$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b7766c9-4379-37b8-b743-c0485769d883.roa File: 1b7766c9-4379-37b8-b743-c0485769d883.roa (raw, json) Hash identifier: XDC07sHDTMxlh8BURtGt3QP2VuQ7G5+dwfY0toaSowo= Subject key identifier: B0:4F:71:99:F1:46:DA:C8:A7:10:30:7F:30:65:F3:FB:8D:EE:A0:07 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584ADDE419B39FF174FA38A14E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b7766c9-4379-37b8-b743-c0485769d883.roa Signing time: Fri 15 Aug 2025 17:14:00 +0000 ROA not before: Fri 15 Aug 2025 17:14:00 +0000 ROA not after: Thu 13 Nov 2025 18:14:00 +0000 asID: 31898 IP address blocks: 161.33.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:e4:19:b3:9f:f1:74:fa:38:a1:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 15 17:14:00 2025 GMT Not After : Nov 13 18:14:00 2025 GMT Subject: CN=4f72a823-cd22-4419-ac33-08c45c33d11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:27:63:00:39:27:74:40:a8:28:fd:9e:40:14: f5:d7:52:52:97:19:85:f9:7f:3c:b5:6f:b2:95:ef: 5e:58:03:e9:96:32:b2:18:18:19:69:ee:4a:ee:07: 3f:1c:81:44:43:52:0d:8a:b4:c6:55:b4:ad:b1:73: b5:1f:da:cb:95:c1:f1:8c:ca:9b:36:fa:6d:40:d4: 7b:3b:4a:13:2e:7d:9f:72:d6:6b:6c:ec:86:e4:9b: a6:85:58:fd:f7:12:c0:49:97:06:5d:89:a0:5b:78: ef:55:45:b2:35:a6:80:9a:3f:26:33:23:36:b8:10: d0:d0:aa:af:d4:28:ac:41:37:b0:60:fe:7b:1c:a7: 11:3c:09:91:8a:87:b6:12:15:16:12:3a:2f:f2:cf: ed:5c:8b:ab:8b:f2:86:f1:11:b5:55:0d:24:4c:86: 51:bc:65:6b:4f:86:93:36:4c:38:78:b3:18:f3:9c: 68:8b:25:32:fe:68:e0:7c:03:28:0e:dd:4c:9b:db: be:17:8a:ca:c4:e1:0a:04:9e:b0:83:ea:79:de:86: 7b:48:c2:8d:f9:4a:ab:c7:71:18:0a:0b:10:5b:83: 33:a2:70:19:75:ce:24:4b:bb:41:38:cc:9a:a4:3d: ce:c5:bc:62:2f:0b:0a:fd:40:eb:fc:81:d5:49:ee: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4F:71:99:F1:46:DA:C8:A7:10:30:7F:30:65:F3:FB:8D:EE:A0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b7766c9-4379-37b8-b743-c0485769d883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4f:d2:7f:cc:16:88:31:e9:b6:05:22:12:92:7b:49:54:3c: 19:26:89:d8:f5:85:b4:cd:7d:b7:48:e6:11:84:9f:1a:5c:36: 27:38:5a:b0:6e:41:5c:bf:4e:30:10:5d:ce:bb:b0:b6:f8:09: 4b:43:c2:1f:43:00:83:23:f2:24:c7:4b:a4:0f:a1:e6:a5:37: 14:7e:62:91:77:91:c0:4d:4f:82:56:c1:f8:dc:74:5c:88:34: 3e:4a:18:47:87:fe:62:6a:52:b7:60:06:ac:5d:ba:52:79:d1: 05:cc:e7:bc:6a:57:ab:64:f0:66:a8:e2:5a:b4:0f:4e:31:20: 78:a8:f9:79:d2:44:35:ab:c4:94:ac:39:08:3b:20:98:c8:8b: a7:a9:b6:43:ae:bb:c9:0e:16:81:b9:43:3a:3a:8b:fc:43:2f: ed:a8:86:e9:0f:68:39:8d:77:1a:59:72:f3:68:ab:95:de:f6: c4:58:97:72:82:e5:f2:01:c5:8b:d6:07:a6:d1:69:05:5e:b1: a1:50:e2:89:90:b0:98:d1:7e:2e:da:b5:53:e3:16:7d:e7:18: d0:9b:97:82:86:c9:62:86:7f:78:89:ba:f2:5a:83:b3:eb:8d: 5e:2c:3f:f5:60:9d:9d:68:d3:fd:d7:0d:61:e8:9b:b6:2b:9e: 3f:b8:2d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErd5Bmzn/F0+jihToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgxNTE3MTQwMFoXDTI1MTExMzE4MTQwMFowLzEtMCsGA1UEAxMk NGY3MmE4MjMtY2QyMi00NDE5LWFjMzMtMDhjNDVjMzNkMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjidjADkndECoKP2eQBT111JSlxmF+X88tW+y le9eWAPpljKyGBgZae5K7gc/HIFEQ1INirTGVbStsXO1H9rLlcHxjMqbNvptQNR7 O0oTLn2fctZrbOyG5JumhVj99xLASZcGXYmgW3jvVUWyNaaAmj8mMyM2uBDQ0Kqv 1CisQTewYP57HKcRPAmRioe2EhUWEjov8s/tXIuri/KG8RG1VQ0kTIZRvGVrT4aT Nkw4eLMY85xoiyUy/mjgfAMoDt1Mm9u+F4rKxOEKBJ6wg+p53oZ7SMKN+Uqrx3EY CgsQW4MzonAZdc4kS7tBOMyapD3OxbxiLwsK/UDr/IHVSe78OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBPcZnxRtrIpxAwfzBl8/uN7qAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWI3NzY2YzktNDM3OS0z N2I4LWI3NDMtYzA0ODU3NjlkODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClP0n/MFogx6bYFIhKSe0lUPBkmidj1hbTNfbdI5hGEnxpcNic4WrBu QVy/TjAQXc67sLb4CUtDwh9DAIMj8iTHS6QPoealNxR+YpF3kcBNT4JWwfjcdFyI ND5KGEeH/mJqUrdgBqxdulJ50QXM57xqV6tk8Gao4lq0D04xIHio+XnSRDWrxJSs OQg7IJjIi6eptkOuu8kOFoG5Qzo6i/xDL+2ohukPaDmNdxpZcvNoq5Xe9sRYl3KC 5fIBxYvWB6bRaQVesaFQ4omQsJjRfi7atVPjFn3nGNCbl4KGyWKGf3iJuvJag7Pr jV4sP/VgnZ1o0/3XDWHom7Yrnj+4LQo= -----END CERTIFICATE-----Generated at Wed Aug 20 03:34:03 2025 by rpki-client