$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d7f71f4-4ed7-3d48-a197-4b59dea34f71.roa File: 4d7f71f4-4ed7-3d48-a197-4b59dea34f71.roa (raw, json) Hash identifier: Jt0dh4t6a0XOWu0NJd1kNEtOWxpcxgERzQ8Wc8v6yYQ= Subject key identifier: 51:61:7D:6D:1D:ED:32:AA:40:02:4D:B2:2D:D5:BD:70:D5:1B:EF:D2 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A629093A1A29B5341678B9780 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d7f71f4-4ed7-3d48-a197-4b59dea34f71.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 203724 IP address blocks: 161.69.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:93:a1:a2:9b:53:41:67:8b:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=7af65cd1-70bb-42b8-a8b1-b32d234e26d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:1b:c8:8b:ff:c0:d2:ba:45:4a:fc:18:fb: 2b:ee:ae:7d:79:76:f5:ea:3b:64:9d:a7:06:d6:b1: 55:05:d1:4d:0c:1c:ec:ab:35:fd:0b:78:ee:98:ba: 71:11:a0:8b:46:fd:d9:fe:56:14:7f:31:f4:3b:29: 20:c5:46:d0:04:5a:58:a9:5a:d5:a2:49:fb:5f:d6: 07:f0:f3:a1:14:57:7e:9b:11:27:71:57:63:61:ec: ce:01:6c:7e:98:99:88:aa:90:0d:0f:e1:35:bb:32: 54:3b:29:49:36:c5:cd:71:30:cf:45:7f:7d:25:56: 33:54:af:04:a1:80:81:a1:73:23:cc:45:bd:22:b9: 8e:06:b4:c0:90:3a:cf:86:32:1e:fb:36:7d:80:b6: ac:21:90:13:0c:8d:4f:b9:2b:13:85:c6:09:00:61: eb:c7:33:4e:94:01:fc:4d:90:1f:4b:6a:56:eb:e0: fd:63:2b:70:24:0a:e9:d3:2d:53:4b:79:ca:04:7d: f9:9a:38:03:14:7d:5f:9d:e0:eb:9d:a8:92:ad:9f: 0e:61:5e:32:dd:30:8a:0a:94:f2:c1:b8:bf:9e:24: b0:c4:03:f6:5a:d1:43:d4:b1:2f:d5:99:20:17:c4: 83:da:39:2e:a8:e0:fe:49:33:94:52:19:fe:78:40: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:61:7D:6D:1D:ED:32:AA:40:02:4D:B2:2D:D5:BD:70:D5:1B:EF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d7f71f4-4ed7-3d48-a197-4b59dea34f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ab:18:ce:54:af:cc:e9:14:fa:7e:dc:4c:71:c9:32:79:e4: 30:4b:b6:3c:4e:da:b6:7c:f6:e3:aa:4e:26:e0:6b:be:8f:a1: de:2b:10:6a:a3:a0:9c:bc:ca:d8:f2:40:0b:de:e6:17:5e:e9: fd:a9:f1:bc:64:a8:88:ee:51:44:d4:f3:04:fe:a1:cf:bc:b3: da:38:8c:bf:93:fa:8d:5e:78:c6:27:76:29:e3:f7:9e:2c:a3: f2:d6:4f:fc:13:54:33:f6:2b:e2:7e:30:1f:a8:26:35:af:e3: e5:3b:c0:06:2d:e3:f3:44:d9:16:ac:28:8e:99:7f:1c:2e:70: 12:ac:a3:ee:9e:02:e1:9c:7e:ac:d6:e7:d1:e7:c9:3e:ca:4e: b7:4c:94:62:1a:30:4c:42:b7:89:fd:72:2c:aa:c2:1b:44:42: d1:48:e9:d2:25:1c:e5:09:6a:ed:0e:77:3e:52:21:1a:f1:c3: cd:59:0f:3a:68:55:14:58:48:4e:00:76:96:2f:52:25:21:c0: b9:e2:40:ab:30:ae:2a:37:6e:32:7a:d1:f6:b4:8a:9f:c8:df: 22:ef:64:c6:1d:5d:d9:d2:ba:cf:1e:0a:20:43:44:21:c7:df: 9e:40:8f:4b:33:47:a5:95:0f:6f:dd:d4:e0:57:7a:43:9f:15: 16:40:21:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJOhoptTQWeLl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk N2FmNjVjZDEtNzBiYi00MmI4LWE4YjEtYjMyZDIzNGUyNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXsbyIv/wNK6RUr8GPsr7q59eXb16jtknacG 1rFVBdFNDBzsqzX9C3jumLpxEaCLRv3Z/lYUfzH0OykgxUbQBFpYqVrVokn7X9YH 8POhFFd+mxEncVdjYezOAWx+mJmIqpAND+E1uzJUOylJNsXNcTDPRX99JVYzVK8E oYCBoXMjzEW9IrmOBrTAkDrPhjIe+zZ9gLasIZATDI1PuSsThcYJAGHrxzNOlAH8 TZAfS2pW6+D9YytwJArp0y1TS3nKBH35mjgDFH1fneDrnaiSrZ8OYV4y3TCKCpTy wbi/niSwxAP2WtFD1LEv1ZkgF8SD2jkuqOD+STOUUhn+eEBewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFhfW0d7TKqQAJNsi3VvXDVG+/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGQ3ZjcxZjQtNGVkNy0z ZDQ4LWExOTctNGI1OWRlYTM0ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWrGM5Ur8zpFPp+3ExxyTJ55DBLtjxO2rZ89uOqTibga76Pod4rEGqj oJy8ytjyQAve5hde6f2p8bxkqIjuUUTU8wT+oc+8s9o4jL+T+o1eeMYndinj954s o/LWT/wTVDP2K+J+MB+oJjWv4+U7wAYt4/NE2RasKI6ZfxwucBKso+6eAuGcfqzW 59HnyT7KTrdMlGIaMExCt4n9ciyqwhtEQtFI6dIlHOUJau0Odz5SIRrxw81ZDzpo VRRYSE4AdpYvUiUhwLniQKswrio3bjJ60fa0ip/I3yLvZMYdXdnSus8eCiBDRCHH 355Aj0szR6WVD2/d1OBXekOfFRZAIWU= -----END CERTIFICATE-----Generated at Wed Jul 9 18:01:55 2025 by rpki-client