$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa File: f738af2e-6574-3997-a029-ee3b01e5ca5c.roa (raw, json) Hash identifier: MYeC491hS2MY+JhoaRCTbaZrLoRvdxdkxq3oxkNxq+o= Subject key identifier: 54:A3:B1:F4:F2:9B:8B:CA:E1:5C:CE:AE:D1:E2:71:83:55:85:34:1F Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F07F2EB94D5571BA3B2E0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 161.69.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:07:f2:eb:94:d5:57:1b:a3:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=69220c79-3a1e-4caf-9bba-68a22ddd468d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:8d:8b:45:d4:7a:ad:11:c4:19:0a:cd:1c: 66:9a:fc:c5:81:9f:40:7c:35:3c:0a:a7:ee:75:be: fe:78:f3:be:5d:4c:c9:32:7e:37:0e:b9:44:8d:86: 7d:5f:91:ca:25:c6:cf:e7:db:06:d9:01:ac:d3:21: fc:0b:73:19:83:4e:9f:52:7c:55:05:aa:7f:23:a6: e9:ec:18:c9:fe:68:3e:58:b5:68:ac:07:6e:c4:05: f5:07:25:a1:53:dd:72:46:bd:d5:ce:46:92:24:9d: 3a:ad:48:ce:d3:60:16:8a:49:c2:53:0f:50:7f:da: be:b6:5f:6a:9f:bd:59:c3:1a:51:74:a8:3d:b4:7e: 78:08:04:e8:94:46:c3:c0:89:33:56:39:90:48:b9: 67:98:69:5c:9c:6b:d5:78:a5:5a:a9:19:00:b7:21: e4:0e:d6:e9:d0:6c:c1:51:9e:f6:ff:56:94:c0:ad: 50:0e:5f:10:39:85:24:2e:19:1f:b6:34:7b:5d:31: de:b1:53:40:fe:74:d7:60:8b:1e:b0:c3:2d:b3:e2: 7a:ab:9c:84:f8:b9:56:a7:92:da:51:15:14:d0:98: 91:3c:60:a1:77:2e:f2:e7:ca:99:11:37:dc:4d:97: cc:95:4c:f6:00:4c:10:03:e1:62:0b:27:79:fe:40: de:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A3:B1:F4:F2:9B:8B:CA:E1:5C:CE:AE:D1:E2:71:83:55:85:34:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f738af2e-6574-3997-a029-ee3b01e5ca5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d7:93:aa:66:83:80:3a:93:c2:20:45:93:26:7d:95:b0:c3: 21:8c:65:fa:9c:4c:76:c1:f3:d1:54:2f:74:cd:48:ab:49:7d: 7c:b1:d6:0e:d9:d1:ac:da:5c:72:3d:bb:20:49:0c:18:8c:af: 8b:3d:c5:6c:4f:19:68:fb:b6:60:dd:2a:f5:b4:e0:05:51:fc: 87:7a:7e:c8:33:ac:45:3d:e8:38:2a:91:f8:ff:c5:ef:89:84: c3:45:a6:c9:52:74:be:39:f6:ee:de:04:1a:2d:19:be:ca:c9: cf:aa:4d:2c:14:83:65:3b:d5:50:55:49:21:74:65:bd:cb:f4: 85:c5:ea:ff:a5:a3:a6:a4:25:df:e3:83:20:d6:31:0c:96:a5: 76:cc:83:9b:fa:73:5d:bd:d1:59:33:8d:4e:67:64:6e:a3:2d: 09:66:b7:bc:35:30:47:99:72:83:02:86:e0:88:63:17:6e:2e: 61:f8:1a:71:a7:b8:26:8e:72:03:31:b6:6d:21:21:4e:cb:72: d7:8b:49:3c:36:29:e1:55:4f:80:d0:41:00:ef:f1:fd:6e:bb: bf:8e:72:e9:76:d4:a8:59:68:b9:8d:b5:aa:e7:d8:96:10:18: 80:c6:d2:da:0f:45:c9:81:a5:ae:17:85:24:f0:6d:51:14:65: bc:7e:d9:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dwfy65TVVxujsuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NjkyMjBjNzktM2ExZS00Y2FmLTliYmEtNjhhMjJkZGQ0NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlONi0XUeq0RxBkKzRxmmvzFgZ9AfDU8Cqfu db7+ePO+XUzJMn43DrlEjYZ9X5HKJcbP59sG2QGs0yH8C3MZg06fUnxVBap/I6bp 7BjJ/mg+WLVorAduxAX1ByWhU91yRr3VzkaSJJ06rUjO02AWiknCUw9Qf9q+tl9q n71ZwxpRdKg9tH54CATolEbDwIkzVjmQSLlnmGlcnGvVeKVaqRkAtyHkDtbp0GzB UZ72/1aUwK1QDl8QOYUkLhkftjR7XTHesVNA/nTXYIsesMMts+J6q5yE+LlWp5La URUU0JiRPGChdy7y58qZETfcTZfMlUz2AEwQA+FiCyd5/kDe6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSjsfTym4vK4VzOrtHicYNVhTQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjczOGFmMmUtNjU3NC0z OTk3LWEwMjktZWUzYjAxZTVjYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHXk6pmg4A6k8IgRZMmfZWwwyGMZfqcTHbB89FUL3TNSKtJfXyx1g7Z 0azaXHI9uyBJDBiMr4s9xWxPGWj7tmDdKvW04AVR/Id6fsgzrEU96Dgqkfj/xe+J hMNFpslSdL459u7eBBotGb7Kyc+qTSwUg2U71VBVSSF0Zb3L9IXF6v+lo6akJd/j gyDWMQyWpXbMg5v6c1290VkzjU5nZG6jLQlmt7w1MEeZcoMChuCIYxduLmH4GnGn uCaOcgMxtm0hIU7LcteLSTw2KeFVT4DQQQDv8f1uu7+Ocul21KhZaLmNtarn2JYQ GIDG0toPRcmBpa4XhSTwbVEUZbx+2fM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:46 2025 by rpki-client