$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2fe8fb5e-36ae-383a-a8f3-6774e2d4a5ea.roa File: 2fe8fb5e-36ae-383a-a8f3-6774e2d4a5ea.roa (raw, json) Hash identifier: J/GRq05SuRiMjGhSN2jFu+qhjA+JLxzhNvMuoKs7jm4= Subject key identifier: E8:7A:4C:6C:E8:1D:C2:3A:EB:FB:7A:DA:71:62:B6:67:2C:35:CD:16 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849998F3683CDDAE2DD139B6800 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2fe8fb5e-36ae-383a-a8f3-6774e2d4a5ea.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 203724 IP address blocks: 161.69.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:36:83:cd:da:e2:dd:13:9b:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=5afacb68-657b-4f77-a62d-d1c942c90e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:c1:5c:1e:c2:e6:17:de:1f:51:49:8a:c4: 1d:17:53:a7:58:81:35:b0:67:2e:3a:79:23:9f:ee: 8b:33:09:8b:56:01:51:5d:6e:af:38:7e:a7:8a:67: f8:d9:eb:49:c6:dc:cb:00:cd:59:f4:fb:65:34:9b: 76:3e:03:2c:5f:f0:ce:d6:a8:03:78:9f:af:63:9b: 91:8b:72:a7:b0:e7:44:04:45:1e:71:69:99:67:17: fc:fe:21:73:37:fd:7e:a9:20:6b:b0:f5:d0:40:da: e9:e9:8a:8d:36:fd:94:7b:cf:8a:86:89:39:65:f5: 89:1b:68:b2:4a:50:17:2e:0e:ec:58:b9:ff:14:b6: dd:18:82:6f:16:e7:18:e1:46:2f:27:2a:89:0f:25: 01:2f:f5:e2:1c:dc:5c:9e:8e:97:4b:8f:39:01:e9: d7:5a:e4:cf:71:8b:dc:44:0e:5e:dc:f1:04:e6:29: 71:fc:b4:b8:0e:16:6e:59:b1:c2:67:1f:18:75:b1: 5e:1d:07:ba:f8:46:fa:76:cf:ea:20:17:be:71:e3: 5d:a3:cc:94:59:04:a6:6d:54:ab:ae:ad:1c:73:d3: 2a:a1:ac:94:de:02:6e:bc:72:e2:55:c7:fa:4b:fe: a4:cb:a5:5e:ef:9a:c6:3f:69:93:76:a5:0c:b5:36: 87:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7A:4C:6C:E8:1D:C2:3A:EB:FB:7A:DA:71:62:B6:67:2C:35:CD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2fe8fb5e-36ae-383a-a8f3-6774e2d4a5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ec:ef:93:6d:03:41:65:2a:1d:15:f4:28:78:3f:93:2e:fb: af:80:c9:ab:9c:9c:04:3d:11:33:6e:93:f6:b9:b2:1f:2b:49: 00:85:71:20:e3:2d:17:7c:32:f0:62:d2:c8:40:f9:e7:f9:21: f7:1f:09:11:03:4a:93:07:3f:cd:49:e4:4e:b7:45:69:28:f5: ac:d6:62:69:c1:5c:ed:38:4e:b3:35:e1:9d:5b:dc:da:56:c6: c3:75:ad:8e:53:1e:b0:f4:cc:1e:a7:27:6c:3c:65:6a:40:f8: d7:02:57:14:30:20:94:06:5b:6e:24:bf:85:01:e6:22:bc:d1: ab:1d:1a:71:92:7f:7e:2c:08:9a:17:3a:ed:e9:43:1c:ce:50: fb:be:2f:69:6e:b6:bf:cc:a7:b6:48:79:e8:1c:7f:7f:6c:68: 9a:0b:b0:6a:3a:01:22:ff:cd:2a:34:01:d0:8a:a2:95:29:1b: 30:2b:25:f8:65:fa:6e:4a:d7:e2:cf:31:08:29:e1:6c:f1:42: 52:22:69:86:b6:67:10:af:41:4d:31:0b:00:59:60:38:11:a5: 87:cb:a0:37:d6:70:79:48:bd:3a:47:66:d6:bc:a0:07:d0:e9: 48:05:d1:9a:b6:b6:f8:61:4b:ed:32:3a:11:5a:e3:22:d7:45: 7d:4c:61:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzaDzdri3RObaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk NWFmYWNiNjgtNjU3Yi00Zjc3LWE2MmQtZDFjOTQyYzkwZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPDBXB7C5hfeH1FJisQdF1OnWIE1sGcuOnkj n+6LMwmLVgFRXW6vOH6nimf42etJxtzLAM1Z9PtlNJt2PgMsX/DO1qgDeJ+vY5uR i3KnsOdEBEUecWmZZxf8/iFzN/1+qSBrsPXQQNrp6YqNNv2Ue8+Khok5ZfWJG2iy SlAXLg7sWLn/FLbdGIJvFucY4UYvJyqJDyUBL/XiHNxcno6XS485AenXWuTPcYvc RA5e3PEE5ilx/LS4DhZuWbHCZx8YdbFeHQe6+Eb6ds/qIBe+ceNdo8yUWQSmbVSr rq0cc9MqoayU3gJuvHLiVcf6S/6ky6Ve75rGP2mTdqUMtTaHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh6TGzoHcI66/t62nFitmcsNc0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMmZlOGZiNWUtMzZhZS0z ODNhLWE4ZjMtNjc3NGUyZDRhNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzs75NtA0FlKh0V9Ch4P5Mu+6+AyaucnAQ9ETNuk/a5sh8rSQCFcSDj LRd8MvBi0shA+ef5IfcfCREDSpMHP81J5E63RWko9azWYmnBXO04TrM14Z1b3NpW xsN1rY5THrD0zB6nJ2w8ZWpA+NcCVxQwIJQGW24kv4UB5iK80asdGnGSf34sCJoX Ou3pQxzOUPu+L2lutr/Mp7ZIeegcf39saJoLsGo6ASL/zSo0AdCKopUpGzArJfhl +m5K1+LPMQgp4WzxQlIiaYa2ZxCvQU0xCwBZYDgRpYfLoDfWcHlIvTpHZta8oAfQ 6UgF0Zq2tvhhS+0yOhFa4yLXRX1MYZM= -----END CERTIFICATE-----Generated at Mon Apr 28 12:33:31 2025 by rpki-client