$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa File: 8fe2dd79-7709-320c-9724-e8e186a838df.roa (raw, json) Hash identifier: SFRs1wG4UPIAW1VJ7JjQOGsMsaFncVnIUC4HBSSx88Q= Subject key identifier: B4:83:19:46:43:75:5E:DA:C2:85:2A:68:20:85:A4:B9:79:2E:E2:05 Certificate issuer: /CN=9425523e-a7dc-4cd2-a939-b1dc6570ca5d Certificate serial: 010D0C9F4328584A4F05C8ECF95F22B3B146EA80 Authority key identifier: 84:5F:5B:50:F6:16:A4:BE:F9:A2:87:73:AA:1D:7E:63:0E:F7:B9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 26125 IP address blocks: 161.68.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:c8:ec:f9:5f:22:b3:b1:46:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9425523e-a7dc-4cd2-a939-b1dc6570ca5d Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=16917498-7b57-403f-995d-b314a748ffb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:36:6f:af:3a:69:64:2f:3b:b9:ae:1a:8b: aa:aa:b3:42:e4:6b:99:2e:0c:6a:48:5a:68:eb:53: d4:36:ba:9f:3c:94:91:04:17:45:0f:5f:96:2f:55: 1c:6a:65:7a:b5:06:fb:d7:16:50:60:02:4a:4f:2f: fa:c1:06:d9:9c:67:ec:1d:8c:e6:e1:9f:6a:9d:97: d8:b7:0e:f9:c5:e3:a4:f1:20:5c:5f:0c:9f:76:4e: 35:31:8c:a1:66:46:95:78:c2:97:93:b0:cc:ac:11: 49:2c:73:76:76:f0:5b:4c:9c:6e:77:4f:b8:0b:5a: 95:d1:84:fe:f3:03:59:a2:23:66:06:05:f3:ba:87: 83:85:39:0f:eb:65:2a:b0:05:9a:d0:52:4e:12:90: 91:21:25:48:b0:64:25:a4:18:94:6f:ee:f4:75:32: 9f:a7:1e:38:e3:a8:2a:f3:03:0f:ee:6a:16:e8:02: 12:a4:4e:1e:69:d6:33:78:5d:e7:41:d4:d8:28:e6: 5f:6f:de:cf:4f:13:ba:b1:60:91:0b:42:5c:8a:57: 2a:ba:3d:73:bc:99:0f:64:44:85:bb:a7:77:f3:e9: 77:a0:58:49:21:f3:57:1b:ed:08:e6:3a:6d:70:eb: e2:d1:18:75:c8:b1:bb:f5:8c:69:62:d1:94:db:ba: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:83:19:46:43:75:5E:DA:C2:85:2A:68:20:85:A4:B9:79:2E:E2:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.crl X509v3 Authority Key Identifier: keyid:84:5F:5B:50:F6:16:A4:BE:F9:A2:87:73:AA:1D:7E:63:0E:F7:B9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.cer sbgp-ipAddrBlock: critical IPv4: 161.68.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0c:06:29:b0:41:85:8f:de:b3:7d:ae:6d:02:46:9d:9f:47: 72:2c:43:45:b1:ae:52:07:de:fb:56:6e:ee:c1:ad:30:65:a9: 19:93:e8:c4:98:04:da:56:7a:2d:77:c2:11:e0:26:e4:df:b7: 54:f9:5d:1e:e0:34:4d:35:73:29:95:c4:4f:52:11:b5:0a:28: 65:4f:4d:d7:7c:21:83:eb:78:c2:82:61:6d:c6:ea:9b:52:b9: 7b:c7:60:40:09:9d:fe:b4:34:b2:8b:c5:db:3e:d1:98:34:f7: d5:a2:cc:36:d3:eb:c5:e0:88:71:93:3c:54:0c:a5:16:ca:9e: 3d:84:88:72:34:2d:34:6c:7a:c2:fb:62:3f:7f:b4:5a:ad:ee: 22:69:90:fe:c9:cb:2f:93:32:97:3f:42:b2:28:a8:3f:0c:82: b4:64:56:0e:ce:71:95:df:f6:22:5f:74:c4:34:a2:52:ab:09: 68:64:9c:5e:64:01:26:f6:7f:5f:93:a1:eb:25:dd:7f:8d:c8: 04:d3:2c:5b:73:3b:06:0e:65:b9:71:dc:33:51:19:40:4d:10: 29:f6:b4:b5:79:f3:4a:ed:b3:6d:df:65:6f:00:3f:f9:c4:3f: d1:dd:1f:3f:6a:21:71:0d:47:06:f7:00:0c:84:a0:93:3a:a8: 92:03:ff:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBcjs+V8is7FG6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQyNTUyM2UtYTdkYy00Y2QyLWE5MzktYjFkYzY1NzBj YTVkMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MTY5MTc0OTgtN2I1Ny00MDNmLTk5NWQtYjMxNGE3NDhmZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEI2b686aWQvO7muGouqqrNC5GuZLgxqSFpo 61PUNrqfPJSRBBdFD1+WL1UcamV6tQb71xZQYAJKTy/6wQbZnGfsHYzm4Z9qnZfY tw75xeOk8SBcXwyfdk41MYyhZkaVeMKXk7DMrBFJLHN2dvBbTJxud0+4C1qV0YT+ 8wNZoiNmBgXzuoeDhTkP62UqsAWa0FJOEpCRISVIsGQlpBiUb+70dTKfpx4446gq 8wMP7moW6AISpE4eadYzeF3nQdTYKOZfb97PTxO6sWCRC0Jcilcquj1zvJkPZESF u6d38+l3oFhJIfNXG+0I5jptcOvi0Rh1yLG79YxpYtGU27q9BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSDGUZDdV7awoUqaCCFpLl5LuIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NDI1 NTIzZS1hN2RjLTRjZDItYTkzOS1iMWRjNjU3MGNhNWQvOGZlMmRkNzktNzcwOS0z MjBjLTk3MjQtZThlMTg2YTgzOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTQyNTUyM2UtYTdkYy00Y2QyLWE5 MzktYjFkYzY1NzBjYTVkLzk0MjU1MjNlLWE3ZGMtNGNkMi1hOTM5LWIxZGM2NTcw Y2E1ZC5jcmwwHwYDVR0jBBgwFoAUhF9bUPYWpL75oodzqh1+Yw73uX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NDI1NTIzZS1hN2RjLTRjZDItYTkzOS1iMWRj NjU3MGNhNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoUSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcMBimwQYWP3rN9rm0CRp2fR3IsQ0WxrlIH3vtWbu7BrTBlqRmT6MSY BNpWei13whHgJuTft1T5XR7gNE01cymVxE9SEbUKKGVPTdd8IYPreMKCYW3G6ptS uXvHYEAJnf60NLKLxds+0Zg099WizDbT68XgiHGTPFQMpRbKnj2EiHI0LTRsesL7 Yj9/tFqt7iJpkP7Jyy+TMpc/QrIoqD8MgrRkVg7OcZXf9iJfdMQ0olKrCWhknF5k ASb2f1+Toesl3X+NyATTLFtzOwYOZblx3DNRGUBNECn2tLV580rts23fZW8AP/nE P9HdHz9qIXENRwb3AAyEoJM6qJID/0c= -----END CERTIFICATE-----Generated at Mon Jun 30 10:37:44 2025 by rpki-client