$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa File: 20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa (raw, json) Hash identifier: 4rIQiZt9+/zfhxfUsEHhoPWM/AhQ3j9UyX0/aAv1LwQ= Subject key identifier: 89:ED:0E:37:A2:09:3D:04:59:F3:12:7D:35:24:BB:A8:E7:6F:CB:0D Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CBE860F67F15898C2C60 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 161.69.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cb:e8:60:f6:7f:15:89:8c:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=4c232b8f-1f90-4ae2-8204-83a907457688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:ed:69:e4:90:d3:cb:d7:55:e4:b2:a4:9c: 5f:da:10:d4:a8:d8:d3:53:77:0b:64:ec:fb:df:0d: c2:bf:32:75:61:fc:54:99:76:da:06:e4:e1:de:8a: 97:43:85:70:fb:6a:c1:65:c8:60:e1:10:d6:93:56: 71:05:2d:c2:d7:1f:59:47:6c:84:6e:28:5a:7b:6f: 40:70:26:e4:9c:7e:73:a9:5f:22:4b:35:6c:2e:7a: e2:33:b4:1d:5e:ef:af:ce:1d:16:7f:59:a1:2e:ef: 1f:c6:13:6e:84:64:63:78:bc:94:a8:ba:f7:a1:cc: f3:b1:18:3d:fb:a4:d2:a6:bf:b6:70:05:85:0f:1b: 12:0c:c8:e9:cb:7e:0b:7f:67:1f:67:cc:81:f1:14: 51:29:61:bd:44:df:95:ad:0f:e2:21:0b:52:61:a9: a3:de:75:6e:ae:0e:d0:43:c3:15:f2:66:df:09:d4: be:f4:37:38:0a:18:79:d1:8d:a3:2e:27:f0:cf:63: eb:2a:6a:e7:b3:ba:4c:d2:3d:69:6d:9e:c8:89:cc: 1e:70:c2:90:fa:65:0f:dc:57:b6:d9:5c:bf:0e:f5: bc:41:ad:e5:a9:c9:39:99:fa:1c:05:dd:49:66:07: 3d:a0:e2:04:56:e9:8e:8c:59:9f:c0:4e:a2:20:5a: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:ED:0E:37:A2:09:3D:04:59:F3:12:7D:35:24:BB:A8:E7:6F:CB:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:dc:24:8f:fe:90:52:fc:d1:3b:bc:5e:47:14:28:42:fd:2b: 75:3d:cf:81:7a:7f:6c:e4:7a:53:d8:9a:4c:89:52:7a:58:d6: b2:f8:3f:83:46:6a:b1:ab:08:4d:d3:46:56:7f:ec:0c:50:12: ba:5f:89:86:90:ff:46:9a:81:a6:fd:66:6e:f0:d4:d6:ba:9c: 11:af:e2:12:dc:6b:40:cb:7c:91:a0:a7:a9:06:67:b3:0d:88: d2:95:fd:a1:c7:d4:c9:32:cc:2e:4c:29:73:13:71:48:86:df: 13:3a:2f:c1:61:77:f7:23:62:93:c5:3a:63:8f:4d:a6:c7:f7: b6:12:29:c2:55:98:9f:75:35:39:15:7f:0e:94:12:d7:4e:5e: d3:12:e8:96:95:da:7c:ab:a8:20:73:42:ca:fe:25:88:80:e7: 9d:22:92:5d:0d:a4:78:1d:2b:83:3c:24:b6:da:f4:e6:f9:af: 1c:de:86:54:c8:bf:90:c3:dc:a9:be:5d:86:75:9f:c1:dc:2b: 37:cd:86:62:3c:45:6a:14:a4:b1:a4:b8:8e:84:12:0a:12:17: 8e:bc:73:d3:a7:83:03:a8:96:ed:2f:48:7b:68:3c:83:23:50: 06:7d:91:47:ae:71:c9:bf:9d:01:60:60:a2:74:3d:3c:ca:f1: 6d:76:dd:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcvoYPZ/FYmMLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NGMyMzJiOGYtMWY5MC00YWUyLTgyMDQtODNhOTA3NDU3Njg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunPtaeSQ08vXVeSypJxf2hDUqNjTU3cLZOz7 3w3CvzJ1YfxUmXbaBuTh3oqXQ4Vw+2rBZchg4RDWk1ZxBS3C1x9ZR2yEbihae29A cCbknH5zqV8iSzVsLnriM7QdXu+vzh0Wf1mhLu8fxhNuhGRjeLyUqLr3oczzsRg9 +6TSpr+2cAWFDxsSDMjpy34Lf2cfZ8yB8RRRKWG9RN+VrQ/iIQtSYamj3nVurg7Q Q8MV8mbfCdS+9Dc4Chh50Y2jLifwz2PrKmrns7pM0j1pbZ7IicwecMKQ+mUP3Fe2 2Vy/DvW8Qa3lqck5mfocBd1JZgc9oOIEVumOjFmfwE6iIFrzgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIntDjeiCT0EWfMSfTUku6jnb8sNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMjBhMzQzNjYtYzQwYy0z OTJkLTljNjgtMmRiOGU0YTBiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzcJI/+kFL80Tu8XkcUKEL9K3U9z4F6f2zkelPYmkyJUnpY1rL4P4NG arGrCE3TRlZ/7AxQErpfiYaQ/0aagab9Zm7w1Na6nBGv4hLca0DLfJGgp6kGZ7MN iNKV/aHH1MkyzC5MKXMTcUiG3xM6L8Fhd/cjYpPFOmOPTabH97YSKcJVmJ91NTkV fw6UEtdOXtMS6JaV2nyrqCBzQsr+JYiA550ikl0NpHgdK4M8JLba9Ob5rxzehlTI v5DD3Km+XYZ1n8HcKzfNhmI8RWoUpLGkuI6EEgoSF468c9OngwOolu0vSHtoPIMj UAZ9kUeuccm/nQFgYKJ0PTzK8W123aU= -----END CERTIFICATE-----Generated at Sun Jun 29 04:15:21 2025 by rpki-client