$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa File: cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa (raw, json) Hash identifier: 4lgu0DIzgejWV6zPoyG947f75aJ+V5m/v0B4tVV2Fls= Subject key identifier: 3D:CB:07:11:C5:DA:24:D5:36:D6:CD:AE:BA:3E:4E:B9:27:70:7C:A2 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F4328584AD23BB474F2A84E9ABBBBD6E0 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 8075 IP address blocks: 161.221.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b4:74:f2:a8:4e:9a:bb:bb:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=29cf69c6-20fe-421f-b782-c192a3d9f5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d2:c3:3c:50:9d:e7:cf:1e:fc:cb:8f:e6:b1: 57:aa:5f:08:10:10:57:3d:ec:d0:25:09:9b:46:4a: 2b:4d:c8:a0:b3:e2:78:25:72:5d:15:bf:61:1f:3a: 0f:8d:b5:43:07:bf:11:da:b7:35:59:f9:b3:e2:15: 80:34:d6:6c:19:ff:06:e0:49:3a:00:8e:ef:43:1e: 1d:53:6d:c8:e8:f2:a5:5e:70:8d:86:82:c8:1d:a5: 03:f5:2a:41:49:cb:bf:9a:b7:bb:5f:f6:42:94:a0: 4f:97:18:18:5d:7b:bc:6c:62:66:ff:53:81:cd:3a: d7:77:4d:45:70:a3:2a:2e:6c:0b:85:3e:43:5c:3d: 29:64:74:9a:98:bf:6e:b1:61:85:96:79:b1:47:11: cc:6d:e6:ea:c6:89:9b:4d:74:c9:02:ea:fa:a4:b1: 52:2f:12:90:68:0b:21:60:31:7c:c0:ed:bf:eb:33: 51:a8:b9:d2:7e:0e:e5:8e:4d:01:3e:ac:71:0e:9c: 8d:e1:1c:73:6c:3d:7d:e1:82:68:a7:73:89:31:e9: 31:49:2c:c9:3a:a3:c5:d2:9e:e9:2f:74:f2:0a:03: 8f:84:de:4d:b7:04:82:40:36:ca:ba:ca:12:dc:7f: 40:49:d7:77:47:af:d6:cf:fd:e4:c6:50:f6:e3:9f: 99:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CB:07:11:C5:DA:24:D5:36:D6:CD:AE:BA:3E:4E:B9:27:70:7C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/cd7e78c2-e9ef-31ea-ad38-26ac3051983f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:c5:4a:b0:9d:84:29:a9:fe:46:75:e0:8b:bd:81:ef:c9:08: 24:c3:cb:dc:c5:31:e3:c2:64:f1:2a:fd:d8:0d:26:35:a3:8e: 88:07:94:2d:d8:2d:45:78:6b:da:4b:ad:01:72:f1:47:58:11: ff:61:3f:c9:36:c8:da:fb:07:f0:fd:ae:f7:0f:aa:a4:8f:9d: dd:98:5b:07:7e:5b:95:67:45:52:f5:e2:ff:45:e2:b2:44:05: 66:20:7f:e6:35:93:b3:60:78:7c:cf:68:4b:4b:86:c0:65:4f: 33:81:a1:f2:6c:d6:8e:10:27:b1:af:a7:d7:ed:b5:1a:87:87: 22:c6:e2:b4:22:24:55:cc:46:be:6c:21:ef:00:de:fa:a1:08: 35:53:21:db:05:ec:13:51:b8:ec:2d:56:24:85:47:45:ae:77: 1a:5d:d2:33:b6:2c:cd:b6:6c:b1:c8:86:39:9e:e7:dd:fe:60: df:c8:ae:f1:6f:10:1a:96:aa:2f:a9:b7:5f:75:32:54:cc:e7: 65:b9:0d:ff:d2:80:ca:a6:8c:61:64:c6:61:61:76:f0:d6:c8: 1c:a9:b6:df:25:cc:ea:17:c2:5d:69:e2:3f:63:3c:e8:bc:b1: c4:ee:72:36:ac:02:9e:c1:05:45:af:0c:87:99:50:5d:d4:80: 22:2e:1b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7R08qhOmru71uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjljZjY5YzYtMjBmZS00MjFmLWI3ODItYzE5MmEzZDlmNWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59LDPFCd588e/MuP5rFXql8IEBBXPezQJQmb RkorTcigs+J4JXJdFb9hHzoPjbVDB78R2rc1Wfmz4hWANNZsGf8G4Ek6AI7vQx4d U23I6PKlXnCNhoLIHaUD9SpBScu/mre7X/ZClKBPlxgYXXu8bGJm/1OBzTrXd01F cKMqLmwLhT5DXD0pZHSamL9usWGFlnmxRxHMbebqxombTXTJAur6pLFSLxKQaAsh YDF8wO2/6zNRqLnSfg7ljk0BPqxxDpyN4RxzbD194YJop3OJMekxSSzJOqPF0p7p L3TyCgOPhN5NtwSCQDbKusoS3H9ASdd3R6/Wz/3kxlD245+ZrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3LBxHF2iTVNtbNrro+TrkncHyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvY2Q3ZTc4YzItZTllZi0z MWVhLWFkMzgtMjZhYzMwNTE5ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnFSrCdhCmp/kZ14Iu9ge/JCCTDy9zFMePCZPEq/dgNJjWjjogHlC3Y LUV4a9pLrQFy8UdYEf9hP8k2yNr7B/D9rvcPqqSPnd2YWwd+W5VnRVL14v9F4rJE BWYgf+Y1k7NgeHzPaEtLhsBlTzOBofJs1o4QJ7Gvp9fttRqHhyLG4rQiJFXMRr5s Ie8A3vqhCDVTIdsF7BNRuOwtViSFR0Wudxpd0jO2LM22bLHIhjme593+YN/IrvFv EBqWqi+pt191MlTM52W5Df/SgMqmjGFkxmFhdvDWyByptt8lzOoXwl1p4j9jPOi8 scTucjasAp7BBUWvDIeZUF3UgCIuG0E= -----END CERTIFICATE-----Generated at Sun Aug 24 03:17:43 2025 by rpki-client