$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b433b1d3-a681-389d-954b-0e85198aa22b.roa File: b433b1d3-a681-389d-954b-0e85198aa22b.roa (raw, json) Hash identifier: 9bjAfl6xBKB419VzxVIyXLP3ot1xOIL0Y1VhQSXvP0Q= Subject key identifier: 92:1F:A1:3B:49:7A:78:81:B8:03:B3:CA:F4:32:C4:3B:80:AA:05:B8 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B48E1BD59887C1E364279F680 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b433b1d3-a681-389d-954b-0e85198aa22b.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 203724 IP address blocks: 161.69.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bd:59:88:7c:1e:36:42:79:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f5d8126e-58e5-418c-8d26-21f86db28bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:cf:98:40:c6:86:53:55:17:3d:f5:61:fe: 38:28:ff:1a:f4:5f:33:74:51:29:10:5f:54:a7:0d: 4f:0c:04:3b:4a:1e:78:ba:59:52:b7:c7:f6:8d:f0: d7:3e:8f:e2:09:5f:29:11:f0:b3:47:5d:cc:29:24: 32:d2:6b:dc:72:24:80:93:0f:1d:35:e9:c1:3d:ed: d6:1f:58:30:a2:8b:75:39:2b:d2:92:ed:74:63:d0: bd:e7:4a:07:5d:f5:98:86:bc:b5:f7:e5:0b:22:60: 9b:b7:c4:af:d2:a1:13:3e:ce:b6:28:03:66:a2:4b: a0:00:5f:21:2d:65:cd:55:a0:f5:68:6b:6d:db:b6: 23:84:8d:c3:2e:c2:82:30:f5:f5:9c:82:80:a5:23: 4f:39:a5:ea:45:8e:e6:90:cb:62:91:04:3a:a3:52: e2:8e:aa:72:f7:da:df:02:4d:10:1c:33:a9:2e:d9: 74:ac:fa:b4:af:8c:12:7d:97:f5:6b:6a:3c:dc:ed: ad:01:b8:2f:68:c7:a2:b0:79:71:25:99:01:c6:f2: b1:1a:3f:37:26:d4:0b:31:0f:30:93:3e:ec:bc:12: 16:85:b7:a4:14:94:36:a9:05:96:8f:f2:34:39:f2: 72:cf:86:71:03:87:7f:3d:2e:b3:20:08:76:34:3d: 21:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1F:A1:3B:49:7A:78:81:B8:03:B3:CA:F4:32:C4:3B:80:AA:05:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b433b1d3-a681-389d-954b-0e85198aa22b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:43:79:37:9c:36:88:ba:31:34:11:08:6a:bd:ba:29:a9:1f: 5f:63:a9:61:f9:ae:70:e6:5a:04:04:9f:a0:fb:3b:4c:36:85: b4:eb:9b:ce:75:c2:a7:df:10:82:60:99:84:23:7f:64:9e:5d: 53:e2:09:a1:00:1b:a3:c3:73:3d:e7:35:46:ae:66:2f:f7:53: 90:13:e8:fb:ae:40:e0:33:e6:45:06:4e:bd:c5:30:46:95:a5: 3f:a4:b0:34:41:71:0d:f3:19:ba:ab:63:77:f8:f1:df:d4:22: 4b:db:05:86:34:bd:5c:39:c4:f9:80:93:94:e0:c1:5d:8a:36: a5:b3:d5:44:c3:c1:de:82:fe:84:56:1b:86:af:b8:c2:3c:3b: 43:de:90:86:4c:62:74:50:65:3b:63:7c:7b:bf:4e:aa:d0:35: d5:81:4f:2e:06:8b:16:41:fb:e9:e3:04:77:a4:38:4e:de:de: ab:32:fa:ba:f5:9b:64:81:fb:bd:96:00:7a:e4:77:08:20:d3: a4:3a:7f:8c:32:2c:24:38:81:8f:a1:98:ae:b6:ae:37:18:e7: 6b:9f:21:63:83:c7:c7:e3:f7:5a:bf:21:cb:85:cd:79:dc:4a: ae:a8:f0:bd:57:06:2b:35:2a:0a:21:b8:92:9e:c9:4f:fc:20: ad:84:14:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b1ZiHweNkJ59oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjVkODEyNmUtNThlNS00MThjLThkMjYtMjFmODZkYjI4YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSjPmEDGhlNVFz31Yf44KP8a9F8zdFEpEF9U pw1PDAQ7Sh54ullSt8f2jfDXPo/iCV8pEfCzR13MKSQy0mvcciSAkw8dNenBPe3W H1gwoot1OSvSku10Y9C950oHXfWYhry19+ULImCbt8Sv0qETPs62KANmokugAF8h LWXNVaD1aGtt27YjhI3DLsKCMPX1nIKApSNPOaXqRY7mkMtikQQ6o1Lijqpy99rf Ak0QHDOpLtl0rPq0r4wSfZf1a2o83O2tAbgvaMeisHlxJZkBxvKxGj83JtQLMQ8w kz7svBIWhbekFJQ2qQWWj/I0OfJyz4ZxA4d/PS6zIAh2ND0hpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIfoTtJeniBuAOzyvQyxDuAqgW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjQzM2IxZDMtYTY4MS0z ODlkLTk1NGItMGU4NTE5OGFhMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhDeTecNoi6MTQRCGq9uimpH19jqWH5rnDmWgQEn6D7O0w2hbTrm851 wqffEIJgmYQjf2SeXVPiCaEAG6PDcz3nNUauZi/3U5AT6PuuQOAz5kUGTr3FMEaV pT+ksDRBcQ3zGbqrY3f48d/UIkvbBYY0vVw5xPmAk5TgwV2KNqWz1UTDwd6C/oRW G4avuMI8O0PekIZMYnRQZTtjfHu/TqrQNdWBTy4GixZB++njBHekOE7e3qsy+rr1 m2SB+72WAHrkdwgg06Q6f4wyLCQ4gY+hmK62rjcY52ufIWODx8fj91q/IcuFzXnc Sq6o8L1XBis1KgohuJKeyU/8IK2EFDk= -----END CERTIFICATE-----Generated at Sun Oct 19 17:52:20 2025 by rpki-client