$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f5bfe636-64a9-3b99-81bc-b4a7ba775ddf.roa File: f5bfe636-64a9-3b99-81bc-b4a7ba775ddf.roa (raw, json) Hash identifier: iFi8xLtBt7iWKfXMjf8EXJbqnKjE2NHrlBtE0pzUU5U= Subject key identifier: 19:5F:8E:F8:6F:AA:B1:AC:BB:83:A0:BA:1B:19:5E:16:A0:9A:78:AC Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A9D30EA7E8E6D033CB953E280 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f5bfe636-64a9-3b99-81bc-b4a7ba775ddf.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 203724 IP address blocks: 161.69.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:ea:7e:8e:6d:03:3c:b9:53:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=6dab1a8b-042a-428f-9cdd-17f788f928f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:dc:39:43:69:77:c2:51:62:ee:d0:ed:c6: ec:fa:b5:9e:de:f4:b9:95:1d:6b:f9:c9:e1:9f:d3: d7:af:e6:e7:8f:85:16:34:16:9c:a0:42:bb:ea:84: d4:0e:6d:50:a9:c4:b2:c9:56:9e:4a:92:0b:4f:bc: a8:af:e5:49:fe:94:ea:40:72:5d:df:6c:95:67:c1: 11:4f:5e:94:79:24:e7:23:85:97:99:72:97:4d:fc: ca:41:7e:aa:3d:9d:60:99:41:b1:f0:b9:3b:b9:3b: a2:7e:4d:f9:27:11:35:a5:fe:9a:fb:94:c3:6f:b1: aa:5f:1d:86:62:f5:17:26:cb:18:21:ce:07:59:73: 5f:e1:15:30:bb:f3:24:f6:79:9c:4b:cc:b5:1f:14: cf:4c:e9:fa:e1:d0:04:5c:bf:85:08:74:72:33:bf: 2e:d7:60:d4:40:7c:f8:a6:dd:cf:56:e2:e2:d7:ed: 9b:72:8c:d9:12:06:18:ec:1c:7d:46:92:a5:ad:63: d6:41:a9:9f:a7:bd:4c:03:5c:c5:8b:f3:0c:ba:95: eb:46:b9:61:d9:21:75:5c:d7:6d:26:8f:a3:ab:aa: c7:ad:83:48:4a:cc:4b:32:8b:88:85:1c:16:90:f5: 05:f5:03:a3:20:8a:d2:f1:5c:af:5d:a6:61:e3:b5: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5F:8E:F8:6F:AA:B1:AC:BB:83:A0:BA:1B:19:5E:16:A0:9A:78:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f5bfe636-64a9-3b99-81bc-b4a7ba775ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b1:69:23:09:ea:68:fc:42:37:22:49:80:79:ba:f7:8e:05: a6:39:27:ff:fa:09:71:d0:01:41:22:b3:5a:3a:69:d4:a3:89: 90:b8:1e:ec:e5:d0:1c:12:d7:f2:11:e8:48:df:48:e9:c7:63: b6:41:62:d7:74:82:4e:38:88:b0:9b:2e:98:01:42:54:25:e0: 2f:72:05:de:1d:f9:1c:f1:12:ba:a3:60:23:ef:f5:b5:36:f8: 74:96:70:8f:0c:47:f2:d7:dc:31:54:ac:16:dc:a5:ad:bf:ba: 90:f9:5c:ab:38:3a:0c:5b:1e:9e:5d:3d:f2:d9:aa:0e:12:ad: 3a:16:f2:60:ad:a8:13:d2:a3:d4:76:5c:06:af:37:f9:c2:d4: 80:0e:c1:2a:6c:0a:95:25:06:ae:89:24:5b:0b:b0:a4:56:a3: 1a:94:3e:8b:fd:7e:30:6b:54:0e:e7:34:be:19:88:24:26:d3: 88:e3:db:ef:f5:38:80:2a:dd:68:86:b9:fd:70:50:b3:1f:a7: a5:4d:0e:b8:54:dc:06:fc:af:e0:aa:76:ed:d0:ea:5b:92:f3: 73:28:4c:09:bf:9a:f2:b3:a2:d7:58:99:90:b7:17:59:26:0f: 00:ac:ef:02:83:db:0f:98:76:6b:10:78:e7:5d:c0:fb:1d:2d: ce:c1:83:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOp+jm0DPLlT4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NmRhYjFhOGItMDQyYS00MjhmLTljZGQtMTdmNzg4ZjkyOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjTcOUNpd8JRYu7Q7cbs+rWe3vS5lR1r+cnh n9PXr+bnj4UWNBacoEK76oTUDm1QqcSyyVaeSpILT7yor+VJ/pTqQHJd32yVZ8ER T16UeSTnI4WXmXKXTfzKQX6qPZ1gmUGx8Lk7uTuifk35JxE1pf6a+5TDb7GqXx2G YvUXJssYIc4HWXNf4RUwu/Mk9nmcS8y1HxTPTOn64dAEXL+FCHRyM78u12DUQHz4 pt3PVuLi1+2bcozZEgYY7Bx9RpKlrWPWQamfp71MA1zFi/MMupXrRrlh2SF1XNdt Jo+jq6rHrYNISsxLMouIhRwWkPUF9QOjIIrS8VyvXaZh47XmdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlfjvhvqrGsu4OguhsZXhagmnisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjViZmU2MzYtNjRhOS0z Yjk5LTgxYmMtYjRhN2JhNzc1ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEixaSMJ6mj8QjciSYB5uveOBaY5J//6CXHQAUEis1o6adSjiZC4Huzl 0BwS1/IR6EjfSOnHY7ZBYtd0gk44iLCbLpgBQlQl4C9yBd4d+RzxErqjYCPv9bU2 +HSWcI8MR/LX3DFUrBbcpa2/upD5XKs4OgxbHp5dPfLZqg4SrToW8mCtqBPSo9R2 XAavN/nC1IAOwSpsCpUlBq6JJFsLsKRWoxqUPov9fjBrVA7nNL4ZiCQm04jj2+/1 OIAq3WiGuf1wULMfp6VNDrhU3Ab8r+Cqdu3Q6luS83MoTAm/mvKzotdYmZC3F1km DwCs7wKD2w+YdmsQeOddwPsdLc7Bg3U= -----END CERTIFICATE-----Generated at Wed Aug 6 00:49:09 2025 by rpki-client