$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e1ac7d37-3b33-3a37-b3f8-4bfd5ae4d9a8.roa File: e1ac7d37-3b33-3a37-b3f8-4bfd5ae4d9a8.roa (raw, json) Hash identifier: gfOCF7wW/DghY+IULs4cd2YAa1pE8NCeabulERme4RM= Subject key identifier: A5:25:83:75:6B:3F:86:8E:5A:49:0D:79:15:40:1C:F0:E5:8B:20:6F Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A5765CC825D3F8165EC441280 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e1ac7d37-3b33-3a37-b3f8-4bfd5ae4d9a8.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 203724 IP address blocks: 161.69.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:cc:82:5d:3f:81:65:ec:44:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=2b8f8dfd-d1f0-4d36-ae5a-230d00423b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1a:3b:8a:1e:1d:c1:7d:13:25:92:c2:59:6c: 2d:7d:11:8c:f4:05:a4:8e:c9:05:46:38:8b:f8:34: 86:e0:d9:93:93:39:00:46:4c:99:a9:52:72:63:1b: 8d:5d:82:e6:40:a8:58:98:a0:7b:de:d5:43:c1:47: 7c:82:3e:c0:c3:21:69:30:50:a1:52:f8:7a:03:c4: 91:99:95:c2:24:69:14:3d:f1:af:a5:4c:2e:4b:ab: e4:e5:18:de:19:c5:b0:51:d7:0b:32:7b:7a:c8:2d: 41:7c:c5:ae:45:2f:cd:23:77:61:bd:59:32:87:e3: 8e:a8:d6:9e:e1:ba:1b:d4:c1:53:18:bd:8c:41:02: eb:bc:60:b5:7a:4f:e6:bb:48:60:aa:5f:24:d4:67: fc:22:65:1d:39:00:4e:cb:06:e2:28:e1:83:1b:3a: ce:d2:71:da:41:ac:f3:13:9b:ba:fd:4e:ec:15:00: 69:34:77:a4:fe:9e:ad:e9:90:01:df:c0:5d:49:bd: 84:72:0b:f8:96:b7:73:a2:c7:20:3c:a7:6d:2c:96: e3:78:99:7e:d9:7c:ec:a9:e3:5c:2f:d7:da:fa:f6: ed:b2:ef:ca:07:f5:d0:ec:53:c2:6f:fa:8a:40:88: e3:c1:a5:ce:eb:1d:61:09:74:58:8a:1e:c8:d0:24: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:83:75:6B:3F:86:8E:5A:49:0D:79:15:40:1C:F0:E5:8B:20:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e1ac7d37-3b33-3a37-b3f8-4bfd5ae4d9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:11:d8:3a:f0:37:79:ee:f5:f7:fc:04:02:7e:e2:6a:da:7c: 76:5c:d4:42:18:99:c4:6f:29:22:9d:1b:65:f4:41:06:bb:2c: 24:ed:ed:4d:98:0d:2d:4b:bd:4d:6e:04:f2:20:ca:ff:d8:72: 09:6e:4a:ea:79:1e:ea:db:09:db:43:1f:24:84:d0:fb:cf:71: c1:77:bd:2b:5b:0c:ae:5f:05:48:79:8c:53:ff:05:6c:fe:fa: 38:b9:7d:ba:cf:48:03:f7:b4:3e:7e:08:92:fc:f5:a1:ca:c8: 88:7d:ca:fc:a7:df:98:3c:71:bb:0d:72:fc:b9:de:d3:67:03: 1a:d4:3d:8d:7e:69:cd:d6:e8:66:eb:23:5a:88:aa:63:d4:14: 5a:1f:0a:a6:2c:ca:fe:20:98:da:62:7e:02:9f:56:90:9e:33: 6e:9a:6a:44:2c:fe:63:f7:24:55:c5:17:95:0a:f8:51:61:0f: 61:35:ab:2e:fa:23:9a:cc:f3:74:15:f7:af:cb:eb:52:97:f3: d0:0d:02:3f:4f:7a:0c:f1:d1:64:97:85:2d:40:b2:05:ca:3a: c3:30:7d:95:60:bd:d2:78:c1:4c:1f:15:db:38:7d:ac:e0:8a: 70:8b:5b:ec:9c:e4:28:16:6b:93:77:0f:37:2d:af:8d:15:c6: 85:1b:a3:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcyCXT+BZexEEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MmI4ZjhkZmQtZDFmMC00ZDM2LWFlNWEtMjMwZDAwNDIzYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBo7ih4dwX0TJZLCWWwtfRGM9AWkjskFRjiL +DSG4NmTkzkARkyZqVJyYxuNXYLmQKhYmKB73tVDwUd8gj7AwyFpMFChUvh6A8SR mZXCJGkUPfGvpUwuS6vk5RjeGcWwUdcLMnt6yC1BfMWuRS/NI3dhvVkyh+OOqNae 4bob1MFTGL2MQQLrvGC1ek/mu0hgql8k1Gf8ImUdOQBOywbiKOGDGzrO0nHaQazz E5u6/U7sFQBpNHek/p6t6ZAB38BdSb2Ecgv4lrdzoscgPKdtLJbjeJl+2XzsqeNc L9fa+vbtsu/KB/XQ7FPCb/qKQIjjwaXO6x1hCXRYih7I0CSWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUlg3VrP4aOWkkNeRVAHPDliyBvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZTFhYzdkMzctM2IzMy0z YTM3LWIzZjgtNGJmZDVhZTRkOWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsR2DrwN3nu9ff8BAJ+4mrafHZc1EIYmcRvKSKdG2X0QQa7LCTt7U2Y DS1LvU1uBPIgyv/YcgluSup5HurbCdtDHySE0PvPccF3vStbDK5fBUh5jFP/BWz+ +ji5fbrPSAP3tD5+CJL89aHKyIh9yvyn35g8cbsNcvy53tNnAxrUPY1+ac3W6Gbr I1qIqmPUFFofCqYsyv4gmNpifgKfVpCeM26aakQs/mP3JFXFF5UK+FFhD2E1qy76 I5rM83QV96/L61KX89ANAj9Pegzx0WSXhS1AsgXKOsMwfZVgvdJ4wUwfFds4fazg inCLW+yc5CgWa5N3Dzctr40VxoUbo3Q= -----END CERTIFICATE-----Generated at Sun Jun 29 19:28:59 2025 by rpki-client