$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa File: 31157718-1d9b-3397-ac07-a6037d33d8f0.roa (raw, json) Hash identifier: z6Icep9qeh86vWQ9vQzXUdUcI+A4+F0vzCfusUU0g/Y= Subject key identifier: 16:D2:C5:98:C4:99:9D:30:CC:02:74:83:B0:92:7B:C1:86:D4:0E:9F Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584A43DAF5C1B3B40B0BDD5AA980 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 400618 IP address blocks: 161.129.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:da:f5:c1:b3:b4:0b:0b:dd:5a:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=46be9547-6804-4768-8074-677dd1a23a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:71:29:c4:20:dd:a3:ec:b8:31:f4:68:3d: 75:33:9a:53:6b:e0:7b:c3:be:37:9b:1b:54:ec:7c: a2:d0:de:69:34:bc:c1:5b:ae:85:0e:66:58:05:c2: bb:be:0e:41:46:80:ea:bf:5c:e7:85:d0:ca:cc:6c: e2:78:2e:d9:e5:08:e0:3a:ff:1f:0b:30:f6:d9:2c: 25:6d:3f:5e:50:7c:98:9b:c5:2d:9f:94:95:d0:94: cc:c6:2b:ce:a4:7b:7d:11:87:30:cd:45:43:8b:5d: 1b:f4:5a:40:80:75:06:e1:ef:de:c0:84:8b:c1:5e: 03:a0:41:e8:62:70:52:ee:03:9c:71:61:3a:63:61: 70:2d:92:16:b1:ea:96:ce:ee:53:b0:9f:2b:9b:20: c7:a7:f2:db:96:5c:78:39:b9:b1:93:cb:f2:3b:9e: 32:d3:ed:13:b1:60:94:55:3a:96:47:06:fa:7e:6a: b3:cb:ed:26:2a:89:94:e3:a9:9e:c5:66:20:b9:e8: 95:37:81:a4:0f:ac:00:d2:61:b3:7b:eb:0e:47:ca: d5:1a:66:81:a2:67:5b:9f:83:52:e5:17:78:32:61: 22:d1:0e:33:5d:e0:60:ca:1c:2e:2e:9d:fa:1f:31: 74:51:05:dd:55:c0:a9:d1:89:2a:fd:d8:80:91:d3: 70:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D2:C5:98:C4:99:9D:30:CC:02:74:83:B0:92:7B:C1:86:D4:0E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/31157718-1d9b-3397-ac07-a6037d33d8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:df:1a:64:9b:95:9a:0b:f2:66:d4:7c:1f:bc:b0:75:0e:5e: 57:4b:65:22:39:0e:92:84:70:3a:af:3c:5c:da:18:b5:70:fe: c7:f1:f2:f4:f6:22:de:4e:cd:30:2b:26:10:b6:ec:ee:8d:3d: 3c:d3:ca:1f:6e:b3:d6:72:aa:72:0d:aa:dd:ee:d8:26:54:a7: 4e:ac:7d:6b:38:04:1d:7c:83:31:0a:7d:0b:89:da:87:fb:e9: 39:c9:fa:db:19:05:75:03:ba:e6:52:3e:b0:1e:6b:27:19:6a: 77:f9:0b:49:b3:5c:fe:5f:96:ec:fe:8e:4c:a8:33:76:c9:0d: 0c:aa:2e:74:6c:be:71:27:7f:7b:87:08:46:f6:97:ac:57:bc: 75:ad:60:dd:03:16:a4:bb:07:95:90:45:3c:9b:b3:78:b7:25: 23:f5:79:21:71:0a:f6:f5:6d:23:a8:56:b0:70:c9:0b:c8:65: 10:65:83:a3:40:81:ac:a7:76:8e:cc:90:c0:ec:7e:62:12:ba: a5:c3:25:59:9d:9e:3d:2e:93:52:78:73:01:52:72:da:48:e9: ff:a8:02:d6:c1:15:f0:38:39:f0:14:27:6b:92:20:4f:dd:41: 8d:0f:84:93:4f:15:34:78:c1:0b:f7:db:ca:54:6f:ca:45:0e: bf:6d:ee:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2vXBs7QLC91aqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk NDZiZTk1NDctNjgwNC00NzY4LTgwNzQtNjc3ZGQxYTIzYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPtxKcQg3aPsuDH0aD11M5pTa+B7w743mxtU 7Hyi0N5pNLzBW66FDmZYBcK7vg5BRoDqv1znhdDKzGzieC7Z5QjgOv8fCzD22Swl bT9eUHyYm8Utn5SV0JTMxivOpHt9EYcwzUVDi10b9FpAgHUG4e/ewISLwV4DoEHo YnBS7gOccWE6Y2FwLZIWseqWzu5TsJ8rmyDHp/Lbllx4Obmxk8vyO54y0+0TsWCU VTqWRwb6fmqzy+0mKomU46mexWYgueiVN4GkD6wA0mGze+sOR8rVGmaBomdbn4NS 5Rd4MmEi0Q4zXeBgyhwuLp36HzF0UQXdVcCp0Ykq/diAkdNwxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbSxZjEmZ0wzAJ0g7CSe8GG1A6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvMzExNTc3MTgtMWQ5Yi0z Mzk3LWFjMDctYTYwMzdkMzNkOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITfGmSblZoL8mbUfB+8sHUOXldLZSI5DpKEcDqvPFzaGLVw/sfx8vT2 It5OzTArJhC27O6NPTzTyh9us9ZyqnINqt3u2CZUp06sfWs4BB18gzEKfQuJ2of7 6TnJ+tsZBXUDuuZSPrAeaycZanf5C0mzXP5fluz+jkyoM3bJDQyqLnRsvnEnf3uH CEb2l6xXvHWtYN0DFqS7B5WQRTybs3i3JSP1eSFxCvb1bSOoVrBwyQvIZRBlg6NA gayndo7MkMDsfmISuqXDJVmdnj0uk1J4cwFSctpI6f+oAtbBFfA4OfAUJ2uSIE/d QY0PhJNPFTR4wQv328pUb8pFDr9t7ps= -----END CERTIFICATE-----Generated at Mon Jun 30 09:43:40 2025 by rpki-client