$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/01bd91a8-2774-3ca6-9935-fa094ad568fa.roa File: 01bd91a8-2774-3ca6-9935-fa094ad568fa.roa (raw, json) Hash identifier: gy2U1K2dg1pUHhZL9Fn5ytHbJRxaXJUtbHowSTUG9aU= Subject key identifier: 2D:91:70:99:DD:09:E5:70:D1:8B:7E:02:FF:A3:21:8A:E3:2A:AA:24 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CB94E4DF04D029ABA260 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/01bd91a8-2774-3ca6-9935-fa094ad568fa.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 161.69.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cb:94:e4:df:04:d0:29:ab:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=314d7ec5-1870-4227-b63e-e25bef52f6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:29:cb:7f:4c:00:ed:22:b6:3e:88:65:7e: db:55:ee:01:e7:f6:86:5a:f1:6e:e6:b6:f6:12:04: ec:c8:4a:79:73:45:0e:d9:23:bc:ef:78:d9:16:ac: 75:32:f5:71:ef:05:a3:05:5c:ce:99:e3:5b:04:5c: dd:e8:68:8f:1c:b6:ca:87:af:c1:6b:74:ee:4a:e6: e6:26:d4:56:a1:e0:59:fc:04:04:0f:38:80:77:c9: 0c:b4:32:8a:f8:81:c5:6a:86:92:c1:ba:e9:f2:05: d8:65:f0:d3:7d:02:5a:3f:b7:91:b8:a2:79:c0:b1: a4:27:da:56:8e:8d:da:39:19:34:1e:af:8e:60:32: 9f:13:4e:d7:69:5a:3b:37:06:41:33:94:6a:2b:c4: d6:24:3c:ca:56:f8:e0:f5:57:b2:23:97:a4:92:69: 6f:d4:af:9f:46:92:4e:61:a4:07:19:16:7c:16:3f: 8e:87:a1:cb:91:ef:95:5a:bb:7e:d8:f0:74:24:23: f4:9e:66:16:5a:73:78:e5:a8:54:0e:da:db:46:8c: 76:0c:59:13:cb:07:91:9f:cc:fa:96:fd:c3:a1:10: 64:e2:4f:6f:81:be:60:fe:11:f6:04:7b:39:63:04: f7:24:df:59:79:4d:5d:b4:e4:37:91:35:0f:c0:9a: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:91:70:99:DD:09:E5:70:D1:8B:7E:02:FF:A3:21:8A:E3:2A:AA:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/01bd91a8-2774-3ca6-9935-fa094ad568fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b8:06:a8:58:39:53:75:bd:19:3d:9d:fb:52:fd:28:50:8e: 02:8c:49:b1:0c:2a:f9:80:ac:a9:aa:21:ef:2a:0b:04:07:df: ec:a2:a4:a6:69:d3:de:07:f3:f1:a1:65:60:1c:cd:b1:10:cd: 6c:85:10:1c:03:2e:d9:5f:a4:45:89:73:da:97:f4:b2:d3:28: 95:8b:79:9f:bc:00:5d:91:2f:ea:59:69:43:74:74:fb:8f:ef: eb:a6:af:d5:dd:9b:89:29:7b:e2:5d:6b:57:0f:ed:80:8f:ff: b9:07:59:0e:ab:2d:c5:5d:14:f5:42:20:dd:5d:c1:10:35:8d: 90:58:10:e6:86:60:8f:5c:b9:f0:3b:2f:89:ef:d1:4d:11:e6: 9b:21:26:c4:f3:d8:10:ba:e7:81:08:0d:0b:55:1f:3a:1c:45: fe:b7:37:cb:0c:ff:2e:3a:26:2d:81:b5:42:26:22:be:6f:28: 0f:20:65:5c:fe:51:fa:71:6c:c5:4e:f7:54:07:1f:43:2e:6f: 06:db:e9:d5:19:ad:ec:f1:22:58:94:e0:24:2f:4a:71:3c:67: 2e:d0:0a:5b:c0:b0:67:95:d3:2b:e6:f9:26:b1:74:3e:32:0b: d4:ae:75:be:64:1c:5c:5c:68:05:7f:99:05:d0:1f:10:7a:db: d5:c4:6b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcuU5N8E0CmromAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MzE0ZDdlYzUtMTg3MC00MjI3LWI2M2UtZTI1YmVmNTJmNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQopy39MAO0itj6IZX7bVe4B5/aGWvFu5rb2 EgTsyEp5c0UO2SO873jZFqx1MvVx7wWjBVzOmeNbBFzd6GiPHLbKh6/Ba3TuSubm JtRWoeBZ/AQEDziAd8kMtDKK+IHFaoaSwbrp8gXYZfDTfQJaP7eRuKJ5wLGkJ9pW jo3aORk0Hq+OYDKfE07XaVo7NwZBM5RqK8TWJDzKVvjg9VeyI5ekkmlv1K+fRpJO YaQHGRZ8Fj+Oh6HLke+VWrt+2PB0JCP0nmYWWnN45ahUDtrbRox2DFkTyweRn8z6 lv3DoRBk4k9vgb5g/hH2BHs5YwT3JN9ZeU1dtOQ3kTUPwJo/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2RcJndCeVw0Yt+Av+jIYrjKqokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMDFiZDkxYTgtMjc3NC0z Y2E2LTk5MzUtZmEwOTRhZDU2OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE24BqhYOVN1vRk9nftS/ShQjgKMSbEMKvmArKmqIe8qCwQH3+yipKZp 094H8/GhZWAczbEQzWyFEBwDLtlfpEWJc9qX9LLTKJWLeZ+8AF2RL+pZaUN0dPuP 7+umr9Xdm4kpe+Jda1cP7YCP/7kHWQ6rLcVdFPVCIN1dwRA1jZBYEOaGYI9cufA7 L4nv0U0R5pshJsTz2BC654EIDQtVHzocRf63N8sM/y46Ji2BtUImIr5vKA8gZVz+ UfpxbMVO91QHH0Mubwbb6dUZrezxIliU4CQvSnE8Zy7QClvAsGeV0yvm+SaxdD4y C9Sudb5kHFxcaAV/mQXQHxB629XEa0k= -----END CERTIFICATE-----Generated at Tue Jul 1 17:45:32 2025 by rpki-client