$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa File: 68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa (raw, json) Hash identifier: DLdgB3p7REHrxmSs5eMVjQb23sY4vb1V9jyIwzzVGlM= Subject key identifier: 8B:F7:FC:1F:06:F4:DB:23:D2:C4:E2:72:9D:9D:B1:92:14:94:39:16 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F0C22AC39B00264B8AC40 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 203724 IP address blocks: 161.69.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0c:22:ac:39:b0:02:64:b8:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=e8165bed-d3dc-42f7-806a-84ae89e4d960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:4c:f0:c4:4d:63:21:46:1d:73:5d:4e:7f: d2:9c:a4:cc:87:ff:c6:c3:3d:93:3d:7b:d6:df:09: 98:68:8e:6b:d0:82:49:6c:45:cb:89:ff:54:fb:12: f8:9c:96:90:46:7c:9d:7c:2b:ea:38:91:77:bc:8e: b6:2f:50:71:7d:96:27:c6:de:b7:93:3c:88:a7:33: e5:90:bd:7b:81:4e:dd:0e:11:97:94:ca:bc:98:11: d4:3e:0b:0d:77:62:a5:a4:41:6c:3e:3e:94:44:45: 45:1b:5a:35:01:5b:16:ab:b0:cc:6c:c1:e5:14:45: 23:c1:62:a3:3c:ef:e0:7c:13:e1:52:2d:e7:c5:25: 7a:fb:f9:2f:41:96:b0:3a:80:4a:e4:65:ce:33:16: d5:0d:90:c0:53:b3:20:4a:37:81:76:09:33:c2:1c: 15:7a:bb:15:55:d4:16:e3:54:89:5c:eb:da:60:8b: 93:3a:33:be:1c:12:e5:9f:4b:b2:0c:4b:dd:3e:a0: e7:29:92:b0:01:fa:0c:65:cb:ff:c5:5b:ed:7e:e5: 88:89:b1:81:36:d8:05:c4:e0:2e:e9:fe:f3:ff:73: 22:a6:b9:4a:ad:97:0c:7d:d2:d2:19:c5:61:ce:e7: 21:4a:54:b1:c6:84:d6:a8:62:b6:3f:65:30:b7:13: f8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F7:FC:1F:06:F4:DB:23:D2:C4:E2:72:9D:9D:B1:92:14:94:39:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:30:7f:f9:3d:98:49:aa:d4:73:58:82:2f:41:34:06:ef:c5: 06:99:54:39:43:64:66:73:04:35:fc:ca:d0:72:d9:ea:fe:93: a0:7f:a8:1c:fb:a0:0e:8d:52:34:75:af:62:75:91:71:ba:79: 14:d2:34:ac:ca:00:0c:66:99:a3:65:e1:29:71:0d:38:4f:03: 7d:03:5d:91:2c:9e:8d:b8:07:d4:a5:8d:77:09:77:0a:9c:87: 7c:50:eb:ff:90:06:6c:5f:eb:31:e8:2a:36:ea:c2:c1:51:0b: 41:fd:00:e5:88:fa:47:84:83:19:46:ed:6c:f1:91:93:84:ba: 5a:2f:5e:cf:50:87:cf:74:83:ec:bb:00:d1:01:f9:f1:53:1e: 0f:c9:23:87:83:61:26:3f:bc:f2:1f:02:6c:d1:6e:e6:af:d7: ab:68:59:2b:aa:23:6e:6b:30:44:6b:15:48:99:da:f7:88:54: 70:90:89:3d:ab:0b:f2:1d:cf:ff:86:39:36:ed:10:8e:1b:3f: 0f:f4:e2:3e:92:aa:17:a7:2b:d6:49:b7:40:28:f5:bb:e3:f1: 15:66:d1:ba:dc:eb:6a:29:99:03:d4:13:a1:c9:c4:d4:c3:e8: b7:4d:0b:f1:df:5c:c7:cb:80:35:ad:47:b4:16:bb:aa:e6:6d: 12:3e:93:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwwirDmwAmS4rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ZTgxNjViZWQtZDNkYy00MmY3LTgwNmEtODRhZTg5ZTRkOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUtM8MRNYyFGHXNdTn/SnKTMh//Gwz2TPXvW 3wmYaI5r0IJJbEXLif9U+xL4nJaQRnydfCvqOJF3vI62L1BxfZYnxt63kzyIpzPl kL17gU7dDhGXlMq8mBHUPgsNd2KlpEFsPj6UREVFG1o1AVsWq7DMbMHlFEUjwWKj PO/gfBPhUi3nxSV6+/kvQZawOoBK5GXOMxbVDZDAU7MgSjeBdgkzwhwVersVVdQW 41SJXOvaYIuTOjO+HBLln0uyDEvdPqDnKZKwAfoMZcv/xVvtfuWIibGBNtgFxOAu 6f7z/3MiprlKrZcMfdLSGcVhzuchSlSxxoTWqGK2P2UwtxP4/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv3/B8G9Nsj0sTicp2dsZIUlDkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNjgzMzgzMTEtMDhmOC0z ZjJlLThjZGYtNTEwY2ZhMGZjZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcwf/k9mEmq1HNYgi9BNAbvxQaZVDlDZGZzBDX8ytBy2er+k6B/qBz7 oA6NUjR1r2J1kXG6eRTSNKzKAAxmmaNl4SlxDThPA30DXZEsno24B9SljXcJdwqc h3xQ6/+QBmxf6zHoKjbqwsFRC0H9AOWI+keEgxlG7WzxkZOEulovXs9Qh890g+y7 ANEB+fFTHg/JI4eDYSY/vPIfAmzRbuav16toWSuqI25rMERrFUiZ2veIVHCQiT2r C/Idz/+GOTbtEI4bPw/04j6SqhenK9ZJt0Ao9bvj8RVm0brc62opmQPUE6HJxNTD 6LdNC/HfXMfLgDWtR7QWu6rmbRI+k8U= -----END CERTIFICATE-----Generated at Mon Apr 28 00:03:40 2025 by rpki-client