$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a29b6bca-0786-3374-99b5-708d57bf7b3a.roa File: a29b6bca-0786-3374-99b5-708d57bf7b3a.roa (raw, json) Hash identifier: N5X2FKoQjkpDsBcXpK15Vt/dCPfwG5osK9zQz6ZyYsI= Subject key identifier: 14:1D:60:74:60:F0:06:BE:29:46:90:51:DB:D2:45:20:E8:4D:B3:81 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CB5FCF261FAB12940F80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a29b6bca-0786-3374-99b5-708d57bf7b3a.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 203724 IP address blocks: 161.69.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cb:5f:cf:26:1f:ab:12:94:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=b0e440d8-19e2-41c1-9b08-57925b6082e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:a0:38:65:15:ca:4d:34:63:4e:cc:8d:af: 21:1a:f1:08:cc:6c:cb:ea:fa:9e:c0:a0:11:ca:42: 87:6f:ed:b2:60:ab:74:fb:dd:2f:b4:22:83:05:cd: d2:ec:51:58:16:d0:af:4e:31:8f:61:43:31:ec:67: 02:f9:8f:71:e0:87:9a:3e:72:d9:f6:3e:dd:fa:b7: 32:98:ab:73:c8:7d:51:b7:29:29:73:4e:89:6e:c6: 00:1a:90:c4:39:02:95:34:fd:40:75:55:bd:c2:fb: 30:a7:ca:fe:ef:8b:4f:a0:de:5b:fe:53:80:b4:39: 5d:fd:27:2d:29:d7:89:b7:75:f8:86:a4:c4:9a:50: cb:e4:43:ce:e4:54:3b:c2:d6:25:3f:04:d7:b0:06: ad:d5:f1:5d:8e:53:9b:ed:05:39:b3:67:a8:a3:11: 9a:fa:8d:54:b7:09:7e:9c:a9:e0:96:bb:6c:20:41: 7e:15:06:5d:f4:87:7e:f2:29:4f:a6:f9:5f:f2:83: da:2f:c1:5b:46:3b:91:d2:c3:18:5f:b5:57:d2:71: 89:21:60:ba:97:c6:47:52:76:fc:b3:38:8a:44:2f: bc:c4:5d:f8:10:84:8b:da:89:f3:e3:81:29:95:1f: 68:71:30:29:f4:9c:d3:73:5e:2d:82:c2:d6:fb:80: f4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:60:74:60:F0:06:BE:29:46:90:51:DB:D2:45:20:E8:4D:B3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a29b6bca-0786-3374-99b5-708d57bf7b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:da:b0:41:28:11:ba:56:86:2a:4a:f7:72:ba:c3:9e:d5:95: e3:35:f3:00:21:a2:86:b2:77:b5:01:b6:f6:94:f7:ac:ec:73: d8:61:e4:d9:32:e6:19:ac:e0:30:a4:38:71:d9:e4:e3:cd:49: 73:e3:34:ab:32:4f:bc:92:32:6e:ee:92:b8:24:b4:94:cd:cd: 87:a1:ab:0c:0f:8c:e0:ce:89:22:78:27:cb:05:10:2e:94:c0: ba:d2:4c:4c:fe:9e:2b:df:37:c1:7c:4c:78:a7:1e:45:21:aa: 50:c1:e6:36:92:aa:fb:d4:e0:25:06:2f:e9:a5:f5:ce:c0:93: 24:89:81:09:dd:ff:20:5b:4c:7e:c5:d5:d5:2f:5c:7e:d9:17: 5c:f8:63:bf:1f:c7:3d:4f:10:fc:10:f1:e0:67:8c:6d:83:0f: 7b:ec:e9:a2:88:c5:f5:02:79:df:c2:aa:59:0c:e4:34:3c:d5: e2:20:8f:b5:13:12:ec:92:66:fc:ae:1c:52:87:c1:71:6c:0c: 8f:e5:90:c5:4f:bd:8b:77:d6:4f:0e:60:63:c7:58:65:4d:f6: b7:a1:72:1f:f5:37:0d:3e:a7:b7:b8:59:a6:a2:ed:0b:e9:66: b1:3b:85:a9:86:3d:db:9c:d7:f5:c6:bd:34:72:62:43:74:0c: bb:de:8b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZctfzyYfqxKUD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk YjBlNDQwZDgtMTllMi00MWMxLTliMDgtNTc5MjViNjA4MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfWgOGUVyk00Y07Mja8hGvEIzGzL6vqewKAR ykKHb+2yYKt0+90vtCKDBc3S7FFYFtCvTjGPYUMx7GcC+Y9x4IeaPnLZ9j7d+rcy mKtzyH1Rtykpc06JbsYAGpDEOQKVNP1AdVW9wvswp8r+74tPoN5b/lOAtDld/Sct KdeJt3X4hqTEmlDL5EPO5FQ7wtYlPwTXsAat1fFdjlOb7QU5s2eooxGa+o1Utwl+ nKnglrtsIEF+FQZd9Id+8ilPpvlf8oPaL8FbRjuR0sMYX7VX0nGJIWC6l8ZHUnb8 sziKRC+8xF34EISL2onz44EplR9ocTAp9JzTc14tgsLW+4D0HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQdYHRg8Aa+KUaQUdvSRSDoTbOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYTI5YjZiY2EtMDc4Ni0z Mzc0LTk5YjUtNzA4ZDU3YmY3YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTasEEoEbpWhipK93K6w57VleM18wAhooayd7UBtvaU96zsc9hh5Nky 5hms4DCkOHHZ5OPNSXPjNKsyT7ySMm7ukrgktJTNzYehqwwPjODOiSJ4J8sFEC6U wLrSTEz+nivfN8F8THinHkUhqlDB5jaSqvvU4CUGL+ml9c7AkySJgQnd/yBbTH7F 1dUvXH7ZF1z4Y78fxz1PEPwQ8eBnjG2DD3vs6aKIxfUCed/CqlkM5DQ81eIgj7UT EuySZvyuHFKHwXFsDI/lkMVPvYt31k8OYGPHWGVN9rehch/1Nw0+p7e4Waai7Qvp ZrE7hamGPduc1/XGvTRyYkN0DLveiyQ= -----END CERTIFICATE-----Generated at Sun Jun 29 20:07:17 2025 by rpki-client