$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa File: b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa (raw, json) Hash identifier: CL7ROyXymyw7gr6OFF4PzT0uI29r2H1nx0tcQqdjkCo= Subject key identifier: 24:42:69:D2:43:40:3D:E1:A3:8C:D3:FB:BB:72:37:87:E6:CC:95:52 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765C764178CC2E43F4F5E40 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 203724 IP address blocks: 161.69.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:c7:64:17:8c:c2:e4:3f:4f:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=5b825f74-3de4-4364-98f7-b41d3d4f8be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:cc:0d:54:19:b3:66:c6:2c:2d:74:ae:9e: b1:72:fa:2d:2f:72:8e:b6:07:68:c4:3c:60:69:74: 85:b8:21:1d:12:c7:7b:ae:68:91:d5:b1:f4:09:00: e2:55:a1:99:d1:7c:60:20:c9:a9:01:75:35:67:09: 65:8d:81:44:e3:5f:6e:8c:8f:24:d7:35:c2:54:d2: 9b:e2:68:1a:13:2c:fd:b8:71:7f:9d:8e:41:03:ba: 94:b0:2e:99:d1:59:b3:d9:e1:57:e6:eb:a7:fc:7f: d7:dd:c4:3f:0a:4f:d0:b7:1e:dc:ed:6a:39:f4:7b: 21:0b:4d:02:40:69:44:90:67:00:bc:76:f9:84:df: d9:99:4a:30:f3:a5:be:47:e5:3e:e5:37:5e:1d:c9: 32:dd:71:89:ec:fa:93:a1:ed:4d:f6:1a:3f:6d:26: e2:8e:06:38:81:11:ea:4e:19:da:f2:54:e6:ee:c9: 9c:a8:e2:8f:09:b1:5b:ea:b3:7c:3d:4c:59:cb:11: c7:d8:ac:64:72:25:c4:d9:05:13:ad:d9:82:f0:5a: bd:b0:77:3c:98:23:ca:98:41:a4:4e:c2:e6:98:9a: 10:a3:ce:d6:25:5f:f1:63:d9:b3:4d:1e:bc:a0:49: d9:53:69:03:bf:c2:99:93:38:61:5d:39:ee:8a:f1: ca:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:69:D2:43:40:3D:E1:A3:8C:D3:FB:BB:72:37:87:E6:CC:95:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b90c74e5-e3c5-3b98-9ac0-d426a23eea39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d4:35:d1:ef:b3:d3:bf:11:f4:37:f4:a4:9d:a6:9a:cb:d7: 8d:ec:56:fb:e6:15:73:e4:e7:98:4c:f0:a2:c4:05:ce:34:3d: b3:76:e3:3d:22:b8:a2:2f:19:a3:12:cb:c5:46:01:3e:db:12: 9a:a4:cf:9e:14:65:cd:e7:7e:9d:af:92:1f:1b:56:82:8d:09: 73:06:41:20:98:0e:e5:06:87:92:50:60:e1:a9:5e:e7:bf:e6: 83:0c:a8:21:ab:cf:29:aa:b0:47:83:fc:7b:09:0d:67:b1:9f: f7:07:02:b1:4a:14:01:db:e1:fa:a3:79:69:a8:ab:e2:07:10: b4:3a:81:73:25:e4:b1:09:02:42:34:bf:ef:88:50:0d:96:94: fc:60:02:10:03:a9:55:aa:b5:27:27:fc:68:cb:a4:29:4d:c6: a4:f4:4b:14:fe:a7:52:ce:cc:ed:79:47:72:c5:60:b7:71:2a: 03:57:72:f8:35:dd:6d:92:f2:1a:50:f1:61:af:48:9b:f5:a1: de:97:90:94:e1:2f:ce:37:5a:81:96:a9:1f:25:92:27:ab:e9: 0f:fc:40:04:22:e1:ec:68:76:c6:5c:55:ee:f1:5b:a4:36:3f: 15:8e:97:c7:b6:cf:d7:37:9e:f3:78:78:a8:d4:b9:12:f4:d3: 2a:86:f2:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcdkF4zC5D9PXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NWI4MjVmNzQtM2RlNC00MzY0LTk4ZjctYjQxZDNkNGY4YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszzMDVQZs2bGLC10rp6xcvotL3KOtgdoxDxg aXSFuCEdEsd7rmiR1bH0CQDiVaGZ0XxgIMmpAXU1ZwlljYFE419ujI8k1zXCVNKb 4mgaEyz9uHF/nY5BA7qUsC6Z0Vmz2eFX5uun/H/X3cQ/Ck/Qtx7c7Wo59HshC00C QGlEkGcAvHb5hN/ZmUow86W+R+U+5TdeHcky3XGJ7PqToe1N9ho/bSbijgY4gRHq Thna8lTm7smcqOKPCbFb6rN8PUxZyxHH2KxkciXE2QUTrdmC8Fq9sHc8mCPKmEGk TsLmmJoQo87WJV/xY9mzTR68oEnZU2kDv8KZkzhhXTnuivHKXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRCadJDQD3ho4zT+7tyN4fmzJVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjkwYzc0ZTUtZTNjNS0z Yjk4LTlhYzAtZDQyNmEyM2VlYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPUNdHvs9O/EfQ39KSdpprL143sVvvmFXPk55hM8KLEBc40PbN24z0i uKIvGaMSy8VGAT7bEpqkz54UZc3nfp2vkh8bVoKNCXMGQSCYDuUGh5JQYOGpXue/ 5oMMqCGrzymqsEeD/HsJDWexn/cHArFKFAHb4fqjeWmoq+IHELQ6gXMl5LEJAkI0 v++IUA2WlPxgAhADqVWqtScn/GjLpClNxqT0SxT+p1LOzO15R3LFYLdxKgNXcvg1 3W2S8hpQ8WGvSJv1od6XkJThL843WoGWqR8lkier6Q/8QAQi4exodsZcVe7xW6Q2 PxWOl8e2z9c3nvN4eKjUuRL00yqG8hg= -----END CERTIFICATE-----Generated at Sun Jun 29 19:28:05 2025 by rpki-client