$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b433b1d3-a681-389d-954b-0e85198aa22b.roa File: b433b1d3-a681-389d-954b-0e85198aa22b.roa (raw, json) Hash identifier: pioG1vYEgCpQ9R2CJT89zfBtLgByNgJHYX0VMVI7bKc= Subject key identifier: 6D:2B:AD:79:E5:09:7E:D7:32:C5:38:65:E6:96:43:FA:7B:88:C3:73 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A682601AC17851EE4DD524F00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b433b1d3-a681-389d-954b-0e85198aa22b.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 203724 IP address blocks: 161.69.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:01:ac:17:85:1e:e4:dd:52:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=4bc645e2-9dd9-4fa9-9f69-3ae738aaf226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:d3:4e:84:dc:cd:4d:dd:e1:e3:63:90:37: ab:af:7f:2b:a5:86:27:4e:0b:54:9c:60:fc:e5:97: 93:3f:0c:1f:15:97:5f:79:11:a8:dc:cd:46:66:0a: 91:28:a9:4b:f0:5d:af:a7:53:bb:ca:65:a9:c4:a6: d9:34:cf:25:25:5a:89:0d:d7:53:76:e0:9c:bd:52: b8:0a:bb:52:76:9d:b5:28:3d:c3:40:70:b0:b1:36: 75:a5:eb:31:17:e9:6f:92:46:21:9a:bd:3d:2c:d8: 5d:11:84:d3:3e:1d:85:25:9c:1d:46:5b:59:e1:48: e5:2c:26:c3:7c:41:41:f6:8c:8e:5f:e4:c2:e4:34: 3a:53:15:30:bc:8b:94:d4:5b:b8:3a:42:58:25:85: f8:9a:53:73:60:9a:93:71:df:80:09:cf:fb:bb:6a: 75:4f:81:2c:3f:e1:d1:62:3c:b6:cc:ea:92:d7:cb: e9:ff:c7:f1:04:56:18:c9:f0:88:be:11:70:5d:f6: 18:49:bb:08:17:05:f9:ab:ba:01:71:dc:28:0f:b7: 4d:11:20:65:b4:30:2a:85:3e:17:b7:2e:84:f9:79: 2e:cb:9c:7c:3b:17:ab:26:43:6c:f7:84:23:fb:dc: e0:8f:bd:cb:59:cc:a1:6f:56:47:c0:27:ee:ff:bd: ef:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2B:AD:79:E5:09:7E:D7:32:C5:38:65:E6:96:43:FA:7B:88:C3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b433b1d3-a681-389d-954b-0e85198aa22b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:70:0e:b0:12:d7:fe:52:ac:ae:82:26:c2:c0:15:f8:45:16: 60:c1:cf:2e:1e:34:26:2b:77:26:21:a7:c1:91:44:42:5f:73: 92:29:c4:13:b7:95:7f:f3:b9:71:b5:26:37:1a:2f:3f:bb:0c: 91:5c:16:e9:f0:7f:59:c4:9f:69:db:5e:2b:d0:65:03:af:db: 5b:0d:c1:62:d1:bb:36:14:c1:01:89:df:4c:1e:4c:b8:bc:ad: fd:48:a7:70:b9:d4:85:28:66:d7:48:d4:48:11:dd:9a:1b:70: 7f:53:04:8b:f4:d4:c2:30:3b:7e:3c:23:3a:4b:86:dd:57:68: 36:88:a5:2e:c3:69:be:de:85:93:aa:75:ff:8b:45:00:7d:f8: 8b:50:43:58:52:aa:2a:5a:f5:d3:26:7e:ad:33:4a:3d:e5:95: 50:1e:f4:b9:69:b3:54:82:48:56:76:fc:d1:96:16:df:c0:f2: 45:c8:18:4e:2b:e6:6b:ca:fa:de:2a:3c:b0:fe:73:2b:a6:0f: 7b:f8:16:68:d9:13:c3:a6:c8:46:db:b2:02:2a:73:67:56:ca: e0:61:33:9f:c3:7f:73:1e:63:f8:2e:c3:4e:18:c7:92:ee:ef: 91:90:57:f3:8b:c8:0e:a9:1a:63:0a:b8:58:e9:45:55:63:86: d1:44:d2:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgGsF4Ue5N1STwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk NGJjNjQ1ZTItOWRkOS00ZmE5LTlmNjktM2FlNzM4YWFmMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWHTToTczU3d4eNjkDerr38rpYYnTgtUnGD8 5ZeTPwwfFZdfeRGo3M1GZgqRKKlL8F2vp1O7ymWpxKbZNM8lJVqJDddTduCcvVK4 CrtSdp21KD3DQHCwsTZ1pesxF+lvkkYhmr09LNhdEYTTPh2FJZwdRltZ4UjlLCbD fEFB9oyOX+TC5DQ6UxUwvIuU1Fu4OkJYJYX4mlNzYJqTcd+ACc/7u2p1T4EsP+HR Yjy2zOqS18vp/8fxBFYYyfCIvhFwXfYYSbsIFwX5q7oBcdwoD7dNESBltDAqhT4X ty6E+Xkuy5x8OxerJkNs94Qj+9zgj73LWcyhb1ZHwCfu/73vEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0rrXnlCX7XMsU4ZeaWQ/p7iMNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjQzM2IxZDMtYTY4MS0z ODlkLTk1NGItMGU4NTE5OGFhMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZwDrAS1/5SrK6CJsLAFfhFFmDBzy4eNCYrdyYhp8GRREJfc5IpxBO3 lX/zuXG1JjcaLz+7DJFcFunwf1nEn2nbXivQZQOv21sNwWLRuzYUwQGJ30weTLi8 rf1Ip3C51IUoZtdI1EgR3ZobcH9TBIv01MIwO348IzpLht1XaDaIpS7Dab7ehZOq df+LRQB9+ItQQ1hSqipa9dMmfq0zSj3llVAe9Llps1SCSFZ2/NGWFt/A8kXIGE4r 5mvK+t4qPLD+cyumD3v4FmjZE8OmyEbbsgIqc2dWyuBhM5/Df3MeY/guw04Yx5Lu 75GQV/OLyA6pGmMKuFjpRVVjhtFE0nE= -----END CERTIFICATE-----Generated at Wed Jul 9 18:11:52 2025 by rpki-client