$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f4d19d16-7f5e-3b04-b659-1d55ad55af57.roa File: f4d19d16-7f5e-3b04-b659-1d55ad55af57.roa (raw, json) Hash identifier: 5OsbUN0nZ+3Hw3m/8b7vaFDZ0hyx/5upOBI96WtKwNc= Subject key identifier: 52:E8:44:51:FC:2E:68:78:A7:79:99:E4:19:ED:AC:9F:A2:7A:60:B3 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A9FFB8B1FE62BCBB0A026A980 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f4d19d16-7f5e-3b04-b659-1d55ad55af57.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 31898 IP address blocks: 161.69.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:8b:1f:e6:2b:cb:b0:a0:26:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=43b4ac4f-bac0-41d8-9f19-5c2016734184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:44:cc:49:6d:12:3e:62:87:5d:bb:29:86:aa: d4:66:38:37:74:5f:ee:b0:e1:26:90:81:b5:61:e3: 06:b3:0f:aa:10:59:7c:2f:66:f5:36:ab:9c:7d:1b: a0:8f:94:56:06:d6:26:df:74:c6:f6:4d:ea:5e:c6: 9f:c6:0d:14:31:40:13:17:21:93:a2:4e:a8:c6:cf: 76:43:2f:b2:f9:ef:8f:5f:30:d2:28:87:72:d6:24: e1:ba:5d:f2:1b:e5:d1:16:19:6b:43:59:2a:b4:2d: a1:09:04:4e:f9:25:89:3d:a5:8a:70:df:de:41:ed: 56:a1:5d:bb:64:dc:97:ad:25:c6:ec:78:bc:8d:52: e2:1e:02:04:7c:aa:1c:a2:8b:92:29:b9:20:6e:23: e4:9c:c0:80:70:87:9b:51:c2:f6:96:a9:ab:0e:4d: c7:a3:6a:8e:ee:18:db:4b:46:26:1c:dd:a0:a9:37: e6:34:a0:95:e9:29:22:c4:2a:b6:62:46:0c:9b:3c: 22:3e:62:af:cf:aa:80:9c:2a:8c:b3:b2:b2:ce:5a: 64:f4:5d:3e:6c:ff:ba:2c:a3:7b:50:2f:0e:50:c4: e0:bf:02:62:18:00:34:82:2d:55:88:03:c6:4c:06: 45:22:f7:7d:09:28:45:63:1b:c9:4a:e8:08:3b:d5: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E8:44:51:FC:2E:68:78:A7:79:99:E4:19:ED:AC:9F:A2:7A:60:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f4d19d16-7f5e-3b04-b659-1d55ad55af57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f1:de:37:75:30:63:c1:2e:de:1b:36:5f:80:46:2e:e5:76: f3:d7:d1:6a:33:dd:fe:1a:ce:7d:31:67:82:ab:b8:1c:13:0c: db:fb:28:89:25:ae:e7:07:c6:ce:f0:63:51:02:7d:e6:b9:8b: 16:51:6c:61:55:cc:72:19:2a:78:66:42:bc:55:fd:4f:8f:6c: 6f:b0:92:a9:af:d6:f9:f4:64:72:ac:45:5f:75:34:2f:00:c3: 0d:e5:04:1b:11:5c:47:63:43:26:16:e3:21:7d:e3:9c:eb:16: ef:32:70:a4:69:89:3b:c9:40:58:8b:09:02:e7:54:ee:08:9e: 0c:56:db:35:44:f4:50:ed:77:1f:6a:da:ad:70:32:27:19:6e: 23:11:b4:61:5d:e1:8e:75:1f:c6:dc:4a:a1:76:21:04:c0:cd: 59:b5:83:65:ca:25:ce:d2:24:e1:54:9e:b6:a5:b5:20:0d:e5: 64:3d:60:cd:f2:96:d6:ec:b6:3a:f2:9b:4b:8e:07:c2:50:7b: 4b:ed:e2:4b:0a:42:6f:e6:7e:a0:ef:de:5b:b2:c3:1f:e9:29: 36:db:71:ff:32:bf:b6:f0:bd:32:59:c6:75:f6:01:c3:8c:62: 92:62:02:4c:1c:43:b4:72:8d:f7:be:67:9a:96:47:8c:45:6a: c5:90:33:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+4sf5ivLsKAmqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk NDNiNGFjNGYtYmFjMC00MWQ4LTlmMTktNWMyMDE2NzM0MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgETMSW0SPmKHXbsphqrUZjg3dF/usOEmkIG1 YeMGsw+qEFl8L2b1NqucfRugj5RWBtYm33TG9k3qXsafxg0UMUATFyGTok6oxs92 Qy+y+e+PXzDSKIdy1iThul3yG+XRFhlrQ1kqtC2hCQRO+SWJPaWKcN/eQe1WoV27 ZNyXrSXG7Hi8jVLiHgIEfKocoouSKbkgbiPknMCAcIebUcL2lqmrDk3Ho2qO7hjb S0YmHN2gqTfmNKCV6SkixCq2YkYMmzwiPmKvz6qAnCqMs7Kyzlpk9F0+bP+6LKN7 UC8OUMTgvwJiGAA0gi1ViAPGTAZFIvd9CShFYxvJSugIO9WKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLoRFH8Lmh4p3mZ5BntrJ+iemCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjRkMTlkMTYtN2Y1ZS0z YjA0LWI2NTktMWQ1NWFkNTVhZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/x3jd1MGPBLt4bNl+ARi7ldvPX0Woz3f4azn0xZ4KruBwTDNv7KIkl rucHxs7wY1ECfea5ixZRbGFVzHIZKnhmQrxV/U+PbG+wkqmv1vn0ZHKsRV91NC8A ww3lBBsRXEdjQyYW4yF945zrFu8ycKRpiTvJQFiLCQLnVO4IngxW2zVE9FDtdx9q 2q1wMicZbiMRtGFd4Y51H8bcSqF2IQTAzVm1g2XKJc7SJOFUnraltSAN5WQ9YM3y ltbstjrym0uOB8JQe0vt4ksKQm/mfqDv3luywx/pKTbbcf8yv7bwvTJZxnX2AcOM YpJiAkwcQ7Ryjfe+Z5qWR4xFasWQM/Q= -----END CERTIFICATE-----Generated at Tue Aug 5 16:40:12 2025 by rpki-client