$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa File: 2782020a-b333-378b-976a-19c150b5397c.roa (raw, json) Hash identifier: RCy0iAsj3n+luzVvOzuLrXZ7smTHXEczYgohk2LNQ+Q= Subject key identifier: 01:79:A3:7F:CD:92:78:29:71:9A:30:57:28:F8:30:05:29:D5:32:42 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584AD23BB48B2F908EDF024E78C0 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 8075 IP address blocks: 161.221.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b4:8b:2f:90:8e:df:02:4e:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=8d6e6840-9aad-4ff5-9b79-fb97c16c58e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:b1:fb:aa:84:30:3e:c7:8e:b5:19:ec:80: 19:5f:7e:04:ea:cd:4e:89:df:fd:b6:57:a5:21:ce: f6:3c:6f:14:17:fd:ad:7e:dc:9d:3c:0c:ad:61:36: d0:4a:04:7d:26:2f:c7:8c:54:37:14:00:b7:26:4a: 16:f5:b7:2a:72:27:fc:f9:7b:70:a0:9e:64:b3:41: df:c2:38:89:d9:1c:c4:06:63:56:63:ff:33:3e:73: c9:7d:67:fb:5b:01:2e:d4:85:53:3b:c8:03:e8:d3: b8:c7:28:7c:3e:82:6c:a6:f4:7e:23:42:17:eb:a9: 34:c9:2e:c3:3e:ff:ad:7d:bd:aa:e9:4a:cd:d5:73: 15:98:99:64:9e:38:26:89:cf:67:76:6d:6e:8b:94: da:41:b8:e3:1a:72:46:d3:fd:05:c0:d0:b0:c6:7a: f8:1e:bf:ca:aa:86:d3:6c:b8:00:81:f8:cd:80:97: a4:07:84:77:17:9b:d6:6e:f0:1d:82:0f:ef:b9:42: bd:0f:9c:84:83:f6:55:d7:3a:9c:6c:a4:7c:c1:7c: 66:0a:17:d9:f4:47:c9:49:4d:f8:cd:97:3a:16:26: 8f:cf:e0:13:d2:01:23:8b:f4:d9:a1:e7:e4:e4:f3: 48:09:51:10:c0:dd:57:a6:fe:b7:1f:e4:2d:68:ea: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:A3:7F:CD:92:78:29:71:9A:30:57:28:F8:30:05:29:D5:32:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8a:b6:4e:7d:cb:cd:3b:4b:8d:e2:f7:2e:6b:5a:c7:0c:78: f2:b2:4b:fc:6a:b0:0c:e3:21:98:38:62:bf:c2:1f:38:37:b4: db:b4:a5:47:9d:7c:d5:be:69:5b:98:22:40:72:be:91:4d:39: 31:7e:35:0d:1c:1b:a9:9d:36:92:75:c3:72:37:0a:44:7b:48: 93:f0:bb:18:cd:ea:7a:05:3b:46:4c:34:dd:1c:5c:85:c8:07: 98:31:18:e9:89:8e:78:67:5a:2b:34:c2:8f:9d:ef:94:77:cb: 67:13:1f:37:ee:7d:af:d5:4c:4c:97:92:c0:0f:39:df:1d:7b: 05:ce:a2:83:b8:53:d1:bb:7d:4c:cd:f9:65:40:9d:45:ca:71: a0:33:53:81:8d:d7:fb:af:6c:02:47:cf:1e:bc:e4:62:e4:17: 18:58:79:c0:d5:36:69:9f:97:3a:87:10:32:f0:66:9c:00:d0: 1d:49:db:18:de:03:7e:4c:ff:ee:d1:f3:ce:33:aa:39:ee:bf: 7b:50:ce:8d:d3:db:1f:4f:f4:3f:73:9a:59:a4:51:ac:83:c9: c0:a3:1c:a0:2b:35:f9:84:b2:c5:77:88:3b:60:44:32:6e:8d: d1:cd:3a:5a:0d:33:43:40:c1:a3:1a:f8:a5:75:6c:37:2c:5a: cc:5e:12:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7SLL5CO3wJOeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OGQ2ZTY4NDAtOWFhZC00ZmY1LTliNzktZmI5N2MxNmM1OGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnex+6qEMD7HjrUZ7IAZX34E6s1Oid/9tlel Ic72PG8UF/2tftydPAytYTbQSgR9Ji/HjFQ3FAC3JkoW9bcqcif8+XtwoJ5ks0Hf wjiJ2RzEBmNWY/8zPnPJfWf7WwEu1IVTO8gD6NO4xyh8PoJspvR+I0IX66k0yS7D Pv+tfb2q6UrN1XMVmJlknjgmic9ndm1ui5TaQbjjGnJG0/0FwNCwxnr4Hr/KqobT bLgAgfjNgJekB4R3F5vWbvAdgg/vuUK9D5yEg/ZV1zqcbKR8wXxmChfZ9EfJSU34 zZc6FiaPz+AT0gEji/TZoefk5PNICVEQwN1Xpv63H+QtaOocLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF5o3/NkngpcZowVyj4MAUp1TJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvMjc4MjAyMGEtYjMzMy0z NzhiLTk3NmEtMTljMTUwYjUzOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaKtk59y807S43i9y5rWscMePKyS/xqsAzjIZg4Yr/CHzg3tNu0pUed fNW+aVuYIkByvpFNOTF+NQ0cG6mdNpJ1w3I3CkR7SJPwuxjN6noFO0ZMNN0cXIXI B5gxGOmJjnhnWis0wo+d75R3y2cTHzfufa/VTEyXksAPOd8dewXOooO4U9G7fUzN +WVAnUXKcaAzU4GN1/uvbAJHzx685GLkFxhYecDVNmmflzqHEDLwZpwA0B1J2xje A35M/+7R884zqjnuv3tQzo3T2x9P9D9zmlmkUayDycCjHKArNfmEssV3iDtgRDJu jdHNOloNM0NAwaMa+KV1bDcsWsxeEpI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:30:35 2025 by rpki-client