$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa File: 13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa (raw, json) Hash identifier: +tNKvcB+tjT77pY0EkwEs1E+HT5+UgmNi+0xslELklY= Subject key identifier: 28:C4:71:12:DB:70:F2:9A:C5:6A:51:E5:42:B8:0C:95:51:81:3A:23 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A374AD4B089FA9641DED8BAD0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 203724 IP address blocks: 161.69.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d4:b0:89:fa:96:41:de:d8:ba:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=8219ff5b-6bf1-45c0-a7bc-7d3f557ccacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:d1:7b:72:b9:e4:d3:a1:5c:d1:88:7d:b9: c9:06:84:8f:ea:be:49:3a:af:d1:f0:e3:9d:e1:e0: ef:b8:66:b3:18:09:a4:fe:4d:17:10:ae:89:91:0b: 60:5f:04:38:2a:01:6c:86:0a:39:a6:21:cc:e5:e5: 59:90:6b:f8:da:00:d1:b7:8f:fc:83:2f:e8:4a:d4: eb:39:70:1e:fc:a6:ae:4f:12:38:0e:a5:b4:63:18: ef:66:0e:34:16:77:6e:c3:5c:c9:73:a8:79:e8:a9: 02:cb:2d:a1:50:20:43:1f:c1:e0:fb:7d:91:c3:71: 54:ea:bb:52:e6:10:4e:56:53:69:5c:a3:90:61:d0: 03:61:ed:31:96:a7:79:8b:28:f2:20:33:46:54:30: 6e:fe:91:36:30:27:10:2a:31:1a:95:63:de:79:f1: 4b:40:ba:a3:91:78:a6:b5:5c:06:05:45:c7:de:85: c0:88:83:21:de:7b:42:6d:36:13:e6:67:71:1b:56: 5f:0f:9d:a5:93:6e:5b:c3:4b:d7:b1:58:34:e9:23: e8:6c:34:f0:37:7c:05:d5:67:2d:d0:a3:db:88:6a: 66:d1:e9:b7:af:35:27:df:b2:47:90:79:87:ed:9e: 6c:b9:fc:de:3d:0c:d1:1d:58:7e:6e:57:d4:6c:fa: 1d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C4:71:12:DB:70:F2:9A:C5:6A:51:E5:42:B8:0C:95:51:81:3A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:01:32:5d:9a:bc:dc:19:b6:db:ae:34:ef:93:fb:92:2c:95: 36:2b:8d:dc:4b:b3:70:c6:19:39:11:97:94:78:ab:e9:81:b9: 00:45:57:70:f3:b1:3d:d3:54:59:82:d5:f0:83:97:2c:5b:48: 05:bb:ad:04:b0:22:93:b6:5d:98:e1:a5:c6:ca:c0:03:0d:6c: 66:af:04:8b:fb:e6:8c:6e:fc:f2:f5:a2:a3:43:89:21:f8:75: e2:5c:91:b2:5d:ec:3d:9f:af:3d:7a:5e:e1:16:23:99:3b:c6: 68:14:42:0a:f5:e9:2e:ac:e6:9e:4b:5b:16:6b:97:3b:3e:bb: 03:3c:70:0f:2e:80:d5:4f:dd:48:da:cd:48:05:91:0e:05:4b: 56:ef:39:09:9f:fd:e1:3e:30:a8:1a:6a:bd:44:97:1c:84:04: af:ba:a6:a6:4a:a3:83:4e:13:bd:19:9d:53:42:71:8a:e3:32: 51:ed:81:0f:47:6c:78:b1:fa:1b:bd:42:c2:00:a5:03:98:e7: a8:13:8b:41:73:74:c8:f6:af:55:ea:a8:99:ee:63:39:76:72: 2e:f4:66:5d:9c:89:48:92:52:9b:26:72:e4:4f:3a:2e:ad:e5: fc:ad:f3:b1:d0:b2:e8:71:45:2b:1e:68:79:a5:9f:5a:70:12: 9b:db:9c:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StSwifqWQd7YutAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ODIxOWZmNWItNmJmMS00NWMwLWE3YmMtN2QzZjU1N2NjYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirXRe3K55NOhXNGIfbnJBoSP6r5JOq/R8OOd 4eDvuGazGAmk/k0XEK6JkQtgXwQ4KgFshgo5piHM5eVZkGv42gDRt4/8gy/oStTr OXAe/KauTxI4DqW0YxjvZg40Fnduw1zJc6h56KkCyy2hUCBDH8Hg+32Rw3FU6rtS 5hBOVlNpXKOQYdADYe0xlqd5iyjyIDNGVDBu/pE2MCcQKjEalWPeefFLQLqjkXim tVwGBUXH3oXAiIMh3ntCbTYT5mdxG1ZfD52lk25bw0vXsVg06SPobDTwN3wF1Wct 0KPbiGpm0em3rzUn37JHkHmH7Z5sufzePQzRHVh+blfUbPodeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjEcRLbcPKaxWpR5UK4DJVRgTojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMTNkM2QzZjMtMzZiZS0z OGQ5LTkxMGUtNmQxYmY0ZjQ3YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcBMl2avNwZttuuNO+T+5IslTYrjdxLs3DGGTkRl5R4q+mBuQBFV3Dz sT3TVFmC1fCDlyxbSAW7rQSwIpO2XZjhpcbKwAMNbGavBIv75oxu/PL1oqNDiSH4 deJckbJd7D2frz16XuEWI5k7xmgUQgr16S6s5p5LWxZrlzs+uwM8cA8ugNVP3Uja zUgFkQ4FS1bvOQmf/eE+MKgaar1ElxyEBK+6pqZKo4NOE70ZnVNCcYrjMlHtgQ9H bHix+hu9QsIApQOY56gTi0FzdMj2r1XqqJnuYzl2ci70Zl2ciUiSUpsmcuRPOi6t 5fyt87HQsuhxRSseaHmln1pwEpvbnBs= -----END CERTIFICATE-----Generated at Sun Jun 29 19:22:13 2025 by rpki-client