$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa File: b822bf14-e184-3b36-81d3-0ada1b344013.roa (raw, json) Hash identifier: 1cflBWwNruA1xEoruW/DrWOj5TT/67PmRP6IgUcF8sA= Subject key identifier: 80:72:E9:6C:05:24:D2:D0:FF:CE:40:A2:C9:22:5E:11:C5:56:4D:53 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B1806D66E7C65884C13EE5C00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 203724 IP address blocks: 161.69.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d6:6e:7c:65:88:4c:13:ee:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=f9cb2e61-be50-4a84-ba23-c976c0dac255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:af:9d:18:a9:6b:a4:b4:ea:bd:ce:4a:7b: ad:c1:e8:e5:fd:df:48:29:7a:0a:77:fd:c9:e4:c8: a0:ec:f1:b5:a2:07:92:fa:c8:b6:b7:bd:af:a5:0c: 15:73:35:ed:66:90:ec:f4:0b:0c:c2:9c:0b:85:81: f2:e6:be:9a:c1:a0:ca:a7:67:ee:f7:6e:95:e5:1f: 77:89:f4:4c:e2:54:86:62:a6:ed:2c:24:64:af:64: ef:1d:2f:98:66:8d:19:f0:04:28:5d:45:e8:82:11: b6:35:2b:48:4f:a8:d7:dc:21:a8:a0:87:2c:c8:42: f7:f7:61:9f:37:b5:91:bd:28:2b:89:fd:3e:4f:2b: 09:fc:b5:36:bf:9c:2f:3d:75:7b:34:82:44:f7:0f: 29:fd:96:e2:66:f5:71:b0:ca:f0:ae:9f:f4:f8:e0: b6:6b:6f:4a:3f:ce:99:bf:b4:40:53:82:ef:5b:c8: 14:ad:a3:ba:26:4a:61:19:49:02:5b:dc:9a:05:7e: dc:d1:3f:1d:f2:e7:cd:f3:31:a6:99:24:bd:07:46: 01:fe:0e:86:c7:b5:67:ca:fe:2c:2a:d0:71:7a:cc: a8:79:f0:8a:bd:06:15:77:ac:2c:0f:8f:f2:0c:35: bc:05:b5:13:bc:66:fc:df:15:f8:7e:d4:59:69:b5: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:72:E9:6C:05:24:D2:D0:FF:CE:40:A2:C9:22:5E:11:C5:56:4D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b822bf14-e184-3b36-81d3-0ada1b344013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:23:64:74:e1:73:d7:ae:29:4c:48:01:b1:30:87:b9:98:11: 91:eb:8b:44:33:bb:47:30:54:33:39:ab:be:6c:60:a4:6e:ff: 62:2d:c0:d0:06:ef:29:b6:46:0c:b4:23:a8:1f:42:3d:b1:68: 68:8b:16:1a:1d:dc:8d:1c:06:99:3d:99:c7:c1:7c:05:83:4b: 42:e7:e6:2f:1b:33:f3:52:82:fc:53:46:9b:b4:db:0b:94:79: 5e:d4:e0:d9:06:2c:46:bc:3c:e3:ad:54:25:12:9b:e1:45:e0: a5:d1:36:b5:be:dc:cb:29:28:f4:44:e2:1e:6a:bc:e5:f0:e0: 67:a4:b8:f8:47:7a:25:26:b5:8e:ac:d8:2d:76:27:8c:e1:61: 88:3e:08:f2:c7:19:a9:0b:73:82:02:6e:b3:76:21:14:2b:8f: ff:6a:b9:45:50:64:f1:33:f3:94:55:3b:0b:cc:c4:0f:73:aa: 5d:aa:bb:26:9b:73:f4:80:22:37:eb:a3:18:33:a7:0e:1d:b2: 9e:82:ca:29:44:8a:c6:6a:c6:c9:7d:93:84:64:c2:9e:36:56: a3:37:54:0b:89:86:ed:25:c1:04:88:83:dc:ef:2f:3c:1a:7b: 03:de:20:dc:19:b0:57:26:27:99:ae:6e:84:df:e8:84:01:53: be:bc:c7:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtZufGWITBPuXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjljYjJlNjEtYmU1MC00YTg0LWJhMjMtYzk3NmMwZGFjMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpGvnRipa6S06r3OSnutwejl/d9IKXoKd/3J 5Mig7PG1ogeS+si2t72vpQwVczXtZpDs9AsMwpwLhYHy5r6awaDKp2fu926V5R93 ifRM4lSGYqbtLCRkr2TvHS+YZo0Z8AQoXUXoghG2NStIT6jX3CGooIcsyEL392Gf N7WRvSgrif0+TysJ/LU2v5wvPXV7NIJE9w8p/ZbiZvVxsMrwrp/0+OC2a29KP86Z v7RAU4LvW8gUraO6JkphGUkCW9yaBX7c0T8d8ufN8zGmmSS9B0YB/g6Gx7Vnyv4s KtBxesyoefCKvQYVd6wsD4/yDDW8BbUTvGb83xX4ftRZabXEewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBy6WwFJNLQ/85AoskiXhHFVk1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjgyMmJmMTQtZTE4NC0z YjM2LTgxZDMtMGFkYTFiMzQ0MDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0jZHThc9euKUxIAbEwh7mYEZHri0Qzu0cwVDM5q75sYKRu/2ItwNAG 7ym2Rgy0I6gfQj2xaGiLFhod3I0cBpk9mcfBfAWDS0Ln5i8bM/NSgvxTRpu02wuU eV7U4NkGLEa8POOtVCUSm+FF4KXRNrW+3MspKPRE4h5qvOXw4GekuPhHeiUmtY6s 2C12J4zhYYg+CPLHGakLc4ICbrN2IRQrj/9quUVQZPEz85RVOwvMxA9zql2quyab c/SAIjfroxgzpw4dsp6CyilEisZqxsl9k4Rkwp42VqM3VAuJhu0lwQSIg9zvLzwa ewPeINwZsFcmJ5muboTf6IQBU768x1U= -----END CERTIFICATE-----Generated at Sun Oct 19 17:52:04 2025 by rpki-client