$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1196968c-14ad-3a94-9610-7728143a92d2.roa File: 1196968c-14ad-3a94-9610-7728143a92d2.roa (raw, json) Hash identifier: ncgdAJJXcx1b6SaFvuGvsvcVVVRpfxKMxGJQ31ZxSTo= Subject key identifier: FB:38:AA:38:E5:55:F7:DA:8C:91:3B:A2:59:29:72:33:C1:ED:28:58 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A3B7AFD1B27B3680C2EDD8748 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1196968c-14ad-3a94-9610-7728143a92d2.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 31898 IP address blocks: 161.69.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fd:1b:27:b3:68:0c:2e:dd:87:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=03903dee-5976-4530-a38f-4eb2cfa8e139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:29:f1:f2:2e:15:68:56:49:41:8e:61:b1: 9c:53:e2:6d:2e:31:ba:ea:50:a2:85:70:ac:da:fe: 28:26:ba:1d:a2:6b:38:64:1f:09:45:5d:31:df:4f: c2:f2:88:5e:0c:80:bd:76:7d:50:72:a7:f3:60:ba: 7a:f5:ef:b8:b3:c7:6d:76:0a:d2:35:95:cd:cb:d3: 54:68:1b:80:24:61:fa:d4:18:43:21:9d:0b:24:99: 2e:04:8e:f6:63:c5:e9:0d:73:5c:ed:06:64:91:2e: 5a:9d:b5:9b:bd:1e:62:5b:f1:b0:7c:31:7d:0b:0f: 64:bf:ea:b5:77:c1:cc:c2:7a:e0:e4:78:2f:2f:22: a1:d4:c6:f1:13:bb:bc:29:ce:02:7a:d0:6e:c8:02: bf:4b:0d:e9:61:63:10:e7:50:94:38:3a:f7:85:b0: 21:61:34:8e:9c:67:64:28:c7:90:7e:2d:fa:23:03: 20:a4:7c:17:80:c9:57:de:9e:60:91:f4:b9:df:03: 77:c6:6e:d1:3e:17:21:71:f5:1c:32:d3:bc:af:3c: d7:d2:23:53:a0:8c:ec:b7:93:64:bc:48:e2:35:d7: fc:13:7b:0e:4f:91:9e:5e:45:2e:6a:a5:35:b1:2c: 30:0a:7e:02:bf:63:8e:be:c7:83:c0:13:f8:9b:bc: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:38:AA:38:E5:55:F7:DA:8C:91:3B:A2:59:29:72:33:C1:ED:28:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1196968c-14ad-3a94-9610-7728143a92d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ae:ba:40:a1:3b:d5:4c:a2:2c:01:7a:73:c4:e0:fa:b7:de: 82:9e:9b:58:78:dd:cd:00:ac:a3:86:77:5f:45:be:62:6d:95: 5e:ce:0e:3c:08:f7:1d:99:3e:cf:10:63:a7:73:5c:f4:10:37: 1c:62:0b:cb:fd:dd:1d:e6:9e:4b:19:d9:8c:35:1b:ff:73:b8: d1:d4:95:25:c8:c6:9a:a7:db:f0:1f:c0:ea:da:23:e1:83:1d: ef:53:fe:36:f8:f3:4f:73:c5:d3:17:26:8f:c5:66:c2:52:6e: 33:27:da:a4:3b:1b:67:90:20:ab:23:14:2b:ce:3d:84:23:cd: 55:fa:87:f1:45:8c:8e:c0:77:27:dd:f3:e8:64:f7:75:93:9c: 15:e1:b9:4c:50:57:88:1c:11:3d:20:1b:5f:61:88:99:03:d9: a0:85:2c:b7:88:d9:24:ab:f4:1f:91:00:b8:cc:f8:4c:0e:5b: 9d:d2:99:64:6c:5b:92:19:8d:88:71:e1:e9:4a:61:b1:55:2e: d5:81:d9:4c:ef:91:f2:03:c1:75:b9:9c:69:be:55:7f:17:11: c8:b7:f7:cc:73:7f:8e:e7:80:d0:45:40:30:ee:3d:02:da:48: 9d:88:0b:62:07:cd:71:1c:67:a7:b3:72:86:1e:dc:69:be:cd: c4:b7:7a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ev0bJ7NoDC7dh0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk MDM5MDNkZWUtNTk3Ni00NTMwLWEzOGYtNGViMmNmYThlMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Mp8fIuFWhWSUGOYbGcU+JtLjG66lCihXCs 2v4oJrodoms4ZB8JRV0x30/C8oheDIC9dn1QcqfzYLp69e+4s8dtdgrSNZXNy9NU aBuAJGH61BhDIZ0LJJkuBI72Y8XpDXNc7QZkkS5anbWbvR5iW/GwfDF9Cw9kv+q1 d8HMwnrg5HgvLyKh1MbxE7u8Kc4CetBuyAK/Sw3pYWMQ51CUODr3hbAhYTSOnGdk KMeQfi36IwMgpHwXgMlX3p5gkfS53wN3xm7RPhchcfUcMtO8rzzX0iNToIzst5Nk vEjiNdf8E3sOT5GeXkUuaqU1sSwwCn4Cv2OOvseDwBP4m7yrAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPs4qjjlVffajJE7olkpcjPB7ShYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMTE5Njk2OGMtMTRhZC0z YTk0LTk2MTAtNzcyODE0M2E5MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuuukChO9VMoiwBenPE4Pq33oKem1h43c0ArKOGd19FvmJtlV7ODjwI 9x2ZPs8QY6dzXPQQNxxiC8v93R3mnksZ2Yw1G/9zuNHUlSXIxpqn2/AfwOraI+GD He9T/jb4809zxdMXJo/FZsJSbjMn2qQ7G2eQIKsjFCvOPYQjzVX6h/FFjI7Adyfd 8+hk93WTnBXhuUxQV4gcET0gG19hiJkD2aCFLLeI2SSr9B+RALjM+EwOW53SmWRs W5IZjYhx4elKYbFVLtWB2UzvkfIDwXW5nGm+VX8XEci398xzf47ngNBFQDDuPQLa SJ2IC2IHzXEcZ6ezcoYe3Gm+zcS3epk= -----END CERTIFICATE-----Generated at Mon Jun 30 17:33:02 2025 by rpki-client