$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c2cf59f9-c5cc-35de-a2b0-7f76a38bbd67.roa File: c2cf59f9-c5cc-35de-a2b0-7f76a38bbd67.roa (raw, json) Hash identifier: LNG4nOWsNi1AbiMVinfEpjXBRumrhF0VqV6Udju6gRU= Subject key identifier: 45:F0:A6:B5:82:A3:9D:94:C9:8C:98:5C:F3:DC:C3:5C:25:AF:51:A6 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A66C07610596D95226F780900 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c2cf59f9-c5cc-35de-a2b0-7f76a38bbd67.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 203724 IP address blocks: 161.69.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:76:10:59:6d:95:22:6f:78:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=3fb2110c-0b46-4752-a94a-7ce7e74e0a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:be:5b:21:90:04:78:01:73:fe:8b:0b:14: fa:4d:aa:3d:42:96:90:48:9f:0a:d2:f3:e2:41:50: 94:d8:aa:50:a9:93:f2:cb:44:c1:59:3b:fe:e4:cd: 82:9f:b1:0d:0b:fd:cc:8b:bb:d6:88:2b:8e:85:5c: 05:77:31:7f:88:da:a2:e4:4e:3d:27:eb:3f:9e:47: 45:d2:6b:4e:84:81:ee:60:99:5e:80:7b:90:c3:b4: e2:30:57:ed:e6:4f:35:58:d1:a2:e1:99:0e:8b:ed: 3d:ef:fe:96:71:6b:33:77:c5:5c:6c:df:26:53:61: fb:fc:65:e7:3f:0a:f8:16:a4:20:04:ab:d5:70:ea: 90:9e:26:e2:65:15:aa:82:99:f8:5a:e9:de:01:c7: a3:1c:11:45:40:68:21:fd:2c:f8:81:63:94:37:c0: d8:94:11:e5:ad:ac:48:bb:49:45:4d:da:f5:71:96: 2f:94:c1:86:35:de:9b:80:b4:ba:b4:15:44:89:01: a7:c9:44:4b:d3:ae:b1:d0:ef:d7:0a:a4:7f:e4:5e: 4d:8a:ff:58:35:fb:89:fd:72:9b:76:53:53:51:88: ea:53:8f:4b:60:85:ca:51:90:20:7a:9f:ea:a3:29: e9:50:23:2a:5e:a1:d4:3d:40:c8:db:44:cb:29:72: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F0:A6:B5:82:A3:9D:94:C9:8C:98:5C:F3:DC:C3:5C:25:AF:51:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c2cf59f9-c5cc-35de-a2b0-7f76a38bbd67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2e:5f:c2:b5:ad:c7:f2:64:e1:33:73:97:07:1a:6e:5f:86: aa:d9:a3:c0:df:75:02:6b:0e:42:ba:08:07:41:56:b2:76:e7: 99:23:0f:e6:7d:b2:c1:61:8f:36:fc:54:e8:8f:a6:64:48:15: 98:2c:59:c4:a4:32:16:54:f0:c4:97:23:69:b2:78:69:07:b4: 31:67:12:33:95:ee:66:00:95:ef:e4:77:12:8b:eb:a8:0c:69: 60:29:85:2d:49:d7:4b:de:64:4e:40:70:06:5c:58:4f:b8:f8: a4:b8:8f:05:2f:ae:a6:fd:2e:e5:4b:ec:d7:9f:79:30:51:8d: a9:95:6c:2c:c0:5c:c8:25:5a:0a:bc:3f:54:0a:30:49:51:36: f5:b7:b0:38:f7:42:96:39:3a:c5:c0:b3:25:ec:2f:84:aa:8b: c5:04:a6:7b:76:4b:fd:7d:7e:9c:5c:df:0f:2b:4f:0c:41:12: 16:a9:21:05:0d:17:01:55:41:6b:ab:c7:7c:1b:59:cb:86:1b: 1e:2f:c4:9f:8f:06:e6:8f:4b:2c:b5:70:50:e8:fc:ed:da:37: 2d:d9:4e:60:06:fb:57:cb:9c:0b:64:d7:fb:29:fe:4d:71:94: 9d:8b:42:ef:36:f3:20:42:d3:22:b7:d5:25:c5:52:3d:b1:5c: 6b:bb:48:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHYQWW2VIm94CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk M2ZiMjExMGMtMGI0Ni00NzUyLWE5NGEtN2NlN2U3NGUwYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwK+WyGQBHgBc/6LCxT6Tao9QpaQSJ8K0vPi QVCU2KpQqZPyy0TBWTv+5M2Cn7ENC/3Mi7vWiCuOhVwFdzF/iNqi5E49J+s/nkdF 0mtOhIHuYJlegHuQw7TiMFft5k81WNGi4ZkOi+097/6WcWszd8VcbN8mU2H7/GXn Pwr4FqQgBKvVcOqQnibiZRWqgpn4WuneAcejHBFFQGgh/Sz4gWOUN8DYlBHlraxI u0lFTdr1cZYvlMGGNd6bgLS6tBVEiQGnyURL066x0O/XCqR/5F5Niv9YNfuJ/XKb dlNTUYjqU49LYIXKUZAgep/qoynpUCMqXqHUPUDI20TLKXLecwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXwprWCo52UyYyYXPPcw1wlr1GmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYzJjZjU5ZjktYzVjYy0z NWRlLWEyYjAtN2Y3NmEzOGJiZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABouX8K1rcfyZOEzc5cHGm5fhqrZo8DfdQJrDkK6CAdBVrJ255kjD+Z9 ssFhjzb8VOiPpmRIFZgsWcSkMhZU8MSXI2myeGkHtDFnEjOV7mYAle/kdxKL66gM aWAphS1J10veZE5AcAZcWE+4+KS4jwUvrqb9LuVL7NefeTBRjamVbCzAXMglWgq8 P1QKMElRNvW3sDj3QpY5OsXAsyXsL4Sqi8UEpnt2S/19fpxc3w8rTwxBEhapIQUN FwFVQWurx3wbWcuGGx4vxJ+PBuaPSyy1cFDo/O3aNy3ZTmAG+1fLnAtk1/sp/k1x lJ2LQu828yBC0yK31SXFUj2xXGu7SIY= -----END CERTIFICATE-----Generated at Wed Jul 9 17:18:14 2025 by rpki-client