$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa File: e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa (raw, json) Hash identifier: rfC6HNEr5wxzqtRR1fxRLZT+E5KsUjSNlP84N+ozYGs= Subject key identifier: 22:DE:B0:EF:B1:F5:04:7A:41:6A:53:F5:50:3D:29:B5:EC:0A:D4:F1 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584AD0D644B37A1D699C9C70B880 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 16509 IP address blocks: 161.69.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:44:b3:7a:1d:69:9c:9c:70:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=e89babe3-48b2-4cbc-b4f5-4e0734f2f429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:70:c6:fe:d6:3b:82:d1:5c:93:0d:d7:d7: 79:67:88:79:e4:73:0f:76:24:fe:ab:97:7d:7b:0d: 74:ce:9a:9e:ba:46:98:d5:96:ff:e5:4b:fa:6f:10: 05:ca:19:f8:d5:3c:9c:f2:ae:99:16:82:bc:1c:39: f2:12:03:9f:33:6b:9f:b6:2c:bb:a7:f6:e8:6d:82: 69:1c:f0:48:7b:2c:a7:98:ca:d9:17:83:78:da:78: 7d:71:c4:8f:c2:a9:73:0a:ab:a3:83:0e:b0:12:e4: fe:51:f5:34:ac:ef:00:a6:6a:11:c2:5d:c9:a9:1c: e5:f8:e7:d9:a2:83:c5:8d:9a:35:eb:e4:da:bf:2f: 4c:ff:3e:5d:78:29:27:88:bc:64:2c:4c:10:bf:07: 2d:e3:5e:e2:ca:5a:5f:64:67:38:30:9d:db:19:8e: 0a:69:ce:5a:0b:33:a3:b8:e1:41:75:a0:dc:b2:c5: 32:4b:a3:bd:0d:11:64:05:00:2c:b0:44:5a:73:29: 88:ff:14:e5:19:30:6e:67:7d:c9:0c:fd:57:29:18: df:f3:ad:08:df:cf:06:53:8f:0a:b6:a8:6c:cb:0a: 01:be:1a:a7:45:9c:d2:e1:0e:fd:d8:5e:58:ab:b6: eb:fb:fb:70:87:0d:75:3b:0d:f7:5b:d2:8e:02:cf: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DE:B0:EF:B1:F5:04:7A:41:6A:53:F5:50:3D:29:B5:EC:0A:D4:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b0:35:c7:4d:b4:f7:77:14:f5:10:76:ff:19:db:45:40:f5: f2:08:dd:a1:d3:88:93:ae:67:72:33:46:f1:7d:78:da:f0:80: 37:e8:38:6f:51:f0:4e:7d:6f:a9:a3:77:9f:b4:23:22:09:63: 02:a7:b3:a3:08:8b:55:26:c5:60:03:8b:c3:b3:37:a3:91:42: 0b:f7:bc:25:d1:c9:b9:49:2f:17:d1:65:7b:35:0f:d4:9f:a5: 70:53:dc:df:5c:32:76:de:08:43:2f:91:32:e9:dd:e8:f4:56: 5b:e5:a8:67:71:b2:3e:d7:91:43:1f:0f:3b:06:a4:85:7d:07: cf:27:8d:c2:e8:31:1a:10:c0:79:b1:33:45:f5:18:7e:33:7c: 70:5f:a8:1f:a4:9c:40:28:39:34:9d:9e:d1:d9:b8:2b:9e:94: d9:94:59:a9:30:d0:ba:11:dd:23:99:53:4b:6f:43:5c:5d:c2: c9:46:6f:40:00:19:19:ab:0d:75:09:3d:a2:7b:51:f7:af:15: da:4d:85:30:58:90:ae:e9:72:8f:88:84:78:9a:87:6c:ac:5e: 84:73:2e:b0:c8:d7:67:b1:49:31:24:ad:1a:6c:0b:b0:84:72: 3e:90:54:48:f9:05:70:d1:c6:1a:4b:68:c4:fd:09:fc:c7:1b: dd:a5:65:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1kSzeh1pnJxwuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ZTg5YmFiZTMtNDhiMi00Y2JjLWI0ZjUtNGUwNzM0ZjJmNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBtwxv7WO4LRXJMN19d5Z4h55HMPdiT+q5d9 ew10zpqeukaY1Zb/5Uv6bxAFyhn41Tyc8q6ZFoK8HDnyEgOfM2uftiy7p/bobYJp HPBIeyynmMrZF4N42nh9ccSPwqlzCqujgw6wEuT+UfU0rO8ApmoRwl3JqRzl+OfZ ooPFjZo16+Tavy9M/z5deCkniLxkLEwQvwct417iylpfZGc4MJ3bGY4Kac5aCzOj uOFBdaDcssUyS6O9DRFkBQAssERacymI/xTlGTBuZ33JDP1XKRjf860I388GU48K tqhsywoBvhqnRZzS4Q792F5Yq7br+/twhw11Ow33W9KOAs+qywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLesO+x9QR6QWpT9VA9KbXsCtTxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZThjOGQ5OGQtMDUzYy0z ZmQ1LTg1MzMtNGE5MWI1MDdmMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoUXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKwNcdNtPd3FPUQdv8Z20VA9fII3aHTiJOuZ3IzRvF9eNrwgDfoOG9R 8E59b6mjd5+0IyIJYwKns6MIi1UmxWADi8OzN6ORQgv3vCXRyblJLxfRZXs1D9Sf pXBT3N9cMnbeCEMvkTLp3ej0VlvlqGdxsj7XkUMfDzsGpIV9B88njcLoMRoQwHmx M0X1GH4zfHBfqB+knEAoOTSdntHZuCuelNmUWakw0LoR3SOZU0tvQ1xdwslGb0AA GRmrDXUJPaJ7UfevFdpNhTBYkK7pco+IhHiah2ysXoRzLrDI12exSTEkrRpsC7CE cj6QVEj5BXDRxhpLaMT9CfzHG92lZYQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:34 2025 by rpki-client