$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa File: c08f5a86-f15c-34e1-8512-7fb349c6712f.roa (raw, json) Hash identifier: xT9YOJX485GhhrxUVJV9Heu39LMZSJkh1eZ4Tk/eoDU= Subject key identifier: 78:7D:B7:C0:E2:13:79:72:41:6E:12:1D:9C:8F:EB:B8:A6:7F:A5:21 Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584AADF1008CD10003797F204DC0 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 398123 IP address blocks: 161.38.188.0/23 maxlen: 24 2620:13d:e002::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:00:8c:d1:00:03:79:7f:20:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=ef2d89aa-dec5-4ce2-beed-db12f856128a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:a9:c7:b9:7a:1c:cc:42:eb:a5:56:2a:ab: 5c:bf:76:c3:63:24:c0:e4:44:3a:bd:f8:7c:7d:e0: 00:10:75:1d:51:95:88:02:9a:7f:84:49:d8:0e:f2: 8e:92:20:0d:ad:51:b9:2a:e1:d6:a0:32:95:55:14: 9e:1a:39:cc:c1:61:99:6d:89:e2:4e:bb:ee:a6:1c: ea:1c:2e:32:20:82:b2:e7:ca:eb:c6:e0:bb:b1:ec: 82:13:4e:02:db:8d:62:d1:2d:c1:c8:b6:08:f2:6b: 0c:a2:0a:15:ea:53:c8:f6:80:d5:97:8c:59:c1:b8: 97:24:03:a2:38:d4:76:ab:93:3f:5d:fb:da:6c:8e: 32:43:cc:59:c0:08:cc:89:a6:e5:94:18:64:83:47: 15:8c:c4:cf:e1:fa:cf:e4:15:89:4e:eb:8c:b7:81: 07:ef:e9:23:5b:5d:d7:0c:1d:f8:c4:30:49:21:d6: 91:b6:ee:7f:eb:9a:51:0b:a6:7b:a8:07:04:08:a1: cb:f6:91:28:49:64:5f:68:07:d6:0b:d2:f6:a3:8a: 54:f8:7e:88:9e:30:2e:d1:8a:2c:5d:2c:b6:04:5c: e9:af:dc:f1:6e:7b:ac:34:f9:98:f7:ee:b5:17:cb: b5:59:63:f7:94:f5:62:20:a2:85:bf:82:b0:d8:e9: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7D:B7:C0:E2:13:79:72:41:6E:12:1D:9C:8F:EB:B8:A6:7F:A5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/c08f5a86-f15c-34e1-8512-7fb349c6712f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 161.38.188.0/23 IPv6: 2620:13d:e002::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:35:9d:7d:ca:73:06:f2:47:44:0e:2d:bb:ec:64:35:56:29: 5c:02:6b:ec:33:93:3c:76:4a:93:62:5c:89:a1:04:12:f2:a1: 49:40:76:c9:e9:ee:0d:dd:0a:51:a5:13:b4:3d:e5:31:2a:9a: 0c:52:58:26:6a:6c:7b:36:f2:6c:27:66:62:33:34:b3:16:a7: 3b:0c:0e:3e:b7:2a:25:81:d3:b8:b8:4c:c9:c0:5e:87:63:0e: 26:af:10:83:47:68:32:76:e2:8b:9b:33:ba:98:14:35:16:8a: 58:09:d7:a5:07:d2:4b:46:87:bb:1f:67:5b:98:4f:3c:9e:9d: 05:75:bc:c6:a9:a3:23:6e:49:de:30:59:22:1d:02:90:76:67: 7d:a4:ba:e3:b3:44:32:5e:96:3f:16:a1:67:c6:18:04:c7:38: cb:f2:3e:2e:b6:3b:69:a3:9e:7a:ef:e9:d4:24:a9:bd:33:14: 06:f7:26:be:d6:59:5f:50:ec:e3:60:cd:49:96:86:8f:48:0d: 5e:5f:f0:0b:5d:12:fb:9c:4d:53:8a:8c:df:75:43:3d:af:17: 34:2e:97:95:f1:a0:14:df:2f:6e:10:a3:3d:4b:96:87:a1:19: d5:69:f5:04:0f:a0:71:5e:39:05:f0:9a:7b:f6:b3:93:22:b8: 23:5a:fa:6f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqt8QCM0QADeX8gTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZWYyZDg5YWEtZGVjNS00Y2UyLWJlZWQtZGIxMmY4NTYxMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpSpx7l6HMxC66VWKqtcv3bDYyTA5EQ6vfh8 feAAEHUdUZWIApp/hEnYDvKOkiANrVG5KuHWoDKVVRSeGjnMwWGZbYniTrvuphzq HC4yIIKy58rrxuC7seyCE04C241i0S3ByLYI8msMogoV6lPI9oDVl4xZwbiXJAOi ONR2q5M/XfvabI4yQ8xZwAjMiabllBhkg0cVjMTP4frP5BWJTuuMt4EH7+kjW13X DB34xDBJIdaRtu5/65pRC6Z7qAcECKHL9pEoSWRfaAfWC9L2o4pU+H6InjAu0Yos XSy2BFzpr9zxbnusNPmY9+61F8u1WWP3lPViIKKFv4Kw2Olz+wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHh9t8DiE3lyQW4SHZyP67imf6UhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvYzA4ZjVhODYtZjE1Yy0z NGUxLTg1MTItN2ZiMzQ5YzY3MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBoSa8MA8E AgACMAkDBwEmIAE94AIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiTWdfcpzBvJHRA4tu+xkNVYpXAJr7DOT PHZKk2JciaEEEvKhSUB2yenuDd0KUaUTtD3lMSqaDFJYJmpsezbybCdmYjM0sxan OwwOPrcqJYHTuLhMycBeh2MOJq8Qg0doMnbii5szupgUNRaKWAnXpQfSS0aHux9n W5hPPJ6dBXW8xqmjI25J3jBZIh0CkHZnfaS647NEMl6WPxahZ8YYBMc4y/I+LrY7 aaOeeu/p1CSpvTMUBvcmvtZZX1Ds42DNSZaGj0gNXl/wC10S+5xNU4qM33VDPa8X NC6XlfGgFN8vbhCjPUuWh6EZ1Wn1BA+gcV45BfCae/azkyK4I1r6bw== -----END CERTIFICATE-----Generated at Mon Aug 4 14:04:41 2025 by rpki-client