$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa File: 3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa (raw, json) Hash identifier: GA/VFJTxsNxyBZ6xjvPW6VE4rVRleCF+3OJpE1RpoAA= Subject key identifier: 79:6B:1E:B9:E8:01:35:2F:EC:E6:BF:F5:08:38:E2:36:F6:9B:6E:F5 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584A3B7AFE88035F1893A4E4C4C0 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 31898 IP address blocks: 161.221.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fe:88:03:5f:18:93:a4:e4:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=90fdcf58-a22d-49c0-be39-6d6b410974a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:58:92:a1:82:e0:a6:c1:d1:e5:86:1f:a5: 5c:ab:4e:ed:a6:1e:d8:0d:c4:7b:42:ac:69:18:70: 38:a5:67:b6:1b:67:ab:03:16:46:b9:1f:23:61:03: 33:a3:8a:0c:10:26:b8:93:00:12:2c:ac:00:9a:1b: 5c:f3:69:ab:aa:08:df:49:ab:34:c7:bf:66:9c:83: db:af:38:be:d0:6d:8c:61:68:eb:56:f6:9a:e5:c8: 49:91:96:78:77:74:d9:f8:6f:b2:04:de:da:ae:43: e9:69:85:11:ff:90:a1:fb:bf:df:27:ca:be:3c:c2: 3f:59:52:61:15:96:6e:07:43:c9:b8:8b:1a:d0:a8: 33:ae:da:7b:5c:d4:81:9f:51:91:6e:f2:b5:c7:df: e2:5b:af:f3:47:6d:b1:b1:cd:21:d0:7e:46:10:98: 8d:77:4a:9f:9c:fc:c3:fe:a2:1d:23:58:b1:f4:4a: e6:91:5f:67:43:0b:a2:69:72:d2:c7:32:67:1a:d2: fa:8b:44:4d:a2:70:06:0f:39:fb:2a:b1:08:b6:d5: 91:c7:8f:02:f1:3e:7a:62:16:b1:44:ec:a0:5e:45: 14:c4:bb:ee:a4:0c:70:03:c9:ed:33:48:bf:ee:d0: 2f:c5:9c:64:44:53:3a:10:a2:dc:95:19:cc:c6:15: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6B:1E:B9:E8:01:35:2F:EC:E6:BF:F5:08:38:E2:36:F6:9B:6E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/3fa72d16-ebd7-3f92-82d4-539f3abe79b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:50:87:82:0d:3b:a3:3a:39:b3:ea:c5:1a:10:e0:b3:8b:0d: 37:17:b8:c0:52:2e:6d:f4:ef:69:87:f5:7a:6e:54:ad:da:51: 38:72:b0:50:d3:58:c5:d0:25:2f:5c:21:a8:19:b9:3f:86:21: f8:83:a3:49:d6:76:7e:5a:0b:fc:21:4e:27:59:b6:57:d6:b4: d8:83:54:22:b3:c4:ac:d4:ab:8a:4d:56:65:2a:7c:aa:96:b1: 11:09:ef:37:c0:fd:85:92:95:97:89:8f:d5:a8:42:d6:07:a0: a8:4c:45:a2:f3:20:25:95:87:48:a0:5d:42:ed:cb:d9:17:bb: a8:9d:29:07:1d:83:6a:ed:4f:10:dc:62:2b:7a:dd:0c:4d:48: 4d:ca:73:1b:06:62:b3:19:8d:c6:cc:4a:2b:c1:1d:bc:96:01: f1:59:ef:e4:25:e7:9a:ab:45:d1:50:f6:0d:23:2c:f3:e6:3b: c9:e5:d1:40:11:b4:a6:d5:18:ce:12:06:07:26:00:0e:cd:65: 8e:ab:a6:0e:e1:ef:ae:1b:61:9e:e0:57:96:80:f6:3a:27:24: 6c:88:17:10:e1:51:74:92:07:77:a3:c8:7d:b0:c8:a5:35:ca: b8:81:4d:05:ca:cd:a7:03:1d:bd:97:64:95:2b:56:03:0c:42: 1c:66:5c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ev6IA18Yk6TkxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OTBmZGNmNTgtYTIyZC00OWMwLWJlMzktNmQ2YjQxMDk3NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTBYkqGC4KbB0eWGH6Vcq07tph7YDcR7Qqxp GHA4pWe2G2erAxZGuR8jYQMzo4oMECa4kwASLKwAmhtc82mrqgjfSas0x79mnIPb rzi+0G2MYWjrVvaa5chJkZZ4d3TZ+G+yBN7arkPpaYUR/5Ch+7/fJ8q+PMI/WVJh FZZuB0PJuIsa0Kgzrtp7XNSBn1GRbvK1x9/iW6/zR22xsc0h0H5GEJiNd0qfnPzD /qIdI1ix9ErmkV9nQwuiaXLSxzJnGtL6i0RNonAGDzn7KrEIttWRx48C8T56Yhax ROygXkUUxLvupAxwA8ntM0i/7tAvxZxkRFM6EKLclRnMxhW1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlrHrnoATUv7Oa/9Qg44jb2m271MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvM2ZhNzJkMTYtZWJkNy0z ZjkyLTgyZDQtNTM5ZjNhYmU3OWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAONQh4INO6M6ObPqxRoQ4LOLDTcXuMBSLm3072mH9XpuVK3aUThysFDT WMXQJS9cIagZuT+GIfiDo0nWdn5aC/whTidZtlfWtNiDVCKzxKzUq4pNVmUqfKqW sREJ7zfA/YWSlZeJj9WoQtYHoKhMRaLzICWVh0igXULty9kXu6idKQcdg2rtTxDc Yit63QxNSE3KcxsGYrMZjcbMSivBHbyWAfFZ7+Ql55qrRdFQ9g0jLPPmO8nl0UAR tKbVGM4SBgcmAA7NZY6rpg7h764bYZ7gV5aA9jonJGyIFxDhUXSSB3ejyH2wyKU1 yriBTQXKzacDHb2XZJUrVgMMQhxmXEo= -----END CERTIFICATE-----Generated at Sun Jun 29 13:32:37 2025 by rpki-client