb:ef: 28:4a:63:e6:94:14:f4:12:1c:00:98:06:40:bb:4e:06:8c:a5: d2:72:73:65:b3:5f:8a:8d:a8:26:e7:ee:c4:9e:3c:1f:f7:4d: 0b:72:d9:86:c1:b2:4b:7c:a3:a2:96:c2:77:6c:da:0c:06:5f: 0e:9e:d3:00:32:3e:bb:ad:b2:01:84:54:a0:e1:75:ce:9c:8a: 05:cc:54:e8:10:a5:47:d5:f4:7d:3a:4b:f7:d0:ee:23:b9:08: c0:c8:61:57:1f:ca:1a:25:d7:94:ed:83:43:11:cc:f1:15:fd: 0a:c7:43:9d:85:23:a2:f2:28:c9:92:77:07:24:ef:0f:61:f3: 80:5c:de:de:3d:40:94:15:1a:04:0d:1c:da:81:f0:6b:43:32: 72:42:07:1a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWErdZoIjIx8CcWZ+HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NmFhZTFhNzAtM2Y5Ny00YTA3LTk4ZmUtMWRjZmFkMzE5NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCArApLg84b+j0ZytLKvfiJpnqIFuDq7NGK7 9mIOrRoMdhF394VxXLHy1yTTakhrkR1SGRUtzAOEASI/cZu7yO9IsZtKgUrVsgSv Nkkl9i3Efa2kbKewOKs+XG+MwX9TPvUyvOpIPoI5pUueT7jba2p+AzmMfLvO5unH YShDArmVQC6CnmdjemBijWx5/RWY35oybxpMrToEoYgdCIsyd1ujs4KEA4X7K6tv qGgsaPRhpJQ2TOb/RfsNojn+ky2GX8DOfFPaeNUP+KCkWss0bxeBXxbCsFJtb9Dr bZ1eFeiCFZvTPvfF/u2cSzCRpZfLXAYTFxMHSjNl8+Q0Kl90eQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLa27GSHXzrSjD0P78XV1Pok7Q0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGQ0YjFhMjItOTcxNi0z ZDI3LWEyNDgtNWY2MmQwOGE2YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCoUUgAwQB oUUwAwQAoUVVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG77mxt1xExFg7S/E1Ox0RmqbSIXRJxTLG01buZ9 Zv8oeScU7NM61TI/N4SBAw+AUe/A0urBFd879N+TkBMKOQQCiZQ5qqi2gv6K0qKT m5pJGIjZ2+dI73Rv6Fz2GJsq7GzrgeuxQTHSEZfr7yhKY+aUFPQSHACYBkC7TgaM pdJyc2WzX4qNqCbn7sSePB/3TQty2YbBskt8o6KWwnds2gwGXw6e0wAyPrutsgGE VKDhdc6cigXMVOgQpUfV9H06S/fQ7iO5CMDIYVcfyhol15Ttg0MRzPEV/QrHQ52F I6LyKMmSdwck7w9h84Bc3t49QJQVGgQNHNqB8GtDMnJCBxo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:29 2025 by rpki-client