$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4a50e00e-5348-3e74-b79d-2a8ca7968b69.roa File: 4a50e00e-5348-3e74-b79d-2a8ca7968b69.roa (raw, json) Hash identifier: q5u1peSgcMoX017EwvdkuJTcJBGZWPya3CXPOVti2VY= Subject key identifier: CB:F8:4C:1E:2B:5F:61:38:E0:7B:C2:88:D7:67:2F:5C:E8:86:81:F0 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A9FFB8ACE0F6FFC1594966D80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4a50e00e-5348-3e74-b79d-2a8ca7968b69.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 31898 IP address blocks: 161.69.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:8a:ce:0f:6f:fc:15:94:96:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=e3dfe912-a9a3-4a8c-b976-4f3996db5b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:af:14:31:99:7b:49:87:9b:ee:ad:94:96: ca:a7:30:d2:47:a1:3c:68:59:d1:db:09:e6:1c:05: 3e:21:07:f0:c6:4d:6f:49:5e:19:34:9e:67:59:aa: 10:4a:17:eb:92:df:c6:1b:4d:5f:09:ea:68:e8:67: f2:93:3a:0e:fa:8a:ac:6c:9f:a2:3d:e9:a7:25:3b: 72:10:72:1c:34:91:c4:11:3d:bb:8d:57:44:b9:2e: 9e:10:69:e4:6c:b2:c2:0c:55:9e:f9:8d:e5:62:70: fd:72:fb:81:d9:38:fd:40:cc:e8:9c:62:4b:6c:d6: 7f:82:74:a8:1f:60:bb:36:0b:69:94:2b:13:00:88: 30:81:33:d2:94:6f:b0:12:49:80:77:38:ec:a0:81: 66:b9:7e:87:a7:c3:ab:01:c2:c3:2f:45:8b:04:36: f8:8b:f6:4c:40:53:54:e7:17:c7:42:a5:90:a2:45: c2:da:84:67:47:44:e9:b6:e1:f1:48:36:99:61:2a: e0:89:36:a0:6d:a1:08:44:1c:e6:6b:06:4f:fe:bc: 6a:ce:b5:4d:5a:7f:19:90:eb:a5:ab:95:b3:49:66: d0:30:61:0f:b0:13:66:fc:a0:b6:b9:56:8e:78:33: 6f:38:71:89:80:79:76:1c:48:13:19:f5:67:53:61: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F8:4C:1E:2B:5F:61:38:E0:7B:C2:88:D7:67:2F:5C:E8:86:81:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4a50e00e-5348-3e74-b79d-2a8ca7968b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9a:4f:45:3c:79:b5:c0:46:ae:5a:dd:52:59:63:11:41:ca: bc:f3:64:10:31:5d:fb:0f:ad:47:d1:77:b9:b8:b6:81:fa:99: 5c:17:bb:c9:a9:a1:77:83:8d:c8:37:39:82:b7:93:97:39:a0: 27:33:34:5a:ad:70:7b:3c:8c:c8:50:8e:00:5d:4e:77:81:dd: cc:d8:eb:14:f5:74:91:69:69:50:c3:bb:1f:f5:f7:bb:e6:60: 31:d8:26:0f:97:f5:b1:b7:73:7e:25:e2:11:53:ec:9b:47:0c: 15:6e:9f:af:71:d0:7a:38:4e:2b:4f:e1:8d:40:ca:ad:9f:f5: 1c:e6:c2:15:9c:cf:b1:d5:14:c0:a7:1c:00:bd:46:56:4f:62: 92:d5:fe:9b:7c:78:99:de:bb:b6:87:05:09:1e:be:a9:92:a6: ac:a6:63:0a:22:93:ee:7c:af:ca:c2:89:57:e7:ab:76:bf:c1: 46:a3:dd:34:16:4e:24:75:02:14:3f:83:bb:d9:9f:43:fb:dd: 5a:0e:f7:e0:3a:4b:6a:3b:7c:61:8c:ff:68:86:ce:0c:04:55: ea:a5:7a:1f:a4:99:5f:ee:64:eb:00:3c:62:f6:ce:35:8a:1d: 6c:66:22:b5:74:f3:93:6a:b9:72:4a:d4:3f:69:93:50:df:c7: c5:aa:4d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+4rOD2/8FZSWbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZTNkZmU5MTItYTlhMy00YThjLWI5NzYtNGYzOTk2ZGI1YjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicivFDGZe0mHm+6tlJbKpzDSR6E8aFnR2wnm HAU+IQfwxk1vSV4ZNJ5nWaoQShfrkt/GG01fCepo6GfykzoO+oqsbJ+iPemnJTty EHIcNJHEET27jVdEuS6eEGnkbLLCDFWe+Y3lYnD9cvuB2Tj9QMzonGJLbNZ/gnSo H2C7NgtplCsTAIgwgTPSlG+wEkmAdzjsoIFmuX6Hp8OrAcLDL0WLBDb4i/ZMQFNU 5xfHQqWQokXC2oRnR0TptuHxSDaZYSrgiTagbaEIRBzmawZP/rxqzrVNWn8ZkOul q5WzSWbQMGEPsBNm/KC2uVaOeDNvOHGJgHl2HEgTGfVnU2EBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv4TB4rX2E44HvCiNdnL1zohoHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGE1MGUwMGUtNTM0OC0z ZTc0LWI3OWQtMmE4Y2E3OTY4YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqaT0U8ebXARq5a3VJZYxFByrzzZBAxXfsPrUfRd7m4toH6mVwXu8mp oXeDjcg3OYK3k5c5oCczNFqtcHs8jMhQjgBdTneB3czY6xT1dJFpaVDDux/197vm YDHYJg+X9bG3c34l4hFT7JtHDBVun69x0Ho4TitP4Y1Ayq2f9RzmwhWcz7HVFMCn HAC9RlZPYpLV/pt8eJneu7aHBQkevqmSpqymYwoik+58r8rCiVfnq3a/wUaj3TQW TiR1AhQ/g7vZn0P73VoO9+A6S2o7fGGM/2iGzgwEVeqleh+kmV/uZOsAPGL2zjWK HWxmIrV085NquXJK1D9pk1Dfx8WqTXU= -----END CERTIFICATE-----Generated at Tue Aug 5 16:52:58 2025 by rpki-client