$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa File: 4e648413-26b2-3336-a1ab-8879a3f0b013.roa (raw, json) Hash identifier: 6SFPRGgj3QcRLj98LodUpQabt/JLGt4RupgZqrpDHXE= Subject key identifier: 16:F9:0D:5D:6B:70:77:77:4D:2F:34:A0:70:C4:05:DA:80:15:D3:C7 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F432858498769B82FC2B2A520E2BEE020 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 203724 IP address blocks: 161.69.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b8:2f:c2:b2:a5:20:e2:be:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=93cfe2b8-8fe7-417c-ac0d-22b2ef2d93e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:03:f8:d3:bd:9b:05:f9:ce:44:dc:39:7f:bf: 59:57:8e:eb:af:1a:b5:fc:37:2e:19:32:e9:29:05: 72:4c:21:37:9f:d5:3e:28:10:9b:f5:06:db:80:a0: 15:c1:84:44:66:ec:cc:8e:9b:e4:22:c7:ae:9e:90: bc:5a:b4:be:98:9b:0b:33:32:62:54:cc:16:47:9a: b0:92:19:38:5c:a9:83:b8:09:12:96:e5:bc:ec:c1: 93:ae:5f:3e:58:c3:84:41:ce:07:77:08:66:6e:50: b6:8a:3e:06:45:91:55:6b:b5:19:2d:b0:d1:98:a4: 7d:16:08:e3:61:7c:a2:c8:d9:16:59:64:a4:9e:d7: 76:1d:61:ef:c0:d5:c0:9b:a6:b4:fa:f2:40:1b:4e: 6a:99:33:d2:a9:8c:fb:2e:ea:33:b7:05:ee:65:02: a2:1b:14:b5:d1:bb:48:ac:11:01:a6:84:45:24:c7: f5:ce:aa:94:04:d3:20:ee:3f:74:fc:27:e9:0a:87: 96:5a:17:80:37:df:ae:5a:59:f1:5b:db:a7:b5:21: 0d:c4:84:96:0f:ca:b9:e5:2a:4b:8d:f5:20:42:3e: db:21:91:1b:c9:ef:c0:bd:56:a4:3e:1e:8d:2f:67: 51:bd:18:c0:fe:5e:8c:b6:30:4b:5b:b6:c9:3a:b9: 27:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F9:0D:5D:6B:70:77:77:4D:2F:34:A0:70:C4:05:DA:80:15:D3:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:56:8c:d7:76:d8:29:7f:d5:58:3b:50:29:7c:89:f3:21:15: 4c:86:99:5f:f0:aa:f1:9b:98:be:2b:74:7a:46:ea:2e:b0:ee: 16:e8:c5:d2:df:6a:96:a5:41:59:05:7e:97:e8:95:00:3f:39: f3:5b:cd:51:49:8c:90:f2:15:d6:5b:1b:2d:31:f3:f7:56:e5: a1:c8:61:c8:c6:d0:6b:14:b2:35:71:1e:e3:e7:85:a5:84:e7: a5:3a:88:51:04:ec:b0:7b:b8:99:45:94:98:15:bd:ef:70:a0: d9:2c:14:7d:bc:b7:29:9e:b1:a9:61:ea:3d:62:06:2e:66:78: 66:0a:cf:92:83:b6:fd:14:0b:0e:a4:83:29:e2:82:4a:e7:56: d1:f4:32:a8:f7:5c:02:e4:01:af:82:97:ca:c8:87:f2:2c:95: f6:27:98:d0:3c:42:70:4e:51:31:80:90:b9:df:d2:ef:18:62: cd:d2:e1:7a:51:b5:8b:b2:61:e2:26:01:d7:3c:c3:c6:09:0f: 22:e3:9b:d7:87:4c:93:ee:71:f1:4d:f3:a4:60:03:b7:f8:ba: 72:d8:a4:74:49:a9:b3:52:01:91:3a:c8:11:52:b0:8f:5b:81: eb:b5:ce:ff:af:96:9a:0d:4b:fe:ce:b1:7b:3d:1b:33:ca:39: 2f:28:a3:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabgvwrKlIOK+4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OTNjZmUyYjgtOGZlNy00MTdjLWFjMGQtMjJiMmVmMmQ5M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwP4072bBfnORNw5f79ZV47rrxq1/DcuGTLp KQVyTCE3n9U+KBCb9QbbgKAVwYREZuzMjpvkIseunpC8WrS+mJsLMzJiVMwWR5qw khk4XKmDuAkSluW87MGTrl8+WMOEQc4HdwhmblC2ij4GRZFVa7UZLbDRmKR9Fgjj YXyiyNkWWWSkntd2HWHvwNXAm6a0+vJAG05qmTPSqYz7LuoztwXuZQKiGxS10btI rBEBpoRFJMf1zqqUBNMg7j90/CfpCoeWWheAN9+uWlnxW9untSENxISWD8q55SpL jfUgQj7bIZEbye/AvVakPh6NL2dRvRjA/l6MtjBLW7bJOrkn3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBb5DV1rcHd3TS80oHDEBdqAFdPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGU2NDg0MTMtMjZiMi0z MzM2LWExYWItODg3OWEzZjBiMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZWjNd22Cl/1Vg7UCl8ifMhFUyGmV/wqvGbmL4rdHpG6i6w7hboxdLf apalQVkFfpfolQA/OfNbzVFJjJDyFdZbGy0x8/dW5aHIYcjG0GsUsjVxHuPnhaWE 56U6iFEE7LB7uJlFlJgVve9woNksFH28tymesalh6j1iBi5meGYKz5KDtv0UCw6k gynigkrnVtH0Mqj3XALkAa+Cl8rIh/IslfYnmNA8QnBOUTGAkLnf0u8YYs3S4XpR tYuyYeImAdc8w8YJDyLjm9eHTJPucfFN86RgA7f4unLYpHRJqbNSAZE6yBFSsI9b geu1zv+vlpoNS/7OsXs9GzPKOS8ooxY= -----END CERTIFICATE-----Generated at Sun Jun 15 06:35:15 2025 by rpki-client