$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa File: dc656332-f87a-3041-bd27-3d6a301f7e5c.roa (raw, json) Hash identifier: bcOrorXTICLPTOGyFWXhigX8aY0BQoO5AN4Y8l6ilDQ= Subject key identifier: 22:E8:04:39:CA:D9:89:2A:83:03:18:C4:5D:D0:B9:D1:FC:5D:72:04 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584A8C70C0CF8BCEF693A8719C80 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 153371 IP address blocks: 161.129.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:c0:cf:8b:ce:f6:93:a8:71:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=68d9e9ec-0440-46c9-a10d-02ac0f1c1e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:00:36:17:b7:49:ad:8e:60:23:e4:e3:9c: c2:7c:30:16:f9:00:dc:a8:e4:9b:4f:f2:f1:52:ae: 14:1d:13:9d:0c:be:b7:93:ea:7b:df:87:83:0f:25: 67:cd:ac:52:d8:23:ba:a9:16:e2:ab:5f:dd:8f:84: a2:a8:08:76:62:6f:08:b9:e6:d6:a1:4c:c8:f9:70: b9:e3:c6:92:1f:6f:19:cb:0e:32:6b:d5:c2:47:1c: 99:b3:bd:42:44:2d:a0:7a:d0:36:3c:e3:13:8c:d5: 4c:9a:08:59:48:4d:a1:50:5f:b7:db:dd:8a:5f:18: d4:2f:a9:37:7b:8f:70:dc:0f:58:7d:1b:96:35:72: 9b:9e:56:7f:6c:6e:03:37:10:43:59:e4:06:dc:41: 7d:cf:aa:9a:92:19:c2:98:2e:5e:9e:bb:52:38:24: 20:94:a7:48:f2:22:d4:82:67:99:b4:05:dc:35:d3: ae:11:ef:0c:64:b9:c0:27:d9:63:ae:a8:b9:c5:34: c5:2d:f1:30:ee:c9:4f:93:1a:00:5a:9c:35:6d:f0: 43:f5:8b:e1:36:84:54:51:e8:2f:b2:55:74:6c:66: 1b:63:04:95:89:7d:ad:b3:16:31:e9:be:92:74:0e: 9f:bf:c1:c3:bc:4b:a7:46:b5:ab:b6:52:4e:f6:85: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E8:04:39:CA:D9:89:2A:83:03:18:C4:5D:D0:B9:D1:FC:5D:72:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:63:b4:e9:52:1a:b1:12:b9:d8:d7:a5:f9:6e:34:ef:05:6f: f6:80:67:91:fe:8e:a2:ae:56:14:86:a5:3e:26:95:b8:5f:6c: a9:71:c7:0c:ca:d3:27:4f:23:da:68:e1:23:0d:34:4a:db:b7: 5b:5c:66:af:df:e0:4a:c0:82:19:cc:47:0a:f4:37:dd:71:19: f4:16:af:1a:fc:6b:3f:43:74:46:1c:95:17:c5:ba:81:ba:31: 1b:12:02:1d:99:54:0d:7c:c6:df:ce:e5:66:93:6b:38:9a:d5: 42:43:c7:5d:73:1b:fc:62:52:eb:a9:cb:b3:c4:95:f3:a0:e7: 34:78:42:d6:94:d8:64:c8:6f:11:ce:18:cb:bb:b9:47:e4:ab: 90:b8:99:43:61:78:fc:a3:0d:57:54:67:a6:2f:08:df:47:33: 71:a0:32:92:41:66:81:50:b8:69:98:a5:46:fd:cd:82:08:60: 6e:f6:22:cc:d1:f4:aa:6e:37:39:c0:f9:2f:51:a2:28:e0:7e: 34:d2:67:07:95:8a:79:22:40:68:06:7b:da:b0:36:b7:5e:c7: 2d:eb:2a:e8:9c:da:d4:1c:63:c9:94:c4:a2:fc:6e:75:57:65: c5:86:da:a1:bc:48:77:3f:e8:3b:8f:28:6d:c5:5d:7e:9a:6f: 63:86:51:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMDPi872k6hxnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NjhkOWU5ZWMtMDQ0MC00NmM5LWExMGQtMDJhYzBmMWMxZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRIANhe3Sa2OYCPk45zCfDAW+QDcqOSbT/Lx Uq4UHROdDL63k+p734eDDyVnzaxS2CO6qRbiq1/dj4SiqAh2Ym8IuebWoUzI+XC5 48aSH28Zyw4ya9XCRxyZs71CRC2getA2POMTjNVMmghZSE2hUF+3292KXxjUL6k3 e49w3A9YfRuWNXKbnlZ/bG4DNxBDWeQG3EF9z6qakhnCmC5enrtSOCQglKdI8iLU gmeZtAXcNdOuEe8MZLnAJ9ljrqi5xTTFLfEw7slPkxoAWpw1bfBD9YvhNoRUUegv slV0bGYbYwSViX2tsxYx6b6SdA6fv8HDvEunRrWrtlJO9oUJ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLoBDnK2YkqgwMYxF3QudH8XXIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZGM2NTYzMzItZjg3YS0z MDQxLWJkMjctM2Q2YTMwMWY3ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5jtOlSGrESudjXpfluNO8Fb/aAZ5H+jqKuVhSGpT4mlbhfbKlxxwzK 0ydPI9po4SMNNErbt1tcZq/f4ErAghnMRwr0N91xGfQWrxr8az9DdEYclRfFuoG6 MRsSAh2ZVA18xt/O5WaTazia1UJDx11zG/xiUuupy7PElfOg5zR4QtaU2GTIbxHO GMu7uUfkq5C4mUNhePyjDVdUZ6YvCN9HM3GgMpJBZoFQuGmYpUb9zYIIYG72IszR 9KpuNznA+S9RoijgfjTSZweVinkiQGgGe9qwNrdexy3rKuic2tQcY8mUxKL8bnVX ZcWG2qG8SHc/6DuPKG3FXX6ab2OGUcM= -----END CERTIFICATE-----Generated at Thu Aug 7 14:49:13 2025 by rpki-client