$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa File: cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa (raw, json) Hash identifier: dZYCwGAGSwvOzK94Esp7luD3SqxJtwxu71BLuV4RWjo= Subject key identifier: AC:57:CC:D0:0E:7A:8D:03:D4:ED:BD:D3:97:CA:93:41:1B:CC:0F:DB Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A66C0761D562A3B29607F2C80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 203724 IP address blocks: 161.69.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:76:1d:56:2a:3b:29:60:7f:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=3e6bafc7-08f6-48ce-9a48-c9a4f9e1d79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:ff:b0:4f:13:9d:53:9c:57:b4:7d:97:5e: 40:34:fe:74:1f:64:c9:19:c8:ab:5a:e5:51:b3:9e: 54:55:be:53:de:cd:6f:05:b5:94:71:33:dd:1d:eb: eb:93:ed:1f:dd:4a:15:b6:dd:a0:46:5d:fc:1c:e8: d2:f5:4b:26:6b:06:e3:20:2e:ab:33:a3:41:e6:5b: 6a:67:12:75:a8:7b:37:0d:80:21:a5:0a:d9:78:4b: 15:8e:92:a0:f9:11:ec:7a:d6:6e:5d:24:2d:61:b2: ef:2c:fe:0f:d7:10:7c:e2:32:9c:f2:32:e4:75:55: 88:86:5b:10:be:34:77:06:b5:98:0b:ae:55:96:c2: ad:69:ac:59:67:7e:da:1b:c9:52:9e:dd:3b:a3:6c: 1e:6e:47:95:ad:84:e8:8b:cd:a3:42:3e:a6:fe:8d: f7:39:d5:0a:23:cf:dc:b8:bc:bf:2f:47:b4:65:b0: 61:9e:92:47:93:dc:00:5c:84:07:c3:3e:ee:b6:52: a5:45:79:2b:3c:4b:91:88:1c:99:12:c5:b7:96:c6: ed:8f:05:b5:0c:fb:7b:af:01:a2:6f:7e:52:2f:86: d3:be:9d:a3:39:75:ff:a2:15:10:c0:be:fc:81:07: 3d:52:c2:85:c6:00:78:58:e7:2f:43:17:7f:44:57: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:57:CC:D0:0E:7A:8D:03:D4:ED:BD:D3:97:CA:93:41:1B:CC:0F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:2b:a4:cd:51:a4:78:2d:84:65:58:da:c6:b4:08:62:26:d2: 9b:d6:08:ad:c0:a6:23:f8:a1:48:b7:3b:24:90:99:9a:0f:58: 82:99:26:84:e1:1e:6d:01:1b:1a:f1:c3:e7:e1:c7:84:35:a5: f3:a8:85:7b:1e:d0:6f:ba:4b:f7:16:10:b4:e8:0a:87:de:1f: 25:08:a9:e8:d9:00:04:06:78:ac:74:a2:bb:71:0e:bd:4b:72: 85:ea:2d:eb:60:36:be:31:15:63:8b:bd:60:85:3a:97:1e:37: ec:66:88:32:8a:84:25:6b:17:5d:f7:7d:36:64:2e:2b:ea:63: 8d:ed:ec:b3:cd:81:81:f4:be:03:b9:00:da:4a:91:c2:e4:0d: 76:5d:a0:b2:a6:8f:95:eb:61:dc:9c:bc:38:d9:06:ac:bc:93: bd:d9:19:c7:58:d8:4a:a4:0e:cb:22:12:54:c4:77:fa:de:33: 49:3e:b7:27:e4:9a:e0:f2:c5:35:a3:cd:75:cd:23:ab:d5:22: 94:b6:87:a8:23:b1:34:2a:f0:11:e3:f2:a4:67:d8:63:05:55: 65:21:3c:9d:c5:b4:1a:94:4b:fa:3b:f0:20:1f:4c:6a:0b:e4: 60:e4:99:0c:bb:3e:99:01:e1:a6:f8:b2:8c:87:5c:30:00:c2: 94:29:a9:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHYdVio7KWB/LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk M2U2YmFmYzctMDhmNi00OGNlLTlhNDgtYzlhNGY5ZTFkNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhb/sE8TnVOcV7R9l15ANP50H2TJGcirWuVR s55UVb5T3s1vBbWUcTPdHevrk+0f3UoVtt2gRl38HOjS9UsmawbjIC6rM6NB5ltq ZxJ1qHs3DYAhpQrZeEsVjpKg+RHsetZuXSQtYbLvLP4P1xB84jKc8jLkdVWIhlsQ vjR3BrWYC65VlsKtaaxZZ37aG8lSnt07o2webkeVrYToi82jQj6m/o33OdUKI8/c uLy/L0e0ZbBhnpJHk9wAXIQHwz7utlKlRXkrPEuRiByZEsW3lsbtjwW1DPt7rwGi b35SL4bTvp2jOXX/ohUQwL78gQc9UsKFxgB4WOcvQxd/RFdPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxXzNAOeo0D1O2905fKk0EbzA/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2ZjNzBhZjMtMmU5NC0z OWI0LTk3MTMtMjlhMGJlYmNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQrpM1RpHgthGVY2sa0CGIm0pvWCK3ApiP4oUi3OySQmZoPWIKZJoTh Hm0BGxrxw+fhx4Q1pfOohXse0G+6S/cWELToCofeHyUIqejZAAQGeKx0ortxDr1L coXqLetgNr4xFWOLvWCFOpceN+xmiDKKhCVrF133fTZkLivqY43t7LPNgYH0vgO5 ANpKkcLkDXZdoLKmj5XrYdycvDjZBqy8k73ZGcdY2EqkDssiElTEd/reM0k+tyfk muDyxTWjzXXNI6vVIpS2h6gjsTQq8BHj8qRn2GMFVWUhPJ3FtBqUS/o78CAfTGoL 5GDkmQy7PpkB4ab4soyHXDAAwpQpqdo= -----END CERTIFICATE-----Generated at Wed Jul 9 17:33:13 2025 by rpki-client