$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa File: cfb444d2-531b-3f89-9a90-97326374d80c.roa (raw, json) Hash identifier: JXNRpjPkuKGO2P1yr8Y1y6e/p9osuZyAEvu8daWdIVs= Subject key identifier: 2A:03:AB:DD:F9:6D:27:83:BE:14:04:86:39:AF:1D:DE:54:18:D3:95 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CCCE4198A707F78F7300 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 16509 IP address blocks: 161.69.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cc:ce:41:98:a7:07:f7:8f:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=d29bd7b4-5a91-43dd-bd61-9c797555f2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:30:81:fa:a4:69:a4:26:7c:2b:59:f4:a6: 2b:0e:03:c7:16:d6:4c:52:96:b6:5a:58:6c:25:fe: c0:c1:20:a1:ef:33:f0:86:f5:e0:e0:08:c3:18:d7: 4b:71:5a:9d:3e:a4:19:96:30:8b:98:fe:a4:1d:7e: 46:17:ea:45:58:d2:59:94:3d:ba:86:46:bf:64:2f: 3f:78:9b:2c:ca:6e:25:2d:d0:61:79:8f:32:5f:1a: 66:9a:16:a7:f8:78:e8:c9:85:3a:c8:94:84:6d:d0: b5:a2:36:7d:81:ba:dd:88:45:20:f9:ee:84:46:6b: 94:15:e8:7f:5e:e3:aa:12:c9:5e:d3:11:99:e0:5c: b5:94:ed:3a:81:64:6b:dc:c5:64:f9:33:02:a1:81: 97:a1:d4:be:84:53:a5:72:65:90:be:6a:ae:7a:45: da:4a:66:ac:8c:dd:7e:88:ec:ef:16:70:9b:07:3e: 66:e3:1a:3e:8d:48:4b:cc:6e:8b:07:8d:61:6d:bc: c4:6b:4d:74:13:db:78:9b:e7:2b:6e:a4:e4:93:fb: f1:2b:38:49:0e:de:b2:5a:7f:5f:4e:1a:39:e4:20: 56:6d:75:c6:89:c6:19:ef:ce:70:98:99:74:fb:02: d5:07:53:87:bc:d6:7c:6d:a3:92:32:4e:01:fe:ea: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:03:AB:DD:F9:6D:27:83:BE:14:04:86:39:AF:1D:DE:54:18:D3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a1:7c:fc:21:10:3f:43:b0:0d:ab:11:cd:17:99:85:2f:32: 13:84:53:e3:44:f8:55:a2:65:0e:5d:d5:49:c8:41:4f:d7:f6: 81:34:68:bf:8e:1e:58:b9:ad:f4:d1:29:a2:87:ae:af:70:43: d6:eb:5b:c1:78:4e:c2:54:53:9b:09:4a:83:ae:83:67:cd:ee: ad:e1:30:fc:bb:44:21:0e:a8:0e:4a:97:2c:de:8d:da:b9:22: fb:b4:c5:06:f0:d6:0f:54:91:8a:a3:fb:98:e5:06:b6:10:19: c6:80:34:f9:ac:8b:9c:c0:3d:3d:ec:41:dd:7a:ef:6c:a6:12: a5:ea:3d:68:b0:3c:06:8d:f6:fc:dd:91:14:aa:6e:9f:c6:1b: 5a:78:63:80:51:1a:c2:72:28:10:db:9a:e4:f5:36:8e:5d:ab: 38:a7:0a:c5:4b:da:4e:4f:e0:24:31:ee:22:96:d6:62:80:c8: cc:19:7c:fb:71:0b:d3:22:1b:b5:c8:21:1f:36:2f:c9:ba:b2: 50:bd:3a:6d:31:2d:fb:e8:52:e5:64:3e:5a:f6:35:b0:50:46: 51:bc:6b:ed:dc:14:79:a8:34:72:98:c4:fc:8a:a9:10:48:20: 61:ea:54:f2:f1:9b:76:80:1b:d3:95:ab:e6:7c:34:74:3c:35: 6a:00:32:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZczOQZinB/ePcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk ZDI5YmQ3YjQtNWE5MS00M2RkLWJkNjEtOWM3OTc1NTVmMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXowgfqkaaQmfCtZ9KYrDgPHFtZMUpa2Wlhs Jf7AwSCh7zPwhvXg4AjDGNdLcVqdPqQZljCLmP6kHX5GF+pFWNJZlD26hka/ZC8/ eJssym4lLdBheY8yXxpmmhan+HjoyYU6yJSEbdC1ojZ9gbrdiEUg+e6ERmuUFeh/ XuOqEsle0xGZ4Fy1lO06gWRr3MVk+TMCoYGXodS+hFOlcmWQvmquekXaSmasjN1+ iOzvFnCbBz5m4xo+jUhLzG6LB41hbbzEa010E9t4m+crbqTkk/vxKzhJDt6yWn9f Tho55CBWbXXGicYZ785wmJl0+wLVB1OHvNZ8baOSMk4B/uo04wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoDq935bSeDvhQEhjmvHd5UGNOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2ZiNDQ0ZDItNTMxYi0z Zjg5LTlhOTAtOTczMjYzNzRkODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOhfPwhED9DsA2rEc0XmYUvMhOEU+NE+FWiZQ5d1UnIQU/X9oE0aL+O Hli5rfTRKaKHrq9wQ9brW8F4TsJUU5sJSoOug2fN7q3hMPy7RCEOqA5Klyzejdq5 Ivu0xQbw1g9UkYqj+5jlBrYQGcaANPmsi5zAPT3sQd1672ymEqXqPWiwPAaN9vzd kRSqbp/GG1p4Y4BRGsJyKBDbmuT1No5dqzinCsVL2k5P4CQx7iKW1mKAyMwZfPtx C9MiG7XIIR82L8m6slC9Om0xLfvoUuVkPlr2NbBQRlG8a+3cFHmoNHKYxPyKqRBI IGHqVPLxm3aAG9OVq+Z8NHQ8NWoAMlk= -----END CERTIFICATE-----Generated at Sun Jun 29 11:24:42 2025 by rpki-client