$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e7175995-4712-3d55-becf-5960421f1c68.roa File: e7175995-4712-3d55-becf-5960421f1c68.roa (raw, json) Hash identifier: bnFXXQk/nluDmj3tMmTkPoxZUcAha9DB33B9Ugh+pdc= Subject key identifier: 45:D5:3F:91:F6:43:BB:B0:9C:83:97:C3:63:AF:E7:A0:3F:5D:F7:72 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A9FFB8AEC601D74F22FBE6660 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e7175995-4712-3d55-becf-5960421f1c68.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 203724 IP address blocks: 161.69.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:8a:ec:60:1d:74:f2:2f:be:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=05449cc7-f88d-46f3-8d18-e17d3491c7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:82:fc:ef:01:d5:e9:fc:9f:54:0c:bb:89:5a: 86:35:36:9b:41:a2:dd:bb:3b:48:3c:21:97:63:e7: 6b:ce:cc:42:7e:9b:99:92:98:89:5a:d0:fd:6e:a8: 60:9c:b8:01:d5:eb:2c:df:73:b2:c6:a4:dd:19:d8: bd:31:4c:78:ae:dc:99:9b:ac:a8:74:00:e7:45:7b: 5b:12:c8:b1:fc:7e:1f:d4:cb:46:2e:16:a3:c2:3a: 76:2b:81:a3:e5:2c:ba:4d:f5:f4:ea:15:83:34:74: 93:29:70:f9:d4:9a:99:0e:1d:94:f2:54:4e:77:06: 9a:cb:38:ad:7b:61:94:a8:14:01:50:03:7c:e6:dd: 53:24:cb:a6:bd:af:6d:df:ae:19:dc:c6:72:c2:ad: 28:e1:f9:38:41:47:65:c6:a8:78:0c:90:c1:00:3f: b8:84:28:42:3a:47:4a:38:f6:f2:23:42:1b:46:6e: 47:66:93:db:2b:e4:2f:67:e8:82:bc:46:ed:5e:92: 67:89:0b:b2:2a:ac:70:76:54:c7:90:c4:c1:e7:7d: 89:e9:5d:f3:c5:fc:47:1f:66:ba:5c:f4:63:61:0b: 41:7d:e0:da:c5:20:7a:20:ef:92:9d:61:f8:26:33: 47:d8:2b:14:21:33:15:79:b7:37:97:13:4d:8b:09: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:3F:91:F6:43:BB:B0:9C:83:97:C3:63:AF:E7:A0:3F:5D:F7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e7175995-4712-3d55-becf-5960421f1c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:cf:f3:1b:db:8b:8f:62:0d:ec:c6:30:1d:fb:b2:d1:98:3f: 33:35:0f:d1:a7:fc:15:98:ee:ad:f9:63:9c:77:c2:f7:2c:d0: 3f:11:0f:03:0c:bf:c6:60:8d:ab:d3:ef:21:7e:eb:97:70:a2: 24:36:0f:b2:32:35:61:84:95:10:21:e6:7d:84:32:5b:c1:68: 4a:04:d0:ad:db:b2:32:cf:80:70:a6:d1:7e:6e:ef:c5:b8:a0: 78:2e:57:4e:f9:07:ee:25:aa:44:c5:7a:4c:99:ac:00:9c:06: 95:40:58:58:27:b1:02:c5:ea:fc:94:62:a1:92:aa:de:d3:9b: ea:41:ff:61:e1:a8:4c:c1:3d:04:08:31:5e:00:ce:5b:d5:84: ce:bd:97:60:39:09:5c:28:70:a4:c1:1c:64:e8:4e:5c:fb:53: d4:41:4d:f8:7d:9a:61:17:d9:5b:d7:7a:e7:2f:b1:13:6e:8c: 96:28:7c:3e:d5:80:f7:e1:4b:d5:f4:79:49:83:f0:65:18:68: e2:3d:ac:8c:91:5a:da:08:c9:ff:ee:5a:2c:ca:de:94:ff:93: ff:4b:f3:3a:b8:9f:7f:8f:7b:75:ab:55:e3:80:62:d5:bf:94: f4:ce:3b:93:0c:e7:79:4a:d8:d6:6c:70:c6:73:49:ed:f8:cd: 0e:5c:10:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+4rsYB108i++ZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MDU0NDljYzctZjg4ZC00NmYzLThkMTgtZTE3ZDM0OTFjN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIL87wHV6fyfVAy7iVqGNTabQaLduztIPCGX Y+drzsxCfpuZkpiJWtD9bqhgnLgB1ess33OyxqTdGdi9MUx4rtyZm6yodADnRXtb Esix/H4f1MtGLhajwjp2K4Gj5Sy6TfX06hWDNHSTKXD51JqZDh2U8lROdwaayzit e2GUqBQBUAN85t1TJMumva9t364Z3MZywq0o4fk4QUdlxqh4DJDBAD+4hChCOkdK OPbyI0IbRm5HZpPbK+QvZ+iCvEbtXpJniQuyKqxwdlTHkMTB532J6V3zxfxHH2a6 XPRjYQtBfeDaxSB6IO+SnWH4JjNH2CsUITMVebc3lxNNiwl00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXVP5H2Q7uwnIOXw2Ov56A/XfdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZTcxNzU5OTUtNDcxMi0z ZDU1LWJlY2YtNTk2MDQyMWYxYzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvP8xvbi49iDezGMB37stGYPzM1D9Gn/BWY7q35Y5x3wvcs0D8RDwMM v8ZgjavT7yF+65dwoiQ2D7IyNWGElRAh5n2EMlvBaEoE0K3bsjLPgHCm0X5u78W4 oHguV075B+4lqkTFekyZrACcBpVAWFgnsQLF6vyUYqGSqt7Tm+pB/2HhqEzBPQQI MV4AzlvVhM69l2A5CVwocKTBHGToTlz7U9RBTfh9mmEX2VvXeucvsRNujJYofD7V gPfhS9X0eUmD8GUYaOI9rIyRWtoIyf/uWizK3pT/k/9L8zq4n3+Pe3WrVeOAYtW/ lPTOO5MM53lK2NZscMZzSe34zQ5cEJs= -----END CERTIFICATE-----Generated at Wed Aug 6 13:02:43 2025 by rpki-client