$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa File: 4a3e3800-5ec5-3b00-932f-a0909a00190a.roa (raw, json) Hash identifier: tAXcFSSUI/RytvuR9/5sodlxDSsfZJx23bSwwG4JO/s= Subject key identifier: F2:F9:D3:13:F9:03:B2:FB:26:FA:FF:F8:FD:2B:21:98:7A:E2:E6:25 Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Certificate serial: 010D0C9F4328584A506AF5EA0C15AB9DBDF39980 Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 396982 IP address blocks: 161.223.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f5:ea:0c:15:ab:9d:bd:f3:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=84b1e0cd-680c-4f1e-a18c-3ee942fd4ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:8d:bf:2f:8b:a7:57:fa:ad:44:17:53:6f: e1:5f:ac:15:55:57:1f:ea:ad:10:06:b3:5f:23:af: fd:a3:ff:86:a6:03:08:29:e2:68:23:b6:c0:57:97: 87:10:49:dd:04:dc:69:00:5a:2c:a0:3e:f7:c8:9a: b4:b3:8f:77:f8:90:27:96:fc:f1:28:2c:7d:7f:dc: 6d:fd:4f:0c:ac:6b:b7:17:98:e5:b1:e8:8b:e6:ff: 47:02:16:3a:52:86:b9:28:de:07:15:de:c1:60:1a: eb:76:37:f0:9d:3a:34:fe:d5:6b:45:b2:11:cb:97: 21:01:c9:6c:9e:b5:b2:a5:bc:f4:c4:b9:77:1b:4f: b7:eb:1f:93:a9:10:70:cd:f2:21:79:35:bf:95:dd: a2:b8:47:44:48:0e:bf:24:75:b3:c1:f5:91:72:48: 5e:94:74:18:3e:d2:89:fb:f1:ec:52:b8:9e:f1:a7: bc:7b:7f:b3:80:af:7a:8a:e3:2f:f2:fa:76:50:cb: 98:78:21:93:0a:87:46:30:1f:95:0a:34:15:ae:c3: 11:17:76:2f:86:e2:f5:de:de:27:17:e9:08:1a:65: 5d:08:ed:1a:ba:7c:e8:77:1c:fe:b1:21:2f:0e:74: 93:e8:8c:4a:61:98:13:07:84:0e:41:59:df:96:97: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F9:D3:13:F9:03:B2:FB:26:FA:FF:F8:FD:2B:21:98:7A:E2:E6:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/4a3e3800-5ec5-3b00-932f-a0909a00190a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl X509v3 Authority Key Identifier: keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer sbgp-ipAddrBlock: critical IPv4: 161.223.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bc:14:83:d6:37:b1:78:42:e4:b7:77:85:09:69:9d:21:55: 53:96:1a:9d:9a:e4:71:f7:a2:d8:13:5e:fb:6a:c5:af:3b:3f: b9:6f:2b:92:dc:45:38:d7:2b:e1:01:44:6c:e5:d4:77:44:72: cf:35:e6:26:7c:d5:21:67:e0:20:51:1d:47:a7:15:1f:8b:af: 12:d1:04:0e:be:be:ff:cf:d5:6b:8e:c9:a6:40:bb:46:dc:c6: d1:5d:de:12:c1:d3:49:59:5f:5a:a3:23:1c:bf:b1:29:a9:93: 20:95:9c:f9:45:a3:db:92:46:0b:3d:13:06:02:ae:e7:ec:9e: 26:44:b9:6b:e5:51:83:71:8f:6f:c9:ad:a5:28:c4:72:38:37: 90:3d:74:fb:36:fa:03:ac:f8:59:32:3c:3c:32:da:ea:eb:37: 68:9c:01:5a:8b:15:68:3e:77:dc:81:73:9f:dd:a0:46:6f:f8: 31:da:ea:e1:db:f2:c9:21:4e:d3:3a:7b:77:c9:6e:52:df:cf: 50:73:b2:d2:82:e5:c4:06:de:f5:98:02:89:5a:97:62:87:77: e0:4a:c2:f2:a5:d1:1b:85:15:f9:1d:27:bb:17:66:bd:c7:71: ed:98:c1:88:a0:cf:6e:5a:14:dd:ca:78:1e:aa:88:1e:8f:38: b7:6a:62:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQavXqDBWrnb3zmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4N2Q4OTQtZDJiYS00ZTMzLThlODQtNDRiOWQ5ZDZl M2Q1MB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk ODRiMWUwY2QtNjgwYy00ZjFlLWExOGMtM2VlOTQyZmQ0ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqSNvy+Lp1f6rUQXU2/hX6wVVVcf6q0QBrNf I6/9o/+GpgMIKeJoI7bAV5eHEEndBNxpAFosoD73yJq0s493+JAnlvzxKCx9f9xt /U8MrGu3F5jlseiL5v9HAhY6Uoa5KN4HFd7BYBrrdjfwnTo0/tVrRbIRy5chAcls nrWypbz0xLl3G0+36x+TqRBwzfIheTW/ld2iuEdESA6/JHWzwfWRckhelHQYPtKJ +/HsUrie8ae8e3+zgK96iuMv8vp2UMuYeCGTCodGMB+VCjQVrsMRF3YvhuL13t4n F+kIGmVdCO0aunzodxz+sSEvDnST6IxKYZgTB4QOQVnflpdStwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL50xP5A7L7Jvr/+P0rIZh64uYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3 ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5ZDlkNmUzZDUvNGEzZTM4MDAtNWVjNS0z YjAwLTkzMmYtYTA5MDlhMDAxOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODM4N2Q4OTQtZDJiYS00ZTMzLThl ODQtNDRiOWQ5ZDZlM2Q1LzgzODdkODk0LWQyYmEtNGUzMy04ZTg0LTQ0YjlkOWQ2 ZTNkNS5jcmwwHwYDVR0jBBgwFoAUtn9XhLpAdF7cT+Sx8GS3mXk4aDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5 ZDlkNmUzZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod+6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+8FIPWN7F4QuS3d4UJaZ0hVVOWGp2a5HH3otgTXvtqxa87P7lvK5Lc RTjXK+EBRGzl1HdEcs815iZ81SFn4CBRHUenFR+LrxLRBA6+vv/P1WuOyaZAu0bc xtFd3hLB00lZX1qjIxy/sSmpkyCVnPlFo9uSRgs9EwYCrufsniZEuWvlUYNxj2/J raUoxHI4N5A9dPs2+gOs+FkyPDwy2urrN2icAVqLFWg+d9yBc5/doEZv+DHa6uHb 8skhTtM6e3fJblLfz1BzstKC5cQG3vWYAolal2KHd+BKwvKl0RuFFfkdJ7sXZr3H ce2YwYigz25aFN3KeB6qiB6POLdqYno= -----END CERTIFICATE-----Generated at Sun Jun 29 16:08:36 2025 by rpki-client