$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa File: eb949189-8271-3567-ac4e-0031c3fec821.roa (raw, json) Hash identifier: paFiSY52fo/Zg6PuZKAyZaRmw/zIQTFqvig3T5Nwd7o= Subject key identifier: DF:E5:C1:B5:11:A7:96:F6:FE:3A:CC:78:1A:80:DB:54:26:07:C8:7D Certificate issuer: /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Certificate serial: 010D0C9F4328584A96368C37E14C987138535000 Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 398697 IP address blocks: 161.199.203.0/24 maxlen: 24 161.199.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:8c:37:e1:4c:98:71:38:53:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=539c65c9-2688-4368-af81-0c60f67d3cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:f2:3f:c6:ee:d7:33:3c:c2:34:b3:79:09: 8e:69:ae:5c:02:97:72:02:1d:d7:86:81:62:60:bc: b7:9c:ee:85:71:24:f8:4b:7e:a7:ed:c6:30:6f:47: 13:60:62:6c:31:98:bd:68:a7:b0:35:7d:28:cc:d5: 3d:ee:f2:62:fb:14:3c:61:58:26:64:51:9e:d0:09: 94:c8:80:ba:dd:da:e3:b6:38:94:30:ae:6b:59:1b: 99:60:fd:aa:f9:7a:a1:62:f4:ca:62:9f:b1:cc:35: 02:5f:c1:67:a6:7f:75:50:9d:f9:56:ed:eb:6e:71: 85:2e:92:db:fc:e8:d6:eb:7e:6a:4e:e1:fa:25:c0: 60:8b:c7:83:d4:26:7b:05:96:e5:73:4a:42:ae:61: eb:ab:a0:56:c2:65:f9:84:f8:23:78:58:94:73:18: 89:39:c0:84:e9:10:b4:cb:8a:b9:e8:30:a2:4e:fc: 15:4f:06:c8:fc:e8:ff:9e:75:46:d1:1a:41:bf:3a: 32:39:63:27:4f:97:d3:bf:4a:6b:aa:b9:9c:24:19: fa:3c:0d:5d:45:29:6b:30:e3:03:0f:f6:37:d5:2c: f5:3b:a8:ce:04:ae:cf:c4:52:1c:9a:97:19:09:7e: 0a:f8:63:0a:fd:09:3e:45:a1:74:84:3b:a4:12:62: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E5:C1:B5:11:A7:96:F6:FE:3A:CC:78:1A:80:DB:54:26:07:C8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/eb949189-8271-3567-ac4e-0031c3fec821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl X509v3 Authority Key Identifier: keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer sbgp-ipAddrBlock: critical IPv4: 161.199.203.0/24 161.199.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6a:6d:e1:76:35:b2:0c:54:86:4b:79:75:75:9f:51:e1:87: 9c:e7:52:8b:cb:4d:40:08:bf:d6:c2:59:70:e3:77:06:a4:8b: 79:87:70:92:fb:e2:bf:b2:97:47:20:ef:e7:59:7d:07:13:66: d1:8e:4f:5f:68:a0:22:9c:fe:c7:f0:82:5a:1a:ed:39:52:14: 09:55:32:d5:0d:98:19:d2:5f:ac:53:61:97:9e:ea:4e:33:1b: 90:ea:bd:b1:7e:e6:e9:19:53:f7:ad:9d:4a:c8:4e:c1:35:fa: 07:0a:53:ef:bd:06:6a:82:4c:87:fe:53:a7:6b:e9:a2:c5:ab: 90:d8:96:66:a4:5e:44:58:13:89:21:38:c2:dc:e6:c3:6a:c6: 66:f8:04:77:9d:55:44:12:07:96:1c:81:cb:76:59:41:16:a6: 35:ca:8f:bf:b4:8d:01:bd:33:b6:85:59:87:8c:c7:42:a1:cb: a5:06:ba:49:03:04:b2:84:ae:a1:fb:a1:82:61:10:9c:38:15: 9d:4a:9c:4b:4e:b9:94:e7:87:8a:f8:f0:2e:87:9f:c2:44:bd: 24:2a:45:0f:10:2b:8c:f6:9e:58:59:4c:f3:7e:ac:45:e7:d4: 23:eb:9b:dc:3f:59:55:70:c1:ee:4f:d3:6e:bf:91:29:73:2a: 4c:31:eb:85 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqWNow34UyYcThTUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MDI3ZTktMDUxNy00Nzc1LWE2YzQtMzU1MjJlNjVl NGFkMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NTM5YzY1YzktMjY4OC00MzY4LWFmODEtMGM2MGY2N2QzY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFzyP8bu1zM8wjSzeQmOaa5cApdyAh3XhoFi YLy3nO6FcST4S36n7cYwb0cTYGJsMZi9aKewNX0ozNU97vJi+xQ8YVgmZFGe0AmU yIC63drjtjiUMK5rWRuZYP2q+XqhYvTKYp+xzDUCX8Fnpn91UJ35Vu3rbnGFLpLb /OjW635qTuH6JcBgi8eD1CZ7BZblc0pCrmHrq6BWwmX5hPgjeFiUcxiJOcCE6RC0 y4q56DCiTvwVTwbI/Oj/nnVG0RpBvzoyOWMnT5fTv0prqrmcJBn6PA1dRSlrMOMD D/Y31Sz1O6jOBK7PxFIcmpcZCX4K+GMK/Qk+RaF0hDukEmIohwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN/lwbURp5b2/jrMeBqA21QmB8h9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Yjkw MjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2NWU0YWQvZWI5NDkxODktODI3MS0z NTY3LWFjNGUtMDAzMWMzZmVjODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGI5MDI3ZTktMDUxNy00Nzc1LWE2 YzQtMzU1MjJlNjVlNGFkLzRiOTAyN2U5LTA1MTctNDc3NS1hNmM0LTM1NTIyZTY1 ZTRhZC5jcmwwHwYDVR0jBBgwFoAUaAaXzMELbzFO2zE1+i0H8zBpTwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUy MmU2NWU0YWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAocfLAwQA ocfmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFJqbeF2NbIMVIZLeXV1n1Hhh5znUovLTUAIv9bCWXDjdwak i3mHcJL74r+yl0cg7+dZfQcTZtGOT19ooCKc/sfwgloa7TlSFAlVMtUNmBnSX6xT YZee6k4zG5DqvbF+5ukZU/etnUrITsE1+gcKU++9BmqCTIf+U6dr6aLFq5DYlmak XkRYE4khOMLc5sNqxmb4BHedVUQSB5Ycgct2WUEWpjXKj7+0jQG9M7aFWYeMx0Kh y6UGukkDBLKErqH7oYJhEJw4FZ1KnEtOuZTnh4r48C6Hn8JEvSQqRQ8QK4z2nlhZ TPN+rEXn1CPrm9w/WVVwwe5P026/kSlzKkwx64U= -----END CERTIFICATE-----Generated at Tue Aug 5 17:20:11 2025 by rpki-client