$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c7c50b52-6285-3a5f-8747-1a714638d912.roa File: c7c50b52-6285-3a5f-8747-1a714638d912.roa (raw, json) Hash identifier: daYA0gOHV3ptx+VLZYITHCml7Z61p+pz7/Ja5c9dgv8= Subject key identifier: CD:BC:63:5E:35:CD:95:CD:B3:A4:01:57:60:91:F5:C3:DC:CE:4F:59 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584B6BC74F0786FF75F30866532E Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c7c50b52-6285-3a5f-8747-1a714638d912.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 31898 IP address blocks: 161.69.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4f:07:86:ff:75:f3:08:66:53:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=b34a50bf-2420-451c-9383-265a6c4f4f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:32:52:7a:a6:be:70:85:a0:0e:1d:4c:24: ce:bf:ae:dc:ee:18:ca:d0:2b:b0:da:e3:50:58:0f: 90:58:d4:4f:3b:8e:9e:0f:b0:25:e5:db:34:d1:e8: 4e:cf:72:81:b8:fc:85:c0:83:6d:1c:99:dc:bd:f1: 46:64:19:0b:c4:13:3d:fa:8c:2b:51:84:35:68:f7: 00:04:f8:af:0e:c2:55:a5:27:b5:a6:24:1b:7d:ec: c6:4e:83:70:96:f2:36:96:82:b6:e5:f1:11:f8:5e: 62:42:0e:a1:c5:b3:f8:23:24:8e:65:38:83:e5:6d: 01:f3:f0:98:f0:98:66:70:fe:17:1e:cb:33:e8:bd: 20:f8:9f:1c:11:3c:cf:d7:b1:43:cf:55:05:5b:a8: ce:4f:c7:f8:13:71:9a:cb:6b:9e:a9:19:f2:f7:59: ff:8c:99:cc:1d:76:75:ef:e0:2e:cb:f6:8c:3a:13: f2:88:89:80:0d:0b:87:dd:46:a1:59:ae:48:4f:30: f8:28:80:a9:93:ad:6e:1f:38:a0:a2:2d:6b:87:e8: ce:fd:88:cd:0c:de:9f:d7:68:7a:79:69:08:10:08: a2:66:b0:40:ae:15:8c:f0:d1:37:bb:01:7c:26:67: 63:ba:9c:21:c2:08:60:f1:b9:81:7a:6c:a0:8e:b3: 46:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BC:63:5E:35:CD:95:CD:B3:A4:01:57:60:91:F5:C3:DC:CE:4F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c7c50b52-6285-3a5f-8747-1a714638d912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8b:c4:53:4c:bd:db:e6:4c:5c:19:85:3d:b3:58:e6:51:e1: 7b:e4:67:72:f9:cc:02:56:0f:28:66:07:ca:99:83:e2:32:97: 39:02:ec:0d:2b:16:3e:d1:92:c8:8b:3c:7c:bb:b1:1f:17:24: 6b:98:65:38:1e:2d:9e:e6:aa:41:bc:52:e2:f8:b5:c4:fe:76: d9:27:d4:9d:ca:88:66:27:9a:7d:61:dc:6d:44:c2:43:cc:c1: 09:13:c8:b7:19:08:3f:d0:a3:c9:c8:10:c5:03:f3:ce:0a:f2: 52:8a:2c:9a:30:e5:33:f2:77:bd:d0:ef:42:05:75:b1:05:b5: 63:05:bb:dc:aa:35:73:d2:eb:42:17:cf:2d:94:b9:cf:af:09: e7:5b:3e:54:c7:b7:34:6e:3a:e7:cc:61:07:89:a3:80:9a:7c: 45:2b:30:86:dc:16:5b:9d:9a:d0:44:e7:95:62:75:88:57:d0: 8d:9a:83:b0:d5:0f:58:07:dc:db:b2:ea:7d:ba:ce:e0:1e:cf: e5:ce:5d:94:6d:c9:f5:f9:88:35:6a:31:15:14:bb:47:96:11: c1:64:7d:eb:2a:89:31:d3:a1:26:3e:70:af:f1:58:eb:f8:81: af:85:45:d5:5a:c6:25:fa:02:78:41:0b:ad:70:4c:0b:5c:61: 3f:7f:72:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx08Hhv918whmUy4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YjM0YTUwYmYtMjQyMC00NTFjLTkzODMtMjY1YTZjNGY0ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUsyUnqmvnCFoA4dTCTOv67c7hjK0Cuw2uNQ WA+QWNRPO46eD7Al5ds00ehOz3KBuPyFwINtHJncvfFGZBkLxBM9+owrUYQ1aPcA BPivDsJVpSe1piQbfezGToNwlvI2loK25fER+F5iQg6hxbP4IySOZTiD5W0B8/CY 8JhmcP4XHssz6L0g+J8cETzP17FDz1UFW6jOT8f4E3Gay2ueqRny91n/jJnMHXZ1 7+Auy/aMOhPyiImADQuH3UahWa5ITzD4KICpk61uHzigoi1rh+jO/YjNDN6f12h6 eWkIEAiiZrBArhWM8NE3uwF8Jmdjupwhwghg8bmBemygjrNGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM28Y141zZXNs6QBV2CR9cPczk9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYzdjNTBiNTItNjI4NS0z YTVmLTg3NDctMWE3MTQ2MzhkOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSLxFNMvdvmTFwZhT2zWOZR4XvkZ3L5zAJWDyhmB8qZg+IylzkC7A0r Fj7RksiLPHy7sR8XJGuYZTgeLZ7mqkG8UuL4tcT+dtkn1J3KiGYnmn1h3G1EwkPM wQkTyLcZCD/Qo8nIEMUD884K8lKKLJow5TPyd73Q70IFdbEFtWMFu9yqNXPS60IX zy2Uuc+vCedbPlTHtzRuOufMYQeJo4CafEUrMIbcFludmtBE55VidYhX0I2ag7DV D1gH3Nuy6n26zuAez+XOXZRtyfX5iDVqMRUUu0eWEcFkfesqiTHToSY+cK/xWOv4 ga+FRdVaxiX6AnhBC61wTAtcYT9/cmo= -----END CERTIFICATE-----Generated at Sun Oct 19 20:13:22 2025 by rpki-client