$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b10e6b4f-d9a7-3793-acfe-e5971c9d8e66.roa File: b10e6b4f-d9a7-3793-acfe-e5971c9d8e66.roa (raw, json) Hash identifier: BnFxXs+XBLHv6SkapkQ/Xx+5r0+opq94O/aTFtjsuQ4= Subject key identifier: 32:83:AF:F9:6F:85:8C:FB:D1:AC:23:A5:0F:85:E0:74:18:A9:2B:FD Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849A61F3F3AC0314FC76D13DE80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b10e6b4f-d9a7-3793-acfe-e5971c9d8e66.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 161.69.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3f:3a:c0:31:4f:c7:6d:13:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=51c9c911-db55-434e-b49f-7fe4a4ab5f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:27:dc:d4:d9:79:6c:ef:00:ad:cd:45:e2:14: a7:d6:68:c2:69:83:75:13:9e:20:37:a6:c3:aa:fc: 95:5f:fe:19:eb:0c:0c:d3:34:9f:4a:22:2c:7c:8b: 26:9f:a4:70:08:e5:16:8a:bc:47:88:25:48:df:71: 07:6d:d7:62:09:39:11:6c:07:f8:01:d0:a9:3d:2c: 09:b1:7a:dd:68:2c:fb:b5:41:6f:ed:5c:91:ff:96: 59:b4:54:57:be:a5:95:65:db:1a:d3:14:55:25:6f: c7:18:3b:f0:dd:de:ba:2a:05:18:37:e5:70:16:5b: 06:b7:12:d6:21:b4:55:92:55:46:d4:3c:da:b1:e5: e9:ca:f0:b8:8a:e3:25:cd:2d:2b:1c:fc:10:b9:ee: 58:98:43:73:0c:85:9b:f5:64:e7:7f:a7:10:5e:1f: 47:40:28:ad:c1:a1:f1:1b:3b:d9:9b:7c:1a:a7:c2: a6:8a:e2:e4:d4:c6:d2:98:b2:1d:52:ce:5a:73:38: 02:3d:46:5d:2b:35:7c:48:bd:88:52:54:c5:16:23: 29:9e:2f:e6:ca:47:ea:b4:31:72:e4:31:0f:73:02: e5:34:8e:de:0e:22:07:cf:55:17:a6:84:87:96:c4: 22:a1:6b:b3:f6:11:a6:71:d8:8c:cc:bd:c9:ec:75: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:83:AF:F9:6F:85:8C:FB:D1:AC:23:A5:0F:85:E0:74:18:A9:2B:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b10e6b4f-d9a7-3793-acfe-e5971c9d8e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c7:4e:61:15:e1:ae:57:f4:b4:2e:39:3a:f1:04:97:84:7b: 81:8d:97:ec:eb:57:7d:48:6d:4f:8a:3a:05:1a:1b:5f:d4:10: 02:ba:ef:1d:27:84:ef:d4:d4:15:43:70:bf:b7:7b:76:50:05: b3:46:1e:33:72:01:74:e3:6b:a2:17:59:13:e0:6a:1b:41:52: 85:23:3b:f6:04:29:74:a3:be:46:40:eb:da:2f:94:ae:21:4e: 1b:b4:ca:af:8c:53:e1:fa:b9:fe:bb:0d:2f:07:65:e7:6f:c8: 93:92:fb:e1:b3:f5:3a:a9:58:24:4f:a6:11:01:0c:14:75:6d: ac:d6:84:1c:d4:0b:ac:8b:e0:69:52:ae:1a:ab:83:34:dd:5d: 25:46:f7:62:cf:cd:c6:8b:97:6e:fb:5c:88:1d:fb:a3:f6:eb: 3e:fd:03:22:93:ab:91:7a:69:d1:21:bb:af:6e:dd:6d:59:ae: b7:7f:ea:2d:b3:62:5c:62:d9:e4:ef:ee:7f:9a:6a:89:17:d3: 11:bf:8e:a3:25:18:80:d9:7a:fa:b9:07:21:35:80:49:a9:f3: a8:d2:76:5d:3c:47:99:86:10:23:d2:43:fd:e4:cb:1e:26:ac: 61:29:3d:89:0b:5c:4d:38:5c:20:a9:b1:14:f3:79:08:75:f6: 90:37:43:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz86wDFPx20T3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NTFjOWM5MTEtZGI1NS00MzRlLWI0OWYtN2ZlNGE0YWI1ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzifc1Nl5bO8Arc1F4hSn1mjCaYN1E54gN6bD qvyVX/4Z6wwM0zSfSiIsfIsmn6RwCOUWirxHiCVI33EHbddiCTkRbAf4AdCpPSwJ sXrdaCz7tUFv7VyR/5ZZtFRXvqWVZdsa0xRVJW/HGDvw3d66KgUYN+VwFlsGtxLW IbRVklVG1DzaseXpyvC4iuMlzS0rHPwQue5YmENzDIWb9WTnf6cQXh9HQCitwaHx GzvZm3wap8KmiuLk1MbSmLIdUs5aczgCPUZdKzV8SL2IUlTFFiMpni/mykfqtDFy 5DEPcwLlNI7eDiIHz1UXpoSHlsQioWuz9hGmcdiMzL3J7HVUBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKDr/lvhYz70awjpQ+F4HQYqSv9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjEwZTZiNGYtZDlhNy0z NzkzLWFjZmUtZTU5NzFjOWQ4ZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArHTmEV4a5X9LQuOTrxBJeEe4GNl+zrV31IbU+KOgUaG1/UEAK67x0n hO/U1BVDcL+3e3ZQBbNGHjNyAXTja6IXWRPgahtBUoUjO/YEKXSjvkZA69ovlK4h Thu0yq+MU+H6uf67DS8HZedvyJOS++Gz9TqpWCRPphEBDBR1bazWhBzUC6yL4GlS rhqrgzTdXSVG92LPzcaLl277XIgd+6P26z79AyKTq5F6adEhu69u3W1Zrrd/6i2z Ylxi2eTv7n+aaokX0xG/jqMlGIDZevq5ByE1gEmp86jSdl08R5mGECPSQ/3kyx4m rGEpPYkLXE04XCCpsRTzeQh19pA3Qws= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:27 2025 by rpki-client