$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f3ec365b-a994-328e-bbfb-21cf29aad388.roa File: f3ec365b-a994-328e-bbfb-21cf29aad388.roa (raw, json) Hash identifier: KJtJjCquSxGVxB83wN5/uBZxxhlxufd10iMXRAHeMMg= Subject key identifier: 94:47:8C:37:AB:F9:E9:F0:6F:0C:28:FB:2E:C8:0F:81:A2:27:81:8E Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A3B7AFDA45B51845B28A9B180 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f3ec365b-a994-328e-bbfb-21cf29aad388.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 31898 IP address blocks: 161.69.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:fd:a4:5b:51:84:5b:28:a9:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=b7050edb-48fb-4817-8eb6-5285a2b14de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:8a:dc:89:ce:0f:ac:20:98:66:7e:40:81: c3:24:f2:c7:3c:d2:ab:a3:d4:98:cd:30:1d:ad:ad: 3c:38:6d:4c:23:6f:22:4b:b2:0c:25:55:69:4e:72: 75:a3:42:85:94:d5:50:b7:57:9b:49:41:dc:bd:77: 25:56:2c:cb:36:30:f8:f6:e7:61:29:62:93:88:1b: 27:25:4d:a4:8e:4e:c3:f5:f5:c4:1c:0a:0d:3f:f6: 79:27:d6:71:c2:59:1b:0f:53:68:44:b8:fd:ff:d5: 5d:3f:b3:26:58:ed:bd:ad:fd:8b:24:b8:6a:aa:3f: e5:19:b5:e8:0a:5d:29:42:e9:77:24:c6:91:94:e3: 05:9b:0d:b5:5c:a9:d3:d6:35:30:72:b9:03:c1:c1: 67:c1:f7:47:c7:bf:ce:9b:31:de:1f:b2:cb:d6:8f: 31:cb:0e:1c:9f:0d:40:c6:6b:97:38:9e:82:1d:71: 8b:18:2c:21:e9:05:4d:44:7a:3e:14:97:fc:1c:bd: 97:48:c9:6f:f1:b0:02:80:cc:04:91:b3:3a:9f:ba: 9d:4a:da:63:b6:53:19:4a:29:14:dd:05:fa:83:9a: cb:31:ab:27:94:9b:c2:65:52:6a:ef:f3:1d:61:1d: d3:ee:64:2c:e6:4b:01:e2:4c:b3:c0:4d:5a:78:93: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:8C:37:AB:F9:E9:F0:6F:0C:28:FB:2E:C8:0F:81:A2:27:81:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f3ec365b-a994-328e-bbfb-21cf29aad388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:dc:c8:cc:71:13:74:e2:2f:26:96:2a:a9:75:1b:ba:c5:fc: 10:1f:4a:0b:52:41:c1:4f:7f:af:52:47:29:c0:40:fc:0d:3a: ec:95:69:ed:26:78:06:b0:45:f9:09:f9:f9:ee:71:63:45:42: 26:b6:60:77:18:c0:cf:24:ce:3e:64:d8:62:b8:4d:f9:4d:75: 30:88:9c:a1:60:fa:c6:a5:56:cb:e6:c8:12:20:c7:9d:ec:33: ec:25:9a:fd:81:48:d8:53:96:18:e9:7f:d5:52:d5:52:15:82: 8d:9b:ad:16:61:5a:ed:27:52:31:72:f2:cd:7f:22:12:62:8f: 75:be:9c:fc:0a:9c:25:8b:b6:42:7d:1f:09:fc:15:1d:71:d7: fb:68:ff:c1:49:4b:1b:99:df:e8:a4:c3:6e:c3:e9:53:8e:83: 3b:59:72:ad:92:5e:98:65:1f:07:ae:96:e5:f0:d7:6d:72:5c: 0a:92:c4:d5:7a:cd:0f:11:a7:4e:29:bd:27:82:1e:51:53:43: 84:21:d1:78:4d:10:1c:5c:0e:97:b0:48:a9:2d:b1:08:62:d2: 2b:0b:34:1e:c8:07:7c:20:1c:14:77:ea:71:73:be:c1:e1:0d: 5b:98:37:61:90:29:96:0f:db:51:9e:19:c8:14:41:d4:a7:f6: dd:2c:d7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ev2kW1GEWyipsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YjcwNTBlZGItNDhmYi00ODE3LThlYjYtNTI4NWEyYjE0ZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUiK3InOD6wgmGZ+QIHDJPLHPNKro9SYzTAd ra08OG1MI28iS7IMJVVpTnJ1o0KFlNVQt1ebSUHcvXclVizLNjD49udhKWKTiBsn JU2kjk7D9fXEHAoNP/Z5J9ZxwlkbD1NoRLj9/9VdP7MmWO29rf2LJLhqqj/lGbXo Cl0pQul3JMaRlOMFmw21XKnT1jUwcrkDwcFnwfdHx7/OmzHeH7LL1o8xyw4cnw1A xmuXOJ6CHXGLGCwh6QVNRHo+FJf8HL2XSMlv8bACgMwEkbM6n7qdStpjtlMZSikU 3QX6g5rLMasnlJvCZVJq7/MdYR3T7mQs5ksB4kyzwE1aeJMVyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRHjDer+enwbwwo+y7ID4GiJ4GOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjNlYzM2NWItYTk5NC0z MjhlLWJiZmItMjFjZjI5YWFkMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLcyMxxE3TiLyaWKql1G7rF/BAfSgtSQcFPf69SRynAQPwNOuyVae0m eAawRfkJ+fnucWNFQia2YHcYwM8kzj5k2GK4TflNdTCInKFg+salVsvmyBIgx53s M+wlmv2BSNhTlhjpf9VS1VIVgo2brRZhWu0nUjFy8s1/IhJij3W+nPwKnCWLtkJ9 Hwn8FR1x1/to/8FJSxuZ3+ikw27D6VOOgztZcq2SXphlHweuluXw121yXAqSxNV6 zQ8Rp04pvSeCHlFTQ4Qh0XhNEBxcDpewSKktsQhi0isLNB7IB3wgHBR36nFzvsHh DVuYN2GQKZYP21GeGcgUQdSn9t0s19Y= -----END CERTIFICATE-----Generated at Sun Jun 29 19:28:53 2025 by rpki-client