$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa File: 72bb6754-f471-332a-a025-ab3fa6d56c90.roa (raw, json) Hash identifier: nRYKq7oeeutgNTmDoEp0l5bN8EnfBxy/N6RyZ5OvLUQ= Subject key identifier: 01:EC:F5:EE:1C:84:EF:D6:82:A0:F9:9F:0B:BC:09:FE:A4:B7:03:5B Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A9FFB8AAF23B1DFA111BBAE80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 203724 IP address blocks: 161.69.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:8a:af:23:b1:df:a1:11:bb:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=4dfd9f11-b108-4d02-a25d-4c930567d5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:76:ad:04:d6:60:4f:26:4e:3c:42:63:90:6c: c0:79:14:7b:1a:52:bb:7f:ad:f4:72:30:2e:dc:34: 00:17:6c:3d:6d:55:ea:ff:75:d7:36:d0:8d:b4:6c: 1e:20:88:eb:fa:f2:38:60:da:a2:a0:8a:09:4f:c6: 24:a4:1b:51:6a:b4:9c:3a:69:3e:c3:8c:88:d1:93: 41:42:1f:7a:cd:76:a5:63:3e:3c:f3:ed:66:89:93: b0:15:82:fd:fc:d9:16:b9:8b:06:19:f9:8c:de:d9: 68:8f:c1:e6:2b:2c:1e:29:bb:e8:20:7a:c4:96:71: 79:74:bd:03:ed:33:f0:3a:4b:8c:7c:52:ef:8e:68: c9:ca:e1:aa:6f:70:2f:3c:40:bb:f4:5c:83:ae:ed: 30:b0:f5:ee:f8:79:95:52:e4:6e:51:15:6a:92:6b: 4c:71:6e:a4:62:48:a0:42:52:d6:17:46:21:db:b5: c1:33:de:b5:82:59:f3:ee:04:ed:fa:c1:5c:0f:16: 36:30:af:5f:4a:7a:ba:75:b1:a5:8f:38:79:63:fe: 4b:d2:21:bb:28:d2:ff:b2:de:f1:10:5a:63:56:a6: a0:34:7b:ba:61:bc:1b:e8:1f:ef:fc:95:4f:ba:d2: cd:b9:22:17:0e:26:bb:06:a7:2b:e4:32:b5:b1:29: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EC:F5:EE:1C:84:EF:D6:82:A0:F9:9F:0B:BC:09:FE:A4:B7:03:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:27:2e:7b:3f:1c:96:e6:78:02:d3:0f:c4:58:5a:1f:af:39: 50:46:35:b4:fd:c2:b1:a2:aa:20:b3:6c:1c:22:de:f4:73:92: 09:41:12:12:9d:c6:90:29:28:e0:68:d7:01:e0:68:1b:c9:f3: 68:c4:2f:f2:86:49:d2:dc:54:8a:a7:69:5e:f8:f6:98:5d:a9: 0e:a8:c4:dc:30:06:3c:ea:90:5e:8a:dc:2e:7a:45:34:60:47: a6:9d:3e:d5:bc:28:b8:98:0d:45:56:40:76:4a:00:53:92:17: f0:8d:66:f8:31:ba:80:a6:85:60:43:a2:2c:8b:d1:33:6a:b9: 4c:93:9b:95:ee:40:76:5c:20:09:bb:ac:86:ba:88:1b:12:e0: ef:f0:89:8f:15:b1:00:38:dd:55:ac:89:fc:36:ce:93:3a:19: 0c:7c:bf:df:40:c9:ca:2e:bf:da:2d:fb:b0:2a:11:bd:82:aa: 8a:14:42:06:93:a7:92:26:93:8e:2d:0c:ca:e6:76:4b:7f:0d: ef:19:8a:6b:2a:05:c0:89:ad:75:81:09:d9:e4:00:20:24:6b: 25:05:bb:64:ef:cf:67:03:a2:ff:67:11:b2:72:3d:a3:a9:af: e2:ef:db:b4:29:58:d6:46:b1:c7:d4:99:6f:6b:0b:ea:bb:b3: c9:05:3c:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+4qvI7HfoRG7roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NGRmZDlmMTEtYjEwOC00ZDAyLWEyNWQtNGM5MzA1NjdkNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHatBNZgTyZOPEJjkGzAeRR7GlK7f630cjAu 3DQAF2w9bVXq/3XXNtCNtGweIIjr+vI4YNqioIoJT8YkpBtRarScOmk+w4yI0ZNB Qh96zXalYz488+1miZOwFYL9/NkWuYsGGfmM3tloj8HmKyweKbvoIHrElnF5dL0D 7TPwOkuMfFLvjmjJyuGqb3AvPEC79FyDru0wsPXu+HmVUuRuURVqkmtMcW6kYkig QlLWF0Yh27XBM961glnz7gTt+sFcDxY2MK9fSnq6dbGljzh5Y/5L0iG7KNL/st7x EFpjVqagNHu6Ybwb6B/v/JVPutLNuSIXDia7Bqcr5DK1sSkA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHs9e4chO/WgqD5nwu8Cf6ktwNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNzJiYjY3NTQtZjQ3MS0z MzJhLWEwMjUtYWIzZmE2ZDU2YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAnLns/HJbmeALTD8RYWh+vOVBGNbT9wrGiqiCzbBwi3vRzkglBEhKd xpApKOBo1wHgaBvJ82jEL/KGSdLcVIqnaV749phdqQ6oxNwwBjzqkF6K3C56RTRg R6adPtW8KLiYDUVWQHZKAFOSF/CNZvgxuoCmhWBDoiyL0TNquUyTm5XuQHZcIAm7 rIa6iBsS4O/wiY8VsQA43VWsifw2zpM6GQx8v99Aycouv9ot+7AqEb2CqooUQgaT p5Imk44tDMrmdkt/De8ZimsqBcCJrXWBCdnkACAkayUFu2Tvz2cDov9nEbJyPaOp r+Lv27QpWNZGscfUmW9rC+q7s8kFPHE= -----END CERTIFICATE-----Generated at Mon Aug 4 22:23:30 2025 by rpki-client