$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa File: 0da288e2-8c4b-3f48-8630-d0e217b213f8.roa (raw, json) Hash identifier: /wGDQGAXQ60omTifOzY9NXhv9OwNCc9SyEwQ5H6JRVk= Subject key identifier: 6C:7B:26:65:8F:3C:3E:E9:AC:A4:1F:27:EA:94:B6:D6:F0:9C:DE:21 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CB4C4626CE8A40B60E80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 161.69.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cb:4c:46:26:ce:8a:40:b6:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=cf864dc5-1b58-458c-bc87-499286107b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2f:8f:39:c5:7c:32:70:c3:ea:c9:9e:42:2a: 62:ff:4f:80:21:df:f7:60:88:28:3f:24:e2:c0:31: 76:55:2c:1a:36:15:af:41:06:09:ec:d3:03:0d:3f: 3d:e4:ff:c6:c5:4f:5e:4b:44:a2:4f:5d:df:58:29: be:db:d7:f4:c7:6a:74:21:ad:00:4d:c5:4e:58:d0: 4b:82:70:65:7b:85:c2:70:bb:a4:00:d2:f8:db:a6: 26:b6:bf:99:5b:99:70:c5:35:8d:3e:a5:6f:6f:1b: 86:3c:3b:37:59:9d:60:16:cb:6f:aa:d1:f7:10:12: d2:1a:e5:ad:62:99:05:94:a0:2d:80:d8:fe:8c:37: 80:38:92:90:e4:9e:ad:12:67:41:99:da:46:91:71: a2:5f:a8:47:5d:a2:71:79:e3:d0:2b:1f:b2:b6:40: 73:62:07:d5:d6:11:70:02:95:c0:da:75:a8:6c:7f: 6e:97:a5:0f:a9:69:ca:ba:1a:14:ad:70:59:8f:ae: 64:b1:32:cc:bc:fc:9e:b1:d6:dc:a3:15:a1:59:28: a9:77:51:63:79:8b:a3:d1:00:2f:2d:d1:6e:a7:69: 63:ef:4e:5f:70:53:f3:5b:ad:ed:ca:01:11:9f:95: 49:21:78:af:8b:47:50:b8:72:8a:be:7f:96:9d:9d: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:26:65:8F:3C:3E:E9:AC:A4:1F:27:EA:94:B6:D6:F0:9C:DE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f6:62:ca:37:fc:e2:c5:23:58:91:da:aa:c4:e3:f6:5c:0b: d6:13:3a:6c:8e:d5:87:59:99:95:c9:1d:72:be:df:d6:46:e3: fd:67:af:2b:43:bf:67:8f:d6:9a:1a:08:19:38:d1:fc:ef:09: 52:99:60:76:77:80:1b:86:e1:08:53:37:a7:37:8e:87:4c:90: 48:06:07:21:d2:a2:05:c4:6d:8e:f8:44:1a:cc:f2:67:d1:3b: a5:ff:38:ff:c3:a6:a6:1a:bd:5a:5d:52:9a:b3:4c:fe:40:cf: d3:b5:f2:33:7e:51:a1:a7:52:61:c9:f6:66:b1:49:2d:0f:95: 59:d1:47:0b:c9:8c:da:58:0b:79:dd:8f:de:e5:f3:d1:f3:4a: 72:d0:3a:8a:ef:a2:68:b0:77:48:04:90:70:45:96:29:7c:c8: a6:d5:6c:91:fe:44:cd:48:e2:3a:c3:a3:00:ff:69:01:68:94: 36:99:c5:9e:53:4a:67:d5:97:3b:b2:34:0a:28:89:0e:53:ec: c4:09:27:71:e9:80:4e:7b:2b:6a:f1:e1:db:72:81:c6:8d:e4: 08:b2:f0:e5:86:2c:9f:42:10:20:a1:de:e6:c5:8b:51:12:db: 72:bc:0f:98:5d:e2:67:1f:1f:52:10:0e:74:9c:c7:26:12:93: 35:2f:96:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZctMRibOikC2DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk Y2Y4NjRkYzUtMWI1OC00NThjLWJjODctNDk5Mjg2MTA3YjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS+POcV8MnDD6smeQipi/0+AId/3YIgoPyTi wDF2VSwaNhWvQQYJ7NMDDT895P/GxU9eS0SiT13fWCm+29f0x2p0Ia0ATcVOWNBL gnBle4XCcLukANL426Ymtr+ZW5lwxTWNPqVvbxuGPDs3WZ1gFstvqtH3EBLSGuWt YpkFlKAtgNj+jDeAOJKQ5J6tEmdBmdpGkXGiX6hHXaJxeePQKx+ytkBzYgfV1hFw ApXA2nWobH9ul6UPqWnKuhoUrXBZj65ksTLMvPyesdbcoxWhWSipd1FjeYuj0QAv LdFup2lj705fcFPzW63tygERn5VJIXivi0dQuHKKvn+WnZ2pgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx7JmWPPD7prKQfJ+qUttbwnN4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGRhMjg4ZTItOGM0Yi0z ZjQ4LTg2MzAtZDBlMjE3YjIxM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/2Yso3/OLFI1iR2qrE4/ZcC9YTOmyO1YdZmZXJHXK+39ZG4/1nrytD v2eP1poaCBk40fzvCVKZYHZ3gBuG4QhTN6c3jodMkEgGByHSogXEbY74RBrM8mfR O6X/OP/DpqYavVpdUpqzTP5Az9O18jN+UaGnUmHJ9maxSS0PlVnRRwvJjNpYC3nd j97l89HzSnLQOorvomiwd0gEkHBFlil8yKbVbJH+RM1I4jrDowD/aQFolDaZxZ5T SmfVlzuyNAooiQ5T7MQJJ3HpgE57K2rx4dtygcaN5Aiy8OWGLJ9CECCh3ubFi1ES 23K8D5hd4mcfH1IQDnScxyYSkzUvlto= -----END CERTIFICATE-----Generated at Sun Jun 29 06:54:48 2025 by rpki-client