$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa File: 1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa (raw, json) Hash identifier: 0PJP+lPOJ8fuRHDzAh0m95DmeCxF9mlUxluarzS0z9Q= Subject key identifier: 20:24:68:88:1C:26:C5:47:EB:CF:77:E9:4E:C2:8B:79:31:77:AB:4C Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F055D0DFFD173F7130E00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 203724 IP address blocks: 161.69.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:05:5d:0d:ff:d1:73:f7:13:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=1a41ed28-e69c-4bb1-897a-2be9a24cf71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:b6:8a:77:4b:5b:54:cd:12:2a:7e:3e:86: 44:ac:5f:2c:cb:57:13:f3:fb:cf:3b:b6:67:c5:00: 57:c8:4e:0d:09:3f:e4:04:3d:dc:85:25:61:4a:41: db:ad:9b:b3:67:6e:de:36:e1:da:85:04:a0:da:dd: f0:1d:d3:e7:a1:44:3a:0e:06:0f:ce:45:4d:18:ca: b2:25:24:99:f4:89:59:3a:c9:a2:6a:bf:17:33:c1: 2b:07:e3:02:9e:dc:91:32:ee:1d:1b:b5:17:5d:f4: fd:ce:68:a9:07:52:9e:1c:56:31:fa:71:15:5b:fa: 9d:f7:44:b1:8e:2e:97:e0:d0:7a:66:db:7c:bf:1d: 38:ac:60:3c:e3:c2:f6:90:f4:0a:13:28:8e:b1:56: 82:2c:81:59:3c:79:a0:f1:cf:80:68:36:85:7d:99: b9:01:9e:47:46:94:45:05:41:34:d1:2e:e9:d5:84: 59:7d:bf:02:ff:58:bf:aa:a3:4d:20:21:00:6b:a9: 3a:bb:8b:63:bc:94:7c:b7:31:f7:ce:a5:79:38:75: ed:e3:8c:e5:4a:fb:ca:ac:2d:91:eb:db:6a:e5:64: 3e:63:af:d0:9f:16:c0:4a:75:e9:0b:b1:6d:d6:4a: 77:96:ff:b3:8e:c1:82:04:32:2f:64:95:79:b0:6c: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:24:68:88:1C:26:C5:47:EB:CF:77:E9:4E:C2:8B:79:31:77:AB:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:58:1b:8b:77:b2:6a:3f:e7:53:92:cc:ac:10:b0:6e:ad:69: c9:b9:84:dd:37:73:45:58:a9:cc:76:01:65:a9:e4:0a:5d:e7: 58:5b:25:55:0c:bb:de:14:31:20:d8:f7:04:29:dd:b9:30:d7: 7f:44:25:dc:ad:00:95:a9:16:da:45:b3:16:6a:ca:64:8d:a1: 4d:14:cb:63:07:81:b5:89:da:05:fc:47:dc:ca:0d:d9:59:6f: aa:cb:f0:cd:27:77:74:32:2c:46:47:60:d0:bc:00:98:5e:e6: 43:89:aa:7f:fc:01:9f:79:09:30:05:00:5a:af:cd:b9:61:fb: 97:39:3d:92:fb:9e:f3:f3:3a:7a:96:27:d5:62:c9:8a:f3:5c: b0:ab:4e:db:41:e5:82:4d:71:4a:d0:71:7c:8f:e7:fd:c6:4c: fe:46:92:bc:14:96:43:d8:3e:c3:95:ff:42:b6:17:d8:d9:e1: c0:8f:35:b9:a3:6a:91:2f:6c:10:7a:9d:58:14:9e:f2:d5:f3: 7c:54:a6:f7:8e:21:10:aa:3c:ad:a9:01:31:ec:ce:b3:12:90: 99:49:d0:67:7b:a2:09:c0:28:9a:70:e0:c4:ae:c1:3f:15:0b: cf:37:9b:44:1a:8f:72:ec:83:1f:a0:29:e7:c5:0f:61:74:77: 1c:41:93:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwVdDf/Rc/cTDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MWE0MWVkMjgtZTY5Yy00YmIxLTg5N2EtMmJlOWEyNGNmNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhe2indLW1TNEip+PoZErF8sy1cT8/vPO7Zn xQBXyE4NCT/kBD3chSVhSkHbrZuzZ27eNuHahQSg2t3wHdPnoUQ6DgYPzkVNGMqy JSSZ9IlZOsmiar8XM8ErB+MCntyRMu4dG7UXXfT9zmipB1KeHFYx+nEVW/qd90Sx ji6X4NB6Ztt8vx04rGA848L2kPQKEyiOsVaCLIFZPHmg8c+AaDaFfZm5AZ5HRpRF BUE00S7p1YRZfb8C/1i/qqNNICEAa6k6u4tjvJR8tzH3zqV5OHXt44zlSvvKrC2R 69tq5WQ+Y6/QnxbASnXpC7Ft1kp3lv+zjsGCBDIvZJV5sGxX0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAkaIgcJsVH68936U7Ci3kxd6tMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMWViYmZkZmYtMzJiNy0z ZjA1LTg0ODEtMmVjZTQ0NjdlOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJYG4t3smo/51OSzKwQsG6tacm5hN03c0VYqcx2AWWp5Apd51hbJVUM u94UMSDY9wQp3bkw139EJdytAJWpFtpFsxZqymSNoU0Uy2MHgbWJ2gX8R9zKDdlZ b6rL8M0nd3QyLEZHYNC8AJhe5kOJqn/8AZ95CTAFAFqvzblh+5c5PZL7nvPzOnqW J9ViyYrzXLCrTttB5YJNcUrQcXyP5/3GTP5GkrwUlkPYPsOV/0K2F9jZ4cCPNbmj apEvbBB6nVgUnvLV83xUpveOIRCqPK2pATHszrMSkJlJ0Gd7ognAKJpw4MSuwT8V C883m0Qaj3Lsgx+gKefFD2F0dxxBk64= -----END CERTIFICATE-----Generated at Mon Apr 28 06:03:30 2025 by rpki-client