$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/974e4677-fbaf-3bc4-98a8-9ca552317852.roa File: 974e4677-fbaf-3bc4-98a8-9ca552317852.roa (raw, json) Hash identifier: wXvck9Z1zffkzsTD1DZby+sRvbbNCYe1l5ZlQIZb9qI= Subject key identifier: 05:21:C5:23:37:F7:EB:A1:7A:5F:6E:E4:09:B1:DE:C6:31:DC:C8:64 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F0613B7841489765FA500 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/974e4677-fbaf-3bc4-98a8-9ca552317852.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 203724 IP address blocks: 161.69.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:06:13:b7:84:14:89:76:5f:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=2a34e8e7-5dea-49e5-8cb0-d92e15882412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e2:82:4c:53:db:86:9f:dd:bf:c0:09:d5:82: a1:3a:9b:ee:29:55:bb:5c:a1:d9:90:e6:28:32:d7: f3:70:7c:c8:49:bd:eb:e5:ec:9d:05:e0:fb:73:1a: 39:69:71:71:f6:3d:3d:90:91:f4:a8:2e:b7:96:f5: ae:2b:7e:62:70:8f:96:44:bf:1c:24:56:47:fc:bd: 13:3d:cd:7e:0b:6c:57:cc:21:35:fa:78:2d:07:14: 49:fd:1f:05:67:f1:20:e0:24:79:f1:54:29:37:0f: d2:51:de:3c:0e:79:1b:11:65:ea:3c:56:72:df:3d: 12:d8:55:c6:9b:1a:38:8d:7e:bc:4e:50:91:7e:06: 29:18:fa:f2:7e:ba:54:bb:04:e2:2a:9b:6e:be:ee: e6:1b:c9:2a:37:ce:46:80:92:20:0e:30:55:ee:9a: 4b:70:1e:05:94:ed:80:61:e5:2d:8f:91:29:86:71: 42:a2:e1:8e:90:b7:53:19:92:ce:12:c1:b9:cf:ec: 22:aa:84:dc:79:bd:14:98:23:99:bb:4a:fa:76:19: 3e:54:58:e2:7d:0b:55:fa:41:28:29:d9:66:d2:c2: 7b:0c:2a:af:84:c9:67:18:cd:70:b0:a7:6a:02:a1: 64:ab:27:6e:c8:b3:6b:ef:26:91:fa:8b:81:2f:ef: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:21:C5:23:37:F7:EB:A1:7A:5F:6E:E4:09:B1:DE:C6:31:DC:C8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/974e4677-fbaf-3bc4-98a8-9ca552317852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ec:e0:3b:9e:30:99:9f:d7:bb:1f:92:17:45:ac:8f:03:8b: f5:6b:dd:a3:9d:23:ac:62:59:b3:6c:ee:46:8d:e6:c0:3f:f1: b8:e7:c6:67:35:ca:2a:52:73:11:ed:bc:01:c7:25:1c:4d:78: 56:d5:93:10:c1:00:f5:b1:8e:5a:6b:b1:76:35:a9:e0:88:e3: ca:b7:ab:cf:fd:93:fe:85:38:79:ad:fb:72:9c:d8:25:f1:d9: 1a:d3:67:15:2a:58:03:83:35:a7:15:1e:02:0c:ce:16:9b:6c: ff:68:70:c2:d1:e5:74:09:c6:0b:57:8a:be:41:6f:55:f5:f0: f0:53:eb:93:2d:3c:12:a8:a7:d7:e5:9d:05:91:a2:45:92:5c: 4f:bf:f1:f9:f6:1e:46:95:87:86:74:b5:6f:a1:d2:6f:fe:b5: b9:90:8b:1d:25:c3:dc:2f:0e:c7:9f:f8:8e:2b:d0:87:65:4e: 61:9e:12:7f:f0:93:4f:14:c4:b1:af:e9:ba:77:1e:91:1c:ea: d7:e2:3a:fa:77:a4:9d:67:91:c9:b8:a5:1c:1a:47:76:64:8d: 5b:fd:6d:ed:f4:43:0a:82:68:00:2f:87:f6:4b:06:b1:c6:0d: f4:b5:9b:11:8b:28:d4:97:aa:5f:d0:7d:0a:8f:02:d3:c0:41: 60:4a:e0:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwYTt4QUiXZfpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MmEzNGU4ZTctNWRlYS00OWU1LThjYjAtZDkyZTE1ODgyNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+KCTFPbhp/dv8AJ1YKhOpvuKVW7XKHZkOYo MtfzcHzISb3r5eydBeD7cxo5aXFx9j09kJH0qC63lvWuK35icI+WRL8cJFZH/L0T Pc1+C2xXzCE1+ngtBxRJ/R8FZ/Eg4CR58VQpNw/SUd48DnkbEWXqPFZy3z0S2FXG mxo4jX68TlCRfgYpGPryfrpUuwTiKptuvu7mG8kqN85GgJIgDjBV7ppLcB4FlO2A YeUtj5EphnFCouGOkLdTGZLOEsG5z+wiqoTceb0UmCOZu0r6dhk+VFjifQtV+kEo Kdlm0sJ7DCqvhMlnGM1wsKdqAqFkqyduyLNr7yaR+ouBL++VFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUhxSM39+uhel9u5Amx3sYx3MhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvOTc0ZTQ2NzctZmJhZi0z YmM0LTk4YTgtOWNhNTUyMzE3ODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHs4DueMJmf17sfkhdFrI8Di/Vr3aOdI6xiWbNs7kaN5sA/8bjnxmc1 yipScxHtvAHHJRxNeFbVkxDBAPWxjlprsXY1qeCI48q3q8/9k/6FOHmt+3Kc2CXx 2RrTZxUqWAODNacVHgIMzhabbP9ocMLR5XQJxgtXir5Bb1X18PBT65MtPBKop9fl nQWRokWSXE+/8fn2HkaVh4Z0tW+h0m/+tbmQix0lw9wvDsef+I4r0IdlTmGeEn/w k08UxLGv6bp3HpEc6tfiOvp3pJ1nkcm4pRwaR3ZkjVv9be30QwqCaAAvh/ZLBrHG DfS1mxGLKNSXql/QfQqPAtPAQWBK4Hc= -----END CERTIFICATE-----Generated at Sun Apr 27 22:05:57 2025 by rpki-client