$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/6f14efd5-352a-3d92-ab49-9b12cf786a75.roa File: 6f14efd5-352a-3d92-ab49-9b12cf786a75.roa (raw, json) Hash identifier: dU+SZ+Fv5coyVTUW4mcw0dPoDi0RVjEkkmwBrE0vYTM= Subject key identifier: 77:88:CA:C9:6D:4A:36:99:FB:34:AA:48:A3:B0:2F:2E:11:1F:DB:0C Certificate issuer: /CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Certificate serial: 010D0C9F4328584AAB264DE6C5C5F3E050E0D700 Authority key identifier: 9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/6f14efd5-352a-3d92-ab49-9b12cf786a75.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 52347 IP address blocks: 162.217.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:4d:e6:c5:c5:f3:e0:50:e0:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61f164dd-db39-470d-8805-3aa514d5e7b0 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=19f28e0e-64e8-4cee-b19f-d13e9db84f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:1e:70:cf:d8:8e:f8:71:24:8b:d0:f2:b0: d8:c9:6b:53:6d:34:82:1c:a0:ac:de:fe:00:e6:cf: fe:4d:a4:97:88:eb:13:61:6f:d6:2d:9a:30:bc:21: 5f:3b:16:82:3a:c9:b4:8d:27:6e:61:94:33:15:23: 7f:f7:b4:0c:4b:65:46:36:30:a7:c2:09:49:8c:bc: 95:f6:bd:1b:f0:75:36:39:8a:36:5d:60:7c:a5:dd: 46:f7:09:8f:0e:d7:97:02:15:72:a9:1f:77:51:fc: 62:55:cb:a0:d4:2a:ae:d9:14:eb:83:25:ae:29:21: 93:21:0b:50:9d:dc:1f:78:d5:9b:6f:30:71:ee:a8: e8:64:71:6c:0b:d8:a6:f7:9e:c6:2f:b5:7a:33:66: ee:ed:40:b0:0a:98:bb:c0:62:64:9a:66:49:de:58: 95:2a:8b:d4:12:94:c5:37:84:8c:1c:f4:31:e5:4a: d9:0d:67:03:19:b4:85:1e:c5:29:be:1d:b5:d8:51: 44:60:ea:f6:5b:31:9c:7e:f4:62:46:2b:ba:6d:c6: e4:05:9a:f3:ba:18:f7:8e:8e:00:50:bb:8c:8c:08: 08:56:9c:d6:cc:69:b9:c4:ef:53:a7:16:0a:58:15: b1:cb:de:00:b1:01:f1:de:e5:e2:5c:e7:60:b9:ae: b1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:88:CA:C9:6D:4A:36:99:FB:34:AA:48:A3:B0:2F:2E:11:1F:DB:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/6f14efd5-352a-3d92-ab49-9b12cf786a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0/61f164dd-db39-470d-8805-3aa514d5e7b0.crl X509v3 Authority Key Identifier: keyid:9F:EA:9D:6E:2C:9D:24:DF:08:BB:BB:1E:3A:14:04:95:D9:F0:F4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61f164dd-db39-470d-8805-3aa514d5e7b0.cer sbgp-ipAddrBlock: critical IPv4: 162.217.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:43:e5:32:27:a3:a9:d6:f8:77:a1:cb:a4:e5:a1:59:de:75: 5b:20:02:7a:01:bb:1c:3c:34:32:fe:7c:53:a5:b6:fc:1b:1f: e0:1c:20:2c:1d:c0:42:05:9c:a5:e0:d3:8b:c6:ad:0b:d5:e1: 8d:82:fc:c6:d4:44:71:89:7e:5f:d7:7a:87:9f:ac:5c:df:02: 81:7b:31:16:ad:5f:8a:42:03:1f:c8:46:6a:d3:9a:be:39:7e: c8:2b:69:75:03:56:bf:32:de:3d:86:16:4b:08:c7:c7:80:90: 92:7d:25:95:41:60:07:47:f1:6b:77:44:05:33:cd:9e:d8:53: 0d:fa:be:e3:9d:d2:a2:92:6f:58:09:4b:de:8c:bb:b9:6d:9b: 71:d9:fe:03:85:0b:21:4a:e7:a1:0b:53:90:c9:12:cd:d6:55: d0:62:94:20:0b:9d:d2:c9:a1:3d:b0:5f:39:8e:94:de:81:44: 84:e6:55:3c:87:6d:57:7a:c8:17:e0:37:d6:41:54:c4:e9:23: f1:68:9c:61:9f:4d:f6:f1:1e:07:83:8c:60:0c:cb:aa:68:3f: 96:f2:3a:2e:a8:02:6a:a0:fe:a0:01:a1:d7:d1:a0:7f:ce:58: 6c:b5:35:b8:23:3c:ac:ec:78:6d:2c:cf:4d:5e:d5:34:15:8a: f0:57:fb:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJk3mxcXz4FDg1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFmMTY0ZGQtZGIzOS00NzBkLTg4MDUtM2FhNTE0ZDVl N2IwMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MTlmMjhlMGUtNjRlOC00Y2VlLWIxOWYtZDEzZTlkYjg0ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVAecM/YjvhxJIvQ8rDYyWtTbTSCHKCs3v4A 5s/+TaSXiOsTYW/WLZowvCFfOxaCOsm0jSduYZQzFSN/97QMS2VGNjCnwglJjLyV 9r0b8HU2OYo2XWB8pd1G9wmPDteXAhVyqR93UfxiVcug1Cqu2RTrgyWuKSGTIQtQ ndwfeNWbbzBx7qjoZHFsC9im957GL7V6M2bu7UCwCpi7wGJkmmZJ3liVKovUEpTF N4SMHPQx5UrZDWcDGbSFHsUpvh212FFEYOr2WzGcfvRiRiu6bcbkBZrzuhj3jo4A ULuMjAgIVpzWzGm5xO9TpxYKWBWxy94AsQHx3uXiXOdgua6xkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeIysltSjaZ+zSqSKOwLy4RH9sMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWYx NjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1MTRkNWU3YjAvNmYxNGVmZDUtMzUyYS0z ZDkyLWFiNDktOWIxMmNmNzg2YTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFmMTY0ZGQtZGIzOS00NzBkLTg4 MDUtM2FhNTE0ZDVlN2IwLzYxZjE2NGRkLWRiMzktNDcwZC04ODA1LTNhYTUxNGQ1 ZTdiMC5jcmwwHwYDVR0jBBgwFoAUn+qdbiydJN8Iu7seOhQEldnw9LYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWYxNjRkZC1kYjM5LTQ3MGQtODgwNS0zYWE1 MTRkNWU3YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotlBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRD5TIno6nW+Hehy6TloVnedVsgAnoBuxw8NDL+fFOltvwbH+AcICwd wEIFnKXg04vGrQvV4Y2C/MbURHGJfl/XeoefrFzfAoF7MRatX4pCAx/IRmrTmr45 fsgraXUDVr8y3j2GFksIx8eAkJJ9JZVBYAdH8Wt3RAUzzZ7YUw36vuOd0qKSb1gJ S96Mu7ltm3HZ/gOFCyFK56ELU5DJEs3WVdBilCALndLJoT2wXzmOlN6BRITmVTyH bVd6yBfgN9ZBVMTpI/FonGGfTfbxHgeDjGAMy6poP5byOi6oAmqg/qABodfRoH/O WGy1NbgjPKzseG0sz01e1TQVivBX+30= -----END CERTIFICATE-----Generated at Mon Aug 4 21:54:15 2025 by rpki-client