$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa401d64-29b4-3588-8961-f065e07b0734.roa File: fa401d64-29b4-3588-8961-f065e07b0734.roa (raw, json) Hash identifier: b3kjKKjbI6y0swIK6HwdR2rxPCoXmqGEMtD6szTnXeA= Subject key identifier: 12:16:79:F8:7D:02:AC:45:94:9C:20:A4:4D:38:43:4F:9E:28:13:9D Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F05CB999A1869C6CBCA30 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa401d64-29b4-3588-8961-f065e07b0734.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 161.69.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:05:cb:99:9a:18:69:c6:cb:ca:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=fd6dd4c1-f06b-48e9-9bfd-06105f3579e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4b:a7:2d:19:66:af:69:b5:b2:12:f7:ed:32: ff:07:4d:9d:f2:87:6e:e5:17:49:c6:e0:51:f9:4c: 21:bd:12:a1:01:a8:d7:78:ef:ec:14:a8:2c:a1:a4: 66:cf:bb:4a:cc:c3:46:91:be:ab:85:86:f0:2e:74: 19:07:14:0f:90:72:b8:3d:a4:51:ca:c3:fe:87:98: e9:d3:32:b8:13:1e:85:ff:64:ce:1d:35:82:0d:a3: ed:54:ed:a0:d2:bf:c6:ac:8d:77:cf:72:92:b4:e1: ed:ce:9b:1a:61:a7:52:09:95:fe:2c:e3:cd:72:d7: 32:9b:a0:7a:68:67:bf:70:f7:43:4c:3b:72:aa:31: 1e:b6:27:28:62:6f:09:c6:2c:8f:83:be:21:fa:28: 90:6a:16:cf:80:b0:b3:3e:23:46:27:66:e1:5b:13: c5:80:19:29:df:fa:21:b9:33:3e:1a:4f:2e:5b:11: 3b:43:7a:84:79:0f:49:16:fe:d7:35:b3:10:60:19: 75:3e:d4:4a:ac:68:b1:69:4e:20:5f:25:8e:59:2b: 23:08:3c:e5:9d:a9:fc:55:e7:15:7d:bf:39:33:03: 82:33:27:0f:0e:7d:29:fd:44:cb:24:bd:cc:41:1b: e2:86:e5:d5:74:74:6d:8a:80:33:14:7b:b4:f4:4a: a4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:16:79:F8:7D:02:AC:45:94:9C:20:A4:4D:38:43:4F:9E:28:13:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fa401d64-29b4-3588-8961-f065e07b0734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:90:94:00:fc:f5:e4:7e:07:44:15:a8:f9:ae:2e:0d:11:12: 05:8b:41:d0:ff:10:5b:e0:1b:8e:87:c3:fc:5a:a5:af:40:bb: c4:b6:02:8a:d1:61:c8:37:d0:36:e7:8a:03:ef:26:fc:c1:5c: 27:db:30:32:41:c7:08:6d:1c:ae:c5:19:6a:f0:40:6e:cb:fe: 62:4c:39:7a:60:e9:b8:6d:c1:d7:dd:11:ac:6a:f4:a0:0a:f9: 7f:6e:5c:56:0d:b2:46:62:2e:80:3d:6c:a1:64:0e:a1:c3:54: 7c:a6:fe:76:84:28:63:e0:ef:96:f9:7d:a9:52:59:d0:b1:43: 00:fe:d4:a5:0c:48:11:d3:d1:cf:b0:9f:0c:ee:3f:29:05:f0: b3:68:cf:de:ca:4f:12:98:73:84:15:86:33:38:66:32:5f:26: 3d:f5:96:45:72:53:de:cc:92:51:a2:13:33:9a:b1:02:0e:89: 0f:c4:cf:94:f1:37:2b:51:5f:3a:38:5f:10:22:a3:c2:52:d2: 31:ae:c2:05:f5:a7:02:eb:47:39:8a:d3:dd:db:01:90:e4:0f: b5:48:00:1e:66:62:f2:aa:21:42:5f:13:dd:fc:32:45:ba:a7: 02:16:5c:59:5f:b7:8e:12:c1:da:d1:55:51:c7:60:8c:c0:ff: 8f:ab:61:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwXLmZoYacbLyjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ZmQ2ZGQ0YzEtZjA2Yi00OGU5LTliZmQtMDYxMDVmMzU3OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkunLRlmr2m1shL37TL/B02d8odu5RdJxuBR +UwhvRKhAajXeO/sFKgsoaRmz7tKzMNGkb6rhYbwLnQZBxQPkHK4PaRRysP+h5jp 0zK4Ex6F/2TOHTWCDaPtVO2g0r/GrI13z3KStOHtzpsaYadSCZX+LOPNctcym6B6 aGe/cPdDTDtyqjEeticoYm8JxiyPg74h+iiQahbPgLCzPiNGJ2bhWxPFgBkp3/oh uTM+Gk8uWxE7Q3qEeQ9JFv7XNbMQYBl1PtRKrGixaU4gXyWOWSsjCDzlnan8VecV fb85MwOCMycPDn0p/UTLJL3MQRvihuXVdHRtioAzFHu09EqkfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIWefh9AqxFlJwgpE04Q0+eKBOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZmE0MDFkNjQtMjliNC0z NTg4LTg5NjEtZjA2NWUwN2IwNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCQlAD89eR+B0QVqPmuLg0REgWLQdD/EFvgG46Hw/xapa9Au8S2AorR Ycg30DbnigPvJvzBXCfbMDJBxwhtHK7FGWrwQG7L/mJMOXpg6bhtwdfdEaxq9KAK +X9uXFYNskZiLoA9bKFkDqHDVHym/naEKGPg75b5falSWdCxQwD+1KUMSBHT0c+w nwzuPykF8LNoz97KTxKYc4QVhjM4ZjJfJj31lkVyU97MklGiEzOasQIOiQ/Ez5Tx NytRXzo4XxAio8JS0jGuwgX1pwLrRzmK093bAZDkD7VIAB5mYvKqIUJfE938MkW6 pwIWXFlft44SwdrRVVHHYIzA/4+rYQ8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:45 2025 by rpki-client