$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa File: 614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa (raw, json) Hash identifier: 25jM20fSiupSosK7DNLqytXmSF+VuQ6F+kcZOnm+/Cc= Subject key identifier: 0C:1B:12:CD:D5:72:21:F8:FB:14:FF:79:A2:5C:67:17:33:19:1F:34 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B38219806B578C08532A45480 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 161.69.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:98:06:b5:78:c0:85:32:a4:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=280d0a49-60b6-4936-9603-343464bc3531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:77:92:ed:c4:3d:60:e4:fe:fb:f9:bb:de: 07:09:7c:94:15:1d:23:9c:27:57:4c:d9:33:23:a3: cb:4b:3f:58:a4:9a:8a:57:44:d2:8d:6e:d3:91:2a: 78:03:0c:6d:ff:f6:a1:44:c5:31:9e:b1:5b:58:73: 33:84:5a:9d:39:d3:4e:c9:88:ad:6f:c3:01:35:1b: 51:18:af:bd:32:6e:74:b5:d4:8e:e0:e2:7f:4b:5e: 0f:ac:29:b9:8a:21:82:ad:31:a3:e1:4f:d9:ed:8d: 6d:04:bd:e8:a3:d1:f6:14:08:ce:ce:7e:5c:6c:c7: d0:26:24:fd:29:2f:12:78:64:85:72:40:54:b5:8a: 2a:9b:23:0a:ac:2d:10:d3:0c:d3:cd:cd:ea:87:83: b7:0e:54:e3:34:5e:21:0e:3a:be:b9:03:d3:c7:04: a8:6f:81:4d:bd:bb:77:3f:cc:f3:8a:04:a8:3f:1c: d3:2e:28:37:e7:54:bb:80:cd:b7:28:b7:bf:72:e8: ff:13:57:53:7b:70:c2:ae:00:a6:cb:5e:ba:7d:48: a3:ed:f6:2a:20:7f:d7:25:24:1e:ba:fc:e3:3c:4d: 9c:42:31:7d:a1:d2:f2:77:c6:cc:50:09:02:23:c9: 33:d7:06:c1:b9:8f:80:1a:0b:a6:29:49:fd:9c:81: d9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1B:12:CD:D5:72:21:F8:FB:14:FF:79:A2:5C:67:17:33:19:1F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/614077fa-9042-32a7-a4f9-142ac5bbe8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:2c:af:17:6e:83:16:96:29:e8:85:7f:8a:67:fd:b7:06:de: 17:5a:a8:a2:e3:fd:d0:e0:b5:d1:0b:9b:30:62:37:9d:16:11: 86:15:88:a4:8c:17:d4:fc:28:02:b8:0a:44:de:53:23:7b:06: 6c:d7:c9:c4:5d:7f:e7:53:1b:db:bd:0f:29:d3:73:2b:b1:3a: 37:46:54:c2:60:e5:57:89:11:74:fe:1c:a2:cf:1b:7c:02:5c: fe:7e:0d:af:cc:44:7b:e6:56:6b:ca:6e:a7:83:c4:18:c2:8e: 34:83:30:73:13:4f:57:d0:4f:8f:24:21:01:18:6d:ef:30:df: 9d:02:8d:53:db:8a:60:3f:cc:ea:d4:25:5b:5d:b8:4c:2b:c5: c1:88:b4:45:8b:82:a1:d0:b3:ca:53:e4:fc:e5:a9:d9:c0:de: c9:bd:6b:fa:48:e6:8b:4b:2f:22:5f:69:62:8a:87:ac:57:e0: b0:0e:b2:7b:5d:3d:ea:bb:f7:29:1d:6b:e1:77:45:d1:8e:f4: 0b:00:58:d6:7b:82:c7:e6:c9:8f:c3:a1:d2:58:75:78:1d:1e: 60:40:83:49:71:56:47:9a:19:89:db:96:67:8c:22:1c:e8:f2: a2:1c:aa:e4:4e:62:36:15:10:29:c2:51:8f:b6:cb:fc:40:31: 1a:cd:51:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZgGtXjAhTKkVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MjgwZDBhNDktNjBiNi00OTM2LTk2MDMtMzQzNDY0YmMzNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFJ3ku3EPWDk/vv5u94HCXyUFR0jnCdXTNkz I6PLSz9YpJqKV0TSjW7TkSp4Awxt//ahRMUxnrFbWHMzhFqdOdNOyYitb8MBNRtR GK+9Mm50tdSO4OJ/S14PrCm5iiGCrTGj4U/Z7Y1tBL3oo9H2FAjOzn5cbMfQJiT9 KS8SeGSFckBUtYoqmyMKrC0Q0wzTzc3qh4O3DlTjNF4hDjq+uQPTxwSob4FNvbt3 P8zzigSoPxzTLig351S7gM23KLe/cuj/E1dTe3DCrgCmy166fUij7fYqIH/XJSQe uvzjPE2cQjF9odLyd8bMUAkCI8kz1wbBuY+AGgumKUn9nIHZ5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwbEs3VciH4+xT/eaJcZxczGR80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNjE0MDc3ZmEtOTA0Mi0z MmE3LWE0ZjktMTQyYWM1YmJlOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0srxdugxaWKeiFf4pn/bcG3hdaqKLj/dDgtdELmzBiN50WEYYViKSM F9T8KAK4CkTeUyN7BmzXycRdf+dTG9u9DynTcyuxOjdGVMJg5VeJEXT+HKLPG3wC XP5+Da/MRHvmVmvKbqeDxBjCjjSDMHMTT1fQT48kIQEYbe8w350CjVPbimA/zOrU JVtduEwrxcGItEWLgqHQs8pT5PzlqdnA3sm9a/pI5otLLyJfaWKKh6xX4LAOsntd Peq79ykda+F3RdGO9AsAWNZ7gsfmyY/DodJYdXgdHmBAg0lxVkeaGYnblmeMIhzo 8qIcquROYjYVECnCUY+2y/xAMRrNUTY= -----END CERTIFICATE-----Generated at Sun Oct 19 20:13:48 2025 by rpki-client