$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5149a6d2-936a-33b4-ba1f-e6c5d6f6fa9d.roa File: 5149a6d2-936a-33b4-ba1f-e6c5d6f6fa9d.roa (raw, json) Hash identifier: TfhKFLy01qGOICaWVZMi/jjIF0jOHO9sUzPtnAzHZlc= Subject key identifier: E2:7C:E1:B8:1B:F3:4B:68:90:D1:F9:B6:6F:AD:05:0F:7D:C1:8A:C2 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849ABB49F3CC4ECC3FD9AAF7200 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5149a6d2-936a-33b4-ba1f-e6c5d6f6fa9d.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 203724 IP address blocks: 161.69.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9f:3c:c4:ec:c3:fd:9a:af:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=e9f76190-706b-4440-8c84-1e11275ce4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:a9:60:8b:90:85:08:33:5d:59:93:46:d2: d7:af:4d:5e:98:b5:26:20:7a:77:3d:b4:4f:56:5b: d8:91:1b:da:4b:55:e5:c6:6d:16:b4:a0:92:83:37: 84:d1:1a:a4:10:c9:8d:4d:4f:59:d4:b7:e1:ac:df: f8:bc:13:28:c2:49:4e:4b:3c:30:c0:0b:20:04:fb: ee:8a:50:c2:91:f2:a9:b1:74:1d:1c:f8:84:17:45: 58:de:00:e3:24:20:35:74:80:78:be:85:f4:f0:2a: b1:bb:5d:f0:7e:01:b4:7f:cf:8a:1a:47:8f:a7:0a: ec:9e:28:a4:1d:63:58:f6:22:ee:09:12:cf:93:51: d3:c7:42:fd:f6:f2:22:a3:34:1b:14:ee:ef:e5:0b: 4e:3a:f1:ba:af:42:07:8e:3a:04:b5:c9:53:22:80: d0:d3:a4:2a:c9:aa:88:6f:32:0a:9e:d7:51:dc:b8: 04:a0:f8:85:5f:18:fd:16:53:d0:0b:44:6d:10:cb: 5b:97:2b:09:46:d6:f2:97:ad:c8:fd:03:49:5d:2b: 4a:30:4d:aa:7c:57:d9:3c:de:aa:0d:ad:dd:86:e0: fc:2a:fa:9b:69:4c:c1:16:ea:05:d4:0e:03:8b:1c: 3c:90:ee:01:5c:88:c7:7d:44:ef:30:cb:99:a0:e2: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7C:E1:B8:1B:F3:4B:68:90:D1:F9:B6:6F:AD:05:0F:7D:C1:8A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5149a6d2-936a-33b4-ba1f-e6c5d6f6fa9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f8:f7:07:0c:e5:87:b4:0a:2e:d3:0a:3d:b3:d2:a8:99:2b: db:07:09:25:ff:8e:f4:a4:49:ad:0a:61:35:92:ae:63:0d:28: de:41:5e:f5:3d:ad:e2:3c:6f:a2:d2:06:e2:2a:4e:6b:72:02: c1:0d:fe:7f:af:0d:fe:25:a7:48:6c:17:72:e6:cd:04:54:6a: cd:be:72:41:0c:6a:fd:fd:d7:22:6f:e1:a9:7d:b3:63:76:98: 2e:88:06:05:8b:72:07:2e:4f:12:0e:61:39:7d:8e:05:a2:6a: 33:d3:ff:e4:f9:b3:ed:73:ff:be:2b:d9:2c:c6:f3:c0:9a:68: 92:80:af:7f:e7:48:ec:62:aa:76:d6:63:31:e4:40:82:94:79: de:9d:c2:74:a7:68:9e:38:c4:3a:82:af:44:82:59:72:33:94: 86:38:18:67:5b:5c:3a:e9:76:57:38:0d:e6:44:a5:6b:50:f8: a7:7a:34:62:43:a0:e9:ed:bc:a2:d3:64:7f:39:6a:12:e3:d4: 5c:1b:08:b6:23:5b:75:cd:69:00:0c:df:fd:18:43:5c:40:de: 72:fb:a5:6f:3f:24:54:1c:55:af:03:69:fd:49:58:0b:4b:91: 52:c7:85:5b:20:80:8a:7b:ce:59:ab:6d:6b:1e:a1:da:61:6f: 48:4b:31:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJ88xOzD/ZqvcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZTlmNzYxOTAtNzA2Yi00NDQwLThjODQtMWUxMTI3NWNlNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX+pYIuQhQgzXVmTRtLXr01emLUmIHp3PbRP VlvYkRvaS1Xlxm0WtKCSgzeE0RqkEMmNTU9Z1LfhrN/4vBMowklOSzwwwAsgBPvu ilDCkfKpsXQdHPiEF0VY3gDjJCA1dIB4voX08Cqxu13wfgG0f8+KGkePpwrsniik HWNY9iLuCRLPk1HTx0L99vIiozQbFO7v5QtOOvG6r0IHjjoEtclTIoDQ06QqyaqI bzIKntdR3LgEoPiFXxj9FlPQC0RtEMtblysJRtbyl63I/QNJXStKME2qfFfZPN6q Da3dhuD8KvqbaUzBFuoF1A4Dixw8kO4BXIjHfUTvMMuZoOJg4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ84bgb80tokNH5tm+tBQ99wYrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNTE0OWE2ZDItOTM2YS0z M2I0LWJhMWYtZTZjNWQ2ZjZmYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv49wcM5Ye0Ci7TCj2z0qiZK9sHCSX/jvSkSa0KYTWSrmMNKN5BXvU9 reI8b6LSBuIqTmtyAsEN/n+vDf4lp0hsF3LmzQRUas2+ckEMav391yJv4al9s2N2 mC6IBgWLcgcuTxIOYTl9jgWiajPT/+T5s+1z/74r2SzG88CaaJKAr3/nSOxiqnbW YzHkQIKUed6dwnSnaJ44xDqCr0SCWXIzlIY4GGdbXDrpdlc4DeZEpWtQ+Kd6NGJD oOntvKLTZH85ahLj1FwbCLYjW3XNaQAM3/0YQ1xA3nL7pW8/JFQcVa8Daf1JWAtL kVLHhVsggIp7zlmrbWseodphb0hLMa8= -----END CERTIFICATE-----Generated at Tue Apr 29 02:21:49 2025 by rpki-client