$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa File: e1e365e0-1156-39fe-8e92-6f88f7279acd.roa (raw, json) Hash identifier: w24oBGiH+PF4HutDw89l9e5ZRDf49vUz2U3YaYhCzCI= Subject key identifier: 1E:5F:88:75:FA:8C:EB:03:24:97:20:EC:C0:23:94:4C:92:2A:FA:A7 Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F4328584AC5AB872ACF79EDE9189E5F30 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 394625 IP address blocks: 161.129.136.0/24 maxlen: 24 161.129.137.0/24 maxlen: 24 161.129.138.0/24 maxlen: 24 161.129.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:87:2a:cf:79:ed:e9:18:9e:5f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=be589fa0-2b6d-4bb6-8d00-cdfbc425fbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:59:c2:ae:d6:57:ff:84:b3:7a:51:4b:5f: bf:5d:b6:67:06:bc:9c:6a:71:58:53:bc:44:07:42: 7e:6c:cd:22:16:ef:1e:3a:6d:ef:b1:9a:b2:5d:a8: 24:63:1f:87:39:8d:f1:72:f9:80:5d:b2:44:a7:e9: 37:40:f3:f4:09:aa:b0:8c:43:19:d6:a9:f2:fb:ae: d4:0a:cf:83:39:f4:38:9a:26:9b:52:de:2f:0c:e6: e5:c6:01:8b:7c:33:49:1e:90:3c:76:78:0d:3b:24: 96:c0:7d:6c:9f:08:df:0f:d6:71:50:31:75:86:3b: e1:fb:f1:e7:27:9e:9a:ca:8f:21:b3:88:a8:96:e7: d1:05:06:f3:86:84:20:52:60:cc:f2:b0:3e:d0:2c: 7a:ca:d5:3f:cc:b3:bb:57:79:ba:da:d0:ac:69:b5: ec:eb:4c:cb:77:d7:04:f4:1a:8d:bc:ca:22:71:e0: b0:ba:6f:3d:a7:9a:02:a5:84:2d:87:35:5c:52:5e: c9:a8:92:68:1a:d7:ff:d0:b1:a2:30:98:0c:74:02: 12:98:9a:1a:6c:08:f9:51:86:27:79:16:61:a4:7b: 78:d5:60:b1:70:f5:7d:0b:c4:d4:7c:95:f1:b3:03: c7:a3:2f:df:d0:d1:0d:74:1f:cd:6b:fc:5f:11:68: a5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:88:75:FA:8C:EB:03:24:97:20:EC:C0:23:94:4C:92:2A:FA:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/e1e365e0-1156-39fe-8e92-6f88f7279acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 161.129.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0d:5f:8d:1d:0b:8f:ea:c0:09:83:ed:36:94:b7:e0:60:2d: 51:bc:85:36:59:32:e2:68:50:ea:60:64:b4:21:46:ec:0b:75: d1:32:94:d1:0b:77:5b:e8:f6:c0:b4:8c:8b:f9:b4:cf:48:d9: 55:ab:09:c6:31:7b:ed:63:07:9e:34:49:e1:c8:1c:e3:d2:1e: b2:e6:b9:10:b6:f5:01:0e:d2:37:c9:5c:a9:16:7e:db:38:7b: 0f:b9:f1:15:2a:61:9b:ac:9b:a9:5f:2d:dd:63:9e:5f:d9:0f: 6a:25:a1:de:7b:f4:ad:cd:d9:48:72:8d:8b:59:4c:42:44:71: 99:b8:f0:f5:6e:ae:f0:4f:48:37:0b:db:d6:4f:b6:95:b8:40: 11:b4:69:e0:ce:35:8e:26:b8:27:00:b7:94:e6:ad:bd:c0:e1: 54:11:5b:de:39:52:94:04:5e:f7:37:f2:18:06:de:96:d3:e7: 77:be:08:9b:05:ff:ee:57:9f:08:bd:26:18:17:63:cd:d4:c0: b2:4e:50:c9:7b:1b:a9:c5:73:5e:7b:b2:88:7f:88:2d:4a:07: d9:1c:ae:c0:4b:aa:7c:86:ee:ed:1f:f3:d3:2d:d7:59:bb:04: e6:3e:6c:a4:68:c1:1e:63:8a:8f:af:19:3a:9e:45:a2:ad:5c: ef:5f:fe:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4cqz3nt6RieXzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk YmU1ODlmYTAtMmI2ZC00YmI2LThkMDAtY2RmYmM0MjVmYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggZZwq7WV/+Es3pRS1+/XbZnBrycanFYU7xE B0J+bM0iFu8eOm3vsZqyXagkYx+HOY3xcvmAXbJEp+k3QPP0CaqwjEMZ1qny+67U Cs+DOfQ4miabUt4vDOblxgGLfDNJHpA8dngNOySWwH1snwjfD9ZxUDF1hjvh+/Hn J56ayo8hs4iolufRBQbzhoQgUmDM8rA+0Cx6ytU/zLO7V3m62tCsabXs60zLd9cE 9BqNvMoiceCwum89p5oCpYQthzVcUl7JqJJoGtf/0LGiMJgMdAISmJoabAj5UYYn eRZhpHt41WCxcPV9C8TUfJXxswPHoy/f0NENdB/Na/xfEWilVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5fiHX6jOsDJJcg7MAjlEySKvqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZTFlMzY1ZTAtMTE1Ni0z OWZlLThlOTItNmY4OGY3Mjc5YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoYGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkNX40dC4/qwAmD7TaUt+BgLVG8hTZZMuJoUOpgZLQhRuwLddEylNEL d1vo9sC0jIv5tM9I2VWrCcYxe+1jB540SeHIHOPSHrLmuRC29QEO0jfJXKkWfts4 ew+58RUqYZusm6lfLd1jnl/ZD2olod579K3N2UhyjYtZTEJEcZm48PVurvBPSDcL 29ZPtpW4QBG0aeDONY4muCcAt5Tmrb3A4VQRW945UpQEXvc38hgG3pbT53e+CJsF /+5Xnwi9JhgXY83UwLJOUMl7G6nFc157soh/iC1KB9kcrsBLqnyG7u0f89Mt11m7 BOY+bKRowR5jio+vGTqeRaKtXO9f/kc= -----END CERTIFICATE-----Generated at Fri Aug 8 10:21:41 2025 by rpki-client