$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/561f4cde-424c-36d7-8e84-46e53de133f0.roa File: 561f4cde-424c-36d7-8e84-46e53de133f0.roa (raw, json) Hash identifier: Yi8ncKqS6D9rPZuqy0tCG4CD+LZ+Ri8shHM4AQanFvc= Subject key identifier: 4B:69:42:5F:36:D5:34:CD:A3:C7:7A:23:00:CB:0E:DB:4D:61:80:19 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CD03EBF9D272FC151D00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/561f4cde-424c-36d7-8e84-46e53de133f0.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 161.69.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cd:03:eb:f9:d2:72:fc:15:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=94a307f1-d2a1-459b-ae83-50d9bc3e564a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:72:cc:6a:2d:1c:ac:e2:2f:38:24:36:f0:97: 7e:0e:95:b2:a5:98:36:ae:f0:bf:e4:ab:ef:ca:8c: 71:26:17:bc:7b:a4:18:8a:e8:01:27:cd:9b:40:25: 5e:17:9f:31:43:03:c5:11:23:e5:35:29:08:c0:f0: 10:df:b1:c6:9a:c2:c3:82:9a:82:0c:62:a4:6b:48: 8d:16:8b:a1:b0:21:00:94:81:f5:8a:e8:03:99:69: b3:a8:6b:43:24:11:72:ca:7a:ab:e2:eb:56:af:ba: f9:37:35:cb:ce:d8:c6:5b:7b:ea:09:4e:38:64:d1: 65:c0:b3:1e:7e:13:8b:6b:6f:d6:a3:bb:f6:f9:e5: 39:08:88:73:6b:e3:97:02:ad:49:30:9b:27:55:8c: 00:52:31:e5:39:21:99:ff:df:84:a3:2c:1b:b5:27: 2d:c9:54:b3:91:6f:f2:e6:4f:0b:64:2d:ac:a5:57: a6:3e:b8:44:df:bb:d0:ee:b9:ed:66:38:40:6a:b5: a2:63:3c:98:1e:0c:36:c6:38:a9:40:5b:12:7f:ab: 5d:0f:8d:83:51:54:93:47:9c:ee:d9:19:f9:05:66: f9:63:5e:9d:a6:fa:38:7e:95:b0:e1:93:ef:aa:80: b7:f3:07:54:ea:0a:4f:f8:61:c3:6a:ab:2e:36:e8: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:69:42:5F:36:D5:34:CD:A3:C7:7A:23:00:CB:0E:DB:4D:61:80:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/561f4cde-424c-36d7-8e84-46e53de133f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:91:13:00:78:fd:fc:e6:ba:66:a3:5a:9f:ea:73:b4:26:f9: 6a:3f:a4:19:42:61:96:43:88:f8:14:8d:02:17:e2:56:4e:fb: 2b:0d:2c:76:a7:3c:c3:53:1d:a2:8a:e4:f4:97:36:aa:ba:62: b0:bc:a5:3b:b3:bd:d3:41:00:3b:c3:d2:43:21:37:69:1f:a0: c0:74:e4:da:c2:99:bd:92:c4:b5:13:14:e4:37:42:c0:0a:f7: a1:c7:50:a7:c2:51:4c:d8:eb:aa:8d:30:18:4f:ee:d9:7d:89: 9f:3b:72:b7:84:37:87:2d:dd:77:2f:db:9d:69:28:52:75:94: bf:6c:4f:cb:9d:f3:58:c6:d1:f8:15:2b:de:97:0e:4c:5e:40: 01:f5:10:6d:06:3c:ee:3f:96:6e:9e:dc:f4:cf:a7:d1:00:42: 99:1b:a3:f7:2a:17:87:e9:87:33:f4:21:53:14:dc:16:f0:53: bc:81:bf:ed:8f:45:4e:d1:b7:44:bb:ea:d5:ec:a5:47:cf:3a: 40:02:40:de:42:46:5e:ec:b3:b9:75:83:98:ac:5d:e0:5f:b7: ee:ab:2e:78:97:a0:70:21:98:c8:1e:ae:83:25:62:99:d5:b2: fb:25:c7:87:a1:1b:3d:66:7d:e5:7c:f0:6a:58:b0:f8:89:33: 2e:19:09:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZc0D6/nScvwVHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk OTRhMzA3ZjEtZDJhMS00NTliLWFlODMtNTBkOWJjM2U1NjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXLMai0crOIvOCQ28Jd+DpWypZg2rvC/5Kvv yoxxJhe8e6QYiugBJ82bQCVeF58xQwPFESPlNSkIwPAQ37HGmsLDgpqCDGKka0iN FouhsCEAlIH1iugDmWmzqGtDJBFyynqr4utWr7r5NzXLztjGW3vqCU44ZNFlwLMe fhOLa2/Wo7v2+eU5CIhza+OXAq1JMJsnVYwAUjHlOSGZ/9+EoywbtSctyVSzkW/y 5k8LZC2spVemPrhE37vQ7rntZjhAarWiYzyYHgw2xjipQFsSf6tdD42DUVSTR5zu 2Rn5BWb5Y16dpvo4fpWw4ZPvqoC38wdU6gpP+GHDaqsuNujU8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtpQl821TTNo8d6IwDLDttNYYAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNTYxZjRjZGUtNDI0Yy0z NmQ3LThlODQtNDZlNTNkZTEzM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUULMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKREwB4/fzmumajWp/qc7Qm+Wo/pBlCYZZDiPgUjQIX4lZO+ysNLHan PMNTHaKK5PSXNqq6YrC8pTuzvdNBADvD0kMhN2kfoMB05NrCmb2SxLUTFOQ3QsAK 96HHUKfCUUzY66qNMBhP7tl9iZ87creEN4ct3Xcv251pKFJ1lL9sT8ud81jG0fgV K96XDkxeQAH1EG0GPO4/lm6e3PTPp9EAQpkbo/cqF4fphzP0IVMU3BbwU7yBv+2P RU7Rt0S76tXspUfPOkACQN5CRl7ss7l1g5isXeBft+6rLniXoHAhmMgeroMlYpnV svslx4ehGz1mfeV88GpYsPiJMy4ZCTo= -----END CERTIFICATE-----Generated at Sun Jun 29 14:27:31 2025 by rpki-client