$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa File: ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa (raw, json) Hash identifier: ezsLuxblZGH33hPx3xOi1wy3XMW2XYOEvgRlb4mhHb8= Subject key identifier: 49:37:FF:DD:CE:AC:59:51:08:55:46:F5:00:A6:65:AA:FE:06:A4:51 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CCAA7AC5079B96305B80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 161.69.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cc:aa:7a:c5:07:9b:96:30:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=0faeccfe-05fb-4032-b024-7bdfda544f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:c7:de:1c:54:1f:1e:4f:4f:27:79:31:95: d4:50:59:f1:e0:65:88:8e:39:9e:d1:63:92:25:0d: 8a:5d:28:b4:d8:a7:4f:3b:ca:83:a0:89:d8:a2:46: 8b:00:17:c4:4c:84:4c:83:7e:87:b3:84:ca:ac:cb: 1f:22:5d:20:97:d1:a3:6c:95:f3:0e:12:38:33:ac: 6b:1c:8a:af:56:f9:3c:6b:f0:42:07:9f:ec:b9:ec: 63:87:83:5b:c4:76:33:ea:21:8e:71:c8:ef:56:c4: 88:6b:9c:e3:33:a8:fb:c5:8b:f7:01:cc:c0:a2:63: 55:2d:96:31:de:ef:d0:f9:98:d0:f8:70:e7:f4:01: 51:ea:98:76:fa:50:ae:ee:65:bd:aa:43:e6:df:59: 78:e5:df:59:d4:0f:2f:31:73:30:b2:da:96:da:61: bc:b6:dd:22:1d:df:e5:6f:2b:5c:d3:b0:c7:1e:0b: 4a:a0:ec:54:7c:4b:2c:28:50:0a:ef:37:bf:81:61: 48:94:8e:06:54:d5:fc:f0:99:8a:98:0a:53:55:e8: 5f:81:84:be:0c:18:6a:4b:ef:c8:75:b8:b6:b8:2d: 10:57:e5:17:67:50:e4:09:1a:91:5e:3a:97:8e:c8: bf:ce:a1:f1:61:27:e0:5d:a0:7c:8a:f5:1c:f4:d4: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:37:FF:DD:CE:AC:59:51:08:55:46:F5:00:A6:65:AA:FE:06:A4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:82:5f:25:f1:c0:e2:e5:48:9b:4c:bb:f9:38:7f:c9:d5:65: 7e:c6:3f:bb:4e:2c:4c:58:6e:a6:b6:27:3b:ee:a4:77:9e:11: fd:43:46:9b:63:fc:78:cb:20:13:36:61:0d:ce:34:d3:43:61: 57:f1:81:6e:22:ec:f8:1e:3b:c2:03:76:3a:a9:37:c6:46:9e: 8a:5f:a0:04:d0:b5:49:da:72:2a:6a:bf:00:a0:d0:95:ca:4e: 43:fe:50:48:d8:ba:27:5a:fb:ce:e4:ff:d1:d5:e5:4a:29:42: 96:8d:d9:d1:62:49:e1:77:43:60:92:7c:ad:22:2c:4e:1f:43: 39:d1:48:c8:85:84:77:b1:f3:14:5e:67:5b:c5:af:53:e5:47: 26:88:b8:0c:7c:92:fb:b9:cf:ee:fd:4c:8d:9a:47:49:51:f4: 36:d0:7f:c8:81:80:76:3d:e1:62:6f:7f:53:7e:0e:5c:3d:1f: 93:9e:c2:92:19:79:a9:39:30:8a:71:cd:f2:21:38:e2:f8:ed: 33:30:49:04:a5:4e:2a:a5:9c:05:64:97:d5:26:89:e4:cd:af: 07:05:12:d1:05:13:76:8b:30:4a:b7:d8:01:cc:0b:cf:0c:21: 1a:b9:24:fd:73:90:a4:a6:72:d9:36:6a:d5:67:71:ed:c3:d5: 54:fa:e1:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcyqesUHm5YwW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MGZhZWNjZmUtMDVmYi00MDMyLWIwMjQtN2JkZmRhNTQ0Zjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizfH3hxUHx5PTyd5MZXUUFnx4GWIjjme0WOS JQ2KXSi02KdPO8qDoInYokaLABfETIRMg36Hs4TKrMsfIl0gl9GjbJXzDhI4M6xr HIqvVvk8a/BCB5/suexjh4NbxHYz6iGOccjvVsSIa5zjM6j7xYv3AczAomNVLZYx 3u/Q+ZjQ+HDn9AFR6ph2+lCu7mW9qkPm31l45d9Z1A8vMXMwstqW2mG8tt0iHd/l bytc07DHHgtKoOxUfEssKFAK7ze/gWFIlI4GVNX88JmKmApTVehfgYS+DBhqS+/I dbi2uC0QV+UXZ1DkCRqRXjqXjsi/zqHxYSfgXaB8ivUc9NRWkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk3/93OrFlRCFVG9QCmZar+BqRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYWU2ODg1MGQtOWExZi0z NDZkLWE0YWUtNGIzZWFjYTk3NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeCXyXxwOLlSJtMu/k4f8nVZX7GP7tOLExYbqa2JzvupHeeEf1DRptj /HjLIBM2YQ3ONNNDYVfxgW4i7PgeO8IDdjqpN8ZGnopfoATQtUnacipqvwCg0JXK TkP+UEjYuida+87k/9HV5UopQpaN2dFiSeF3Q2CSfK0iLE4fQznRSMiFhHex8xRe Z1vFr1PlRyaIuAx8kvu5z+79TI2aR0lR9DbQf8iBgHY94WJvf1N+Dlw9H5OewpIZ eak5MIpxzfIhOOL47TMwSQSlTiqlnAVkl9UmieTNrwcFEtEFE3aLMEq32AHMC88M IRq5JP1zkKSmctk2atVnce3D1VT64UI= -----END CERTIFICATE-----Generated at Sun Jun 29 17:01:26 2025 by rpki-client