$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/823cf32c-4ea1-3852-8c0d-76497344fbee.roa File: 823cf32c-4ea1-3852-8c0d-76497344fbee.roa (raw, json) Hash identifier: FdHhkaUgMByEt4GeUj19ZsTiNkTWakXw8cQD2KzKs1s= Subject key identifier: 54:D2:06:19:00:6C:54:BD:31:0C:C1:AD:5F:7C:BD:58:55:C5:60:58 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B7DECAEEE1F54D1D7E64EC000 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/823cf32c-4ea1-3852-8c0d-76497344fbee.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 203724 IP address blocks: 161.69.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ae:ee:1f:54:d1:d7:e6:4e:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=15aeec9d-2577-4b98-a4f7-722c2dd9a8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:b2:2b:c0:ce:7b:2a:9a:ed:78:a2:1d:85: c3:c5:55:dd:fc:31:b0:a6:67:8d:05:9d:fa:83:3c: c4:78:78:29:47:84:27:f3:6d:56:fc:ca:1a:24:96: de:ab:44:ae:68:7b:e2:83:61:d6:57:61:31:ea:3e: 93:fc:89:a8:64:fc:5d:5c:14:aa:ef:9b:5f:67:a5: ff:e5:9e:4b:c1:09:f2:b0:23:15:57:ac:4c:44:62: 37:b1:3e:39:c8:fc:a5:49:08:3e:91:75:f1:58:f2: 19:53:b4:4d:85:7c:60:29:15:db:e7:81:bf:f2:2e: 4c:c5:c5:8a:6e:80:84:dd:34:6d:e7:bf:4c:af:3a: 2a:71:22:ab:a9:61:ed:23:81:25:8a:c0:f5:8e:9b: 0b:f3:a1:0b:75:f0:51:cc:95:87:4a:c5:e9:b0:62: a1:3b:72:da:c8:1f:3f:c0:f1:86:f4:e0:6d:61:2c: ae:d9:dc:5f:d6:20:fd:69:a1:73:12:d7:b2:ff:28: aa:dd:86:5f:41:0d:74:d8:1d:c8:06:f9:e0:0e:47: 6b:f4:80:d6:5a:34:af:b4:39:a8:26:34:5b:79:1c: 49:ce:d6:87:e5:1a:4d:23:64:69:56:c4:3a:d9:17: af:f1:92:f9:39:f4:c9:2e:5a:38:87:de:74:d0:c9: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D2:06:19:00:6C:54:BD:31:0C:C1:AD:5F:7C:BD:58:55:C5:60:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/823cf32c-4ea1-3852-8c0d-76497344fbee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:59:34:6b:ee:3c:38:60:5d:3b:ca:16:06:b2:60:1b:9b:54: f7:a5:b5:5d:6f:da:59:ed:3b:eb:d2:04:bc:0f:64:91:16:54: 88:1b:c7:88:7d:81:45:7c:9c:01:fb:ad:fc:44:7e:9f:65:de: 14:14:6f:46:f5:62:05:44:a3:9d:4a:b4:64:27:7b:e1:02:f7: 14:b8:c5:d8:64:ee:cf:87:5e:7d:f4:2b:29:ee:25:62:09:6b: 30:5a:bd:99:da:9d:ab:ab:32:be:8b:3c:9c:ed:b9:7d:1c:d7: fc:4b:2b:55:35:d7:ee:cc:56:35:8f:98:20:e3:28:88:a4:45: 6f:58:1c:13:21:65:04:d0:40:6c:5b:d6:20:27:e2:cb:37:ec: 97:d2:f2:51:d2:0a:bf:82:5a:1e:a3:51:f0:5c:dd:d8:d6:73: 33:fb:34:0e:b9:5a:85:f1:d6:80:1d:d1:bd:b2:b7:a8:81:0a: 5f:30:76:e3:27:8d:0f:01:fa:c1:9f:94:5f:f1:e1:3b:1b:6b: bc:19:04:53:a3:84:27:42:38:a6:d1:b9:1a:cc:91:5f:3d:62: ea:01:92:ad:6d:be:1a:b1:8e:c9:7b:05:2e:b3:1d:9b:12:08: 22:b9:13:a9:4a:79:73:9d:de:50:00:dc:3a:a2:d0:a7:80:db: c2:49:cb:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97K7uH1TR1+ZOwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MTVhZWVjOWQtMjU3Ny00Yjk4LWE0ZjctNzIyYzJkZDlhOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L+yK8DOeyqa7XiiHYXDxVXd/DGwpmeNBZ36 gzzEeHgpR4Qn821W/MoaJJbeq0SuaHvig2HWV2Ex6j6T/ImoZPxdXBSq75tfZ6X/ 5Z5LwQnysCMVV6xMRGI3sT45yPylSQg+kXXxWPIZU7RNhXxgKRXb54G/8i5MxcWK boCE3TRt579MrzoqcSKrqWHtI4ElisD1jpsL86ELdfBRzJWHSsXpsGKhO3LayB8/ wPGG9OBtYSyu2dxf1iD9aaFzEtey/yiq3YZfQQ102B3IBvngDkdr9IDWWjSvtDmo JjRbeRxJztaH5RpNI2RpVsQ62Rev8ZL5OfTJLlo4h9500MlJnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTSBhkAbFS9MQzBrV98vVhVxWBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvODIzY2YzMmMtNGVhMS0z ODUyLThjMGQtNzY0OTczNDRmYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRZNGvuPDhgXTvKFgayYBubVPeltV1v2lntO+vSBLwPZJEWVIgbx4h9 gUV8nAH7rfxEfp9l3hQUb0b1YgVEo51KtGQne+EC9xS4xdhk7s+HXn30KynuJWIJ azBavZnanaurMr6LPJztuX0c1/xLK1U11+7MVjWPmCDjKIikRW9YHBMhZQTQQGxb 1iAn4ss37JfS8lHSCr+CWh6jUfBc3djWczP7NA65WoXx1oAd0b2yt6iBCl8wduMn jQ8B+sGflF/x4Tsba7wZBFOjhCdCOKbRuRrMkV89YuoBkq1tvhqxjsl7BS6zHZsS CCK5E6lKeXOd3lAA3Dqi0KeA28JJy8I= -----END CERTIFICATE-----Generated at Sun Oct 19 17:51:18 2025 by rpki-client