$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa File: 6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa (raw, json) Hash identifier: QlJPCQC2g+qGkKZ8Ff9m3pNRTaH50NxZ4SkJJg4OV8k= Subject key identifier: 6E:44:FF:A5:BB:58:B9:DD:6E:55:81:D1:5B:87:C9:36:75:DF:47:DC Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F0D3835F1F4C0829E6320 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 203724 IP address blocks: 161.69.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0d:38:35:f1:f4:c0:82:9e:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=2bc569df-de07-41ba-8810-143c45441f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dc:07:dc:13:35:69:58:2d:5d:a0:2d:1e:b8: 78:d1:34:0a:dc:a0:d3:23:b3:d9:7a:7f:60:d7:cf: 8d:90:6e:3f:5d:59:2f:2a:4d:01:36:25:d1:cd:79: 7d:49:ca:5c:3e:fa:f9:e6:a6:18:75:60:a7:20:aa: bb:89:a9:55:52:2a:ae:6c:51:13:6a:84:3b:39:9b: df:e0:a7:2d:f3:f3:b9:36:e2:89:00:ea:dd:8e:5c: 6a:5e:6c:d0:ae:7b:9d:e3:40:03:b7:8c:3d:ee:d2: d9:91:00:1d:b5:3a:2f:eb:f3:cb:fd:93:36:54:e0: 06:2b:bc:4c:4f:5a:6e:35:3c:d3:d7:4c:07:48:cd: 27:23:77:4f:48:a3:36:29:e5:e6:a7:47:b0:30:6a: 3f:24:f5:7e:e7:09:95:1e:9e:dd:9e:06:56:11:7c: d1:82:2f:56:5d:65:54:63:3c:85:63:0f:99:57:46: 27:dd:a8:b6:d4:0a:eb:cf:25:fa:f2:9f:6f:11:c8: b7:cd:c4:c1:90:63:38:c3:3c:62:8a:56:fd:c6:6f: b3:18:aa:76:62:94:91:35:9d:b8:19:af:4b:83:90: 17:b6:24:d2:32:65:42:cd:25:3f:00:a1:f1:8c:d4: 32:5e:63:1a:41:4a:b5:61:57:bd:bd:7a:e5:22:ca: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:44:FF:A5:BB:58:B9:DD:6E:55:81:D1:5B:87:C9:36:75:DF:47:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:db:ab:ef:6e:d2:20:a7:29:b1:28:e8:e5:27:2d:4a:bd:97: 1c:4f:48:a0:56:79:35:8a:d8:cd:05:f0:f1:55:48:d5:e2:25: 3c:77:3a:b0:36:7e:90:bd:33:f7:f8:9a:a5:6e:12:05:73:b8: e4:57:40:a8:74:81:0a:61:a9:b4:bb:2e:22:2c:5b:e0:c9:f4: b1:74:ce:c3:76:64:8e:d0:80:21:4c:bb:42:6d:61:23:ee:d4: 9d:9e:bd:d7:58:09:98:ac:3d:69:bf:75:a3:6f:ef:14:66:de: d9:3a:cb:d5:83:b3:68:44:58:b5:ba:9c:16:09:1e:c9:93:eb: 94:05:e1:b3:d3:34:ff:3e:7c:a7:79:dc:c0:29:b9:a3:c5:d4: 21:8b:08:df:cb:99:f8:3c:7a:b7:31:09:11:eb:76:03:c0:26: ab:8a:62:74:76:79:eb:13:3d:00:74:ff:a5:54:3f:89:fd:f9: 7d:61:6b:47:44:71:8a:37:8e:cd:01:b3:f2:c5:a9:1d:e6:48: 62:9d:73:f9:c4:fc:6c:fe:ca:05:94:b9:d6:0f:2e:6e:51:1c: f8:c9:9a:3b:ab:ea:28:c8:af:11:59:3d:b2:c5:d4:0f:f3:aa: cd:96:65:23:39:b2:2e:a2:01:b2:96:cb:43:92:59:fe:4e:05: fb:3e:eb:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dw04NfH0wIKeYyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MmJjNTY5ZGYtZGUwNy00MWJhLTg4MTAtMTQzYzQ1NDQxZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNwH3BM1aVgtXaAtHrh40TQK3KDTI7PZen9g 18+NkG4/XVkvKk0BNiXRzXl9ScpcPvr55qYYdWCnIKq7ialVUiqubFETaoQ7OZvf 4Kct8/O5NuKJAOrdjlxqXmzQrnud40ADt4w97tLZkQAdtTov6/PL/ZM2VOAGK7xM T1puNTzT10wHSM0nI3dPSKM2KeXmp0ewMGo/JPV+5wmVHp7dngZWEXzRgi9WXWVU YzyFYw+ZV0Yn3ai21ArrzyX68p9vEci3zcTBkGM4wzxiilb9xm+zGKp2YpSRNZ24 Ga9Lg5AXtiTSMmVCzSU/AKHxjNQyXmMaQUq1YVe9vXrlIsp+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5E/6W7WLndblWB0VuHyTZ130fcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNmRjOTVhN2MtMTU0Ni0z ZmQ0LTg4N2ItN2NhMWUxMmE4YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3bq+9u0iCnKbEo6OUnLUq9lxxPSKBWeTWK2M0F8PFVSNXiJTx3OrA2 fpC9M/f4mqVuEgVzuORXQKh0gQphqbS7LiIsW+DJ9LF0zsN2ZI7QgCFMu0JtYSPu 1J2evddYCZisPWm/daNv7xRm3tk6y9WDs2hEWLW6nBYJHsmT65QF4bPTNP8+fKd5 3MApuaPF1CGLCN/Lmfg8ercxCRHrdgPAJquKYnR2eesTPQB0/6VUP4n9+X1ha0dE cYo3js0Bs/LFqR3mSGKdc/nE/Gz+ygWUudYPLm5RHPjJmjur6ijIrxFZPbLF1A/z qs2WZSM5si6iAbKWy0OSWf5OBfs+6wI= -----END CERTIFICATE-----Generated at Mon Apr 28 23:33:29 2025 by rpki-client