$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa File: 640896d2-3779-3ec9-a9f8-7165c4473520.roa (raw, json) Hash identifier: ItKLlBFF7MGxeEJzy1j/lyRb0b5sqslltG5lAmae8Gc= Subject key identifier: 6C:0D:8F:1C:23:4D:C4:21:83:D0:8E:DE:D8:C2:CB:0B:5D:A5:5E:BB Certificate issuer: /CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2 Certificate serial: 010D0C9F4328584AC2E0F820BD9AA8BB8047A900 Authority key identifier: 69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 393770 IP address blocks: 161.129.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f8:20:bd:9a:a8:bb:80:47:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746d7fba-60c4-45bf-9ed4-90c6580e71f2 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=84c6167d-e910-4b7c-9bdf-cd34841eade5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:71:06:f8:25:51:f1:f3:1c:93:f2:f8:7a: 0a:0a:b0:2d:0c:e2:f0:b6:e7:7b:4e:26:38:ee:15: 0f:2c:bc:f6:e6:0a:0e:15:43:68:76:01:8d:47:0f: 68:23:08:fb:80:b9:87:43:8a:53:e2:29:a5:a5:0a: 5b:e3:31:64:a2:1a:ef:ff:f3:79:f6:e9:f9:96:e5: 7b:39:4a:31:f8:2d:04:db:07:03:dc:a1:bd:9a:01: ff:17:2a:35:b4:3f:eb:95:73:45:31:89:ac:e7:26: b9:35:98:4e:0e:7b:38:ef:9c:81:2e:7d:64:48:ca: f7:18:b3:51:b9:c0:3e:91:b2:b7:c2:9e:86:bf:b8: ff:44:ee:7b:74:dc:f4:2b:f6:65:15:40:fa:00:4e: d4:8b:4e:1e:7a:dc:db:7b:57:f7:18:a5:bf:20:17: ff:06:5a:4d:c4:a0:d9:86:71:7d:c7:00:e1:c6:d9: 6b:28:e6:ff:2d:73:ef:0c:96:ee:7f:78:53:dc:41: fa:bb:75:6e:3f:bf:5f:da:0d:27:4a:f4:30:80:d2: 4e:82:6a:68:d6:fd:07:d8:d9:3f:90:bf:93:e3:95: 27:95:e4:6b:2f:13:9e:5c:05:7a:0d:1e:e7:48:1e: 96:e5:96:16:b1:ea:55:bb:f5:21:c2:c9:68:d5:e7: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0D:8F:1C:23:4D:C4:21:83:D0:8E:DE:D8:C2:CB:0B:5D:A5:5E:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/640896d2-3779-3ec9-a9f8-7165c4473520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2/746d7fba-60c4-45bf-9ed4-90c6580e71f2.crl X509v3 Authority Key Identifier: keyid:69:43:44:A0:6D:1F:38:65:C4:E2:45:5E:1B:1D:2A:5A:BA:82:1D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/746d7fba-60c4-45bf-9ed4-90c6580e71f2.cer sbgp-ipAddrBlock: critical IPv4: 161.129.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:18:ff:8b:46:e9:73:d8:a1:a0:c4:2b:8d:b9:45:b6:20:64: 28:f5:53:cc:33:87:47:ac:dd:d9:2b:e0:22:7b:03:9a:f4:e1: 5f:1f:a5:38:1c:ac:ea:56:18:8a:1a:3b:4e:0d:9c:f4:71:af: e8:38:c6:82:6a:b7:ca:54:9d:64:83:32:76:37:9c:69:6a:ff: 77:e0:ca:bd:84:5e:35:e2:5a:6a:ca:a8:0b:c5:fe:8a:05:80: 71:4c:57:d7:7a:e5:01:fa:ff:01:ff:15:3c:68:ca:b5:70:39: cd:3b:21:72:9d:50:1a:ee:d9:d5:f4:13:e4:61:4a:5d:a2:23: 15:15:7a:25:7a:5f:fb:af:78:d2:2d:83:b2:41:75:67:4c:97: 01:37:27:4b:77:ce:57:2f:5d:64:57:74:9f:9e:3a:9a:ab:0e: 00:b0:e7:b4:4c:8c:82:e6:6e:6a:11:cb:d3:e5:6a:10:87:75: 31:6f:8a:64:19:31:f1:4e:fd:3c:bc:e5:25:3e:76:25:9b:e9: df:13:09:f2:55:89:4f:29:b0:a3:56:65:eb:d1:6a:24:d1:f9: 56:cb:bc:7a:b7:f6:23:88:75:af:6c:4f:1a:a1:77:ad:b1:69: e2:45:9b:c9:25:f2:b1:e4:15:ee:be:aa:5e:da:7e:97:dd:8e: bf:0a:01:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PggvZqou4BHqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZDdmYmEtNjBjNC00NWJmLTllZDQtOTBjNjU4MGU3 MWYyMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODRjNjE2N2QtZTkxMC00YjdjLTliZGYtY2QzNDg0MWVhZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxZxBvglUfHzHJPy+HoKCrAtDOLwtud7TiY4 7hUPLLz25goOFUNodgGNRw9oIwj7gLmHQ4pT4imlpQpb4zFkohrv//N59un5luV7 OUox+C0E2wcD3KG9mgH/Fyo1tD/rlXNFMYms5ya5NZhODns475yBLn1kSMr3GLNR ucA+kbK3wp6Gv7j/RO57dNz0K/ZlFUD6AE7Ui04eetzbe1f3GKW/IBf/BlpNxKDZ hnF9xwDhxtlrKOb/LXPvDJbuf3hT3EH6u3VuP79f2g0nSvQwgNJOgmpo1v0H2Nk/ kL+T45UnleRrLxOeXAV6DR7nSB6W5ZYWsepVu/Uhwslo1edj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwNjxwjTcQhg9CO3tjCywtdpV67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NDZk N2ZiYS02MGM0LTQ1YmYtOWVkNC05MGM2NTgwZTcxZjIvNjQwODk2ZDItMzc3OS0z ZWM5LWE5ZjgtNzE2NWM0NDczNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzQ2ZDdmYmEtNjBjNC00NWJmLTll ZDQtOTBjNjU4MGU3MWYyLzc0NmQ3ZmJhLTYwYzQtNDViZi05ZWQ0LTkwYzY1ODBl NzFmMi5jcmwwHwYDVR0jBBgwFoAUaUNEoG0fOGXE4kVeGx0qWrqCHbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NDZkN2ZiYS02MGM0LTQ1YmYtOWVkNC05MGM2 NTgwZTcxZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoYE4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMY/4tG6XPYoaDEK425RbYgZCj1U8wzh0es3dkr4CJ7A5r04V8fpTgc rOpWGIoaO04NnPRxr+g4xoJqt8pUnWSDMnY3nGlq/3fgyr2EXjXiWmrKqAvF/ooF gHFMV9d65QH6/wH/FTxoyrVwOc07IXKdUBru2dX0E+RhSl2iIxUVeiV6X/uveNIt g7JBdWdMlwE3J0t3zlcvXWRXdJ+eOpqrDgCw57RMjILmbmoRy9PlahCHdTFvimQZ MfFO/Ty85SU+diWb6d8TCfJViU8psKNWZevRaiTR+VbLvHq39iOIda9sTxqhd62x aeJFm8kl8rHkFe6+ql7afpfdjr8KAZk= -----END CERTIFICATE-----Generated at Sat Aug 9 20:42:23 2025 by rpki-client