$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bef0998f-24db-3282-b3fd-539f3a48e773.roa File: bef0998f-24db-3282-b3fd-539f3a48e773.roa (raw, json) Hash identifier: C83Z1NITOFWxGjWqy4wfZFWKN8SX58wpt5bso4ALCyc= Subject key identifier: A9:62:8B:97:33:25:8F:CA:6F:F7:2F:D6:D8:8E:BD:20:14:C6:3D:5E Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CBD79C699AD6D1ECF480 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bef0998f-24db-3282-b3fd-539f3a48e773.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 203724 IP address blocks: 161.69.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cb:d7:9c:69:9a:d6:d1:ec:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=b0256be4-6e1a-4664-b42f-e978183c50cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:38:31:e4:ea:be:5f:f8:b9:52:83:56:5e: e3:03:ce:00:df:cd:ca:d7:17:4e:56:a8:ed:d0:95: 01:78:e5:e2:f9:ef:da:20:4b:3c:28:ea:7b:f0:62: 33:5c:5f:9b:95:1f:26:b8:63:5f:95:82:6c:3e:ea: de:fa:e0:74:c4:3b:c1:ae:5a:42:3d:20:fb:f1:e8: a7:65:79:c4:f8:57:11:d7:68:f6:db:e0:9f:dc:9c: 71:15:2d:5e:95:9f:d4:a3:31:e6:cb:8b:1a:a3:91: 7d:51:87:d0:ee:63:52:4d:62:dd:02:62:ec:97:8b: fc:d1:69:f2:af:ea:1b:80:16:f9:06:ac:69:15:cc: 26:ec:f1:2a:2c:0f:f9:af:1a:d7:01:85:09:62:cd: 47:47:07:8f:6c:2e:b1:02:f9:5e:e8:bd:87:08:c8: 25:cd:43:cc:f2:2f:a5:32:cd:ac:43:09:c7:ad:d9: d1:81:f9:13:d9:df:24:9b:ad:ff:b6:1f:97:58:2c: d8:1f:16:39:82:27:04:c1:7c:39:5f:8f:56:43:e4: ab:84:e0:45:54:a0:95:03:e6:3e:2e:68:dd:e2:32: 63:79:b7:54:6e:b6:e2:85:7e:bb:4a:e8:d9:27:93: 5b:55:42:a9:98:ae:49:83:1a:2f:f8:92:3b:2d:cf: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:62:8B:97:33:25:8F:CA:6F:F7:2F:D6:D8:8E:BD:20:14:C6:3D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bef0998f-24db-3282-b3fd-539f3a48e773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4f:39:ab:1f:93:8e:cd:ae:7b:f7:44:a9:04:f2:66:33:9e: 55:61:76:83:5d:18:16:cd:18:52:2f:41:53:76:27:ea:c3:b0: b7:50:2a:3b:08:b1:12:0c:9a:40:2a:be:4a:c3:9f:e4:6d:79: b2:77:52:5f:85:c7:40:bd:26:a9:08:20:67:03:81:d2:1c:eb: a8:84:ee:93:8b:aa:4e:c4:9e:1e:be:b4:5d:04:62:4f:28:bc: cb:06:df:11:23:09:e3:3b:9a:e9:e8:2c:14:bf:e7:03:28:9b: 00:27:4e:5d:dc:10:29:b8:32:b7:20:25:2c:16:c5:3d:dc:0b: 4d:09:4e:49:59:19:4c:8c:2b:c0:86:3f:89:7d:3b:54:b8:6d: 78:85:9f:73:b0:82:0d:d8:07:19:0a:0c:66:07:3c:eb:17:82: b9:02:a4:8b:ee:22:bb:77:b0:98:cb:25:6f:d6:fe:a9:b9:a7: 96:75:f4:a6:49:6a:11:e3:28:4e:bb:45:c1:d7:ba:63:80:6b: 2b:21:64:12:17:3a:09:3a:76:1e:eb:7e:63:74:39:c6:43:d6: f6:5b:06:b2:7c:07:90:5d:8c:84:aa:98:4e:60:0e:63:b6:99: db:44:bf:ce:4c:b7:9c:3e:5d:ca:34:c0:a8:69:ee:06:57:69: 58:8f:14:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcvXnGma1tHs9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk YjAyNTZiZTQtNmUxYS00NjY0LWI0MmYtZTk3ODE4M2M1MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryQ4MeTqvl/4uVKDVl7jA84A383K1xdOVqjt 0JUBeOXi+e/aIEs8KOp78GIzXF+blR8muGNflYJsPure+uB0xDvBrlpCPSD78ein ZXnE+FcR12j22+Cf3JxxFS1elZ/UozHmy4sao5F9UYfQ7mNSTWLdAmLsl4v80Wny r+obgBb5BqxpFcwm7PEqLA/5rxrXAYUJYs1HRwePbC6xAvle6L2HCMglzUPM8i+l Ms2sQwnHrdnRgfkT2d8km63/th+XWCzYHxY5gicEwXw5X49WQ+SrhOBFVKCVA+Y+ Lmjd4jJjebdUbrbihX67SujZJ5NbVUKpmK5Jgxov+JI7Lc9TtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlii5czJY/Kb/cv1tiOvSAUxj1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYmVmMDk5OGYtMjRkYi0z MjgyLWIzZmQtNTM5ZjNhNDhlNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBPOasfk47Nrnv3RKkE8mYznlVhdoNdGBbNGFIvQVN2J+rDsLdQKjsI sRIMmkAqvkrDn+RtebJ3Ul+Fx0C9JqkIIGcDgdIc66iE7pOLqk7Enh6+tF0EYk8o vMsG3xEjCeM7munoLBS/5wMomwAnTl3cECm4MrcgJSwWxT3cC00JTklZGUyMK8CG P4l9O1S4bXiFn3Owgg3YBxkKDGYHPOsXgrkCpIvuIrt3sJjLJW/W/qm5p5Z19KZJ ahHjKE67RcHXumOAayshZBIXOgk6dh7rfmN0OcZD1vZbBrJ8B5BdjISqmE5gDmO2 mdtEv85Mt5w+Xco0wKhp7gZXaViPFIc= -----END CERTIFICATE-----Generated at Sun Jun 29 19:02:02 2025 by rpki-client