$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d73b186f-1b89-35f6-bf6c-fdf86f6a5be7.roa File: d73b186f-1b89-35f6-bf6c-fdf86f6a5be7.roa (raw, json) Hash identifier: CqFrPKWudlQxgvjzuwLTdstuYtQIYjxPZzidqyYJeEk= Subject key identifier: F1:F9:DF:4F:4C:AC:00:9D:8A:FA:0E:80:BB:FF:2E:51:A3:61:DC:63 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D601B578867E526993C480 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d73b186f-1b89-35f6-bf6c-fdf86f6a5be7.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 161.69.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:01:b5:78:86:7e:52:69:93:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=1ecd1430-4fd1-4f04-a4b2-9c9cc36d524e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:2a:5f:f6:9e:1b:99:3a:4b:39:7a:0a:af: f9:12:44:c0:99:8e:fc:b9:4d:fb:16:60:02:14:d8: 82:04:2a:7a:e1:43:78:be:fc:2c:b7:fa:6d:7d:36: 04:8f:1e:5f:f0:76:8b:d6:90:60:56:6d:91:1c:c3: 81:5f:c1:17:0e:3f:82:bf:03:24:fd:bb:36:35:01: db:b0:92:a6:5d:3f:0b:51:d5:57:a9:e5:8b:a0:03: 89:76:10:35:c4:01:69:c9:de:0a:a4:d0:62:91:6d: 5d:d9:4e:30:31:25:18:18:08:51:b4:a4:f1:dc:cd: c1:ef:43:0a:c1:a0:b7:c4:6f:e7:24:6a:ac:6a:2b: 08:c1:30:bd:34:a0:26:e8:f0:57:4b:37:9f:6f:48: 00:59:4f:ba:b8:0a:7a:58:8e:84:00:33:5c:bb:6c: f7:d5:ae:0a:ca:ea:f0:39:4b:d1:b0:19:22:32:ae: d7:ec:11:63:8d:8f:29:71:e7:b9:4d:aa:ea:20:f9: a7:e0:8c:d7:b1:66:db:e7:36:c7:c1:f1:13:cb:ad: a8:2b:89:5f:c0:bd:50:08:e4:c6:f1:47:43:38:86: 39:9a:22:87:8c:61:ff:15:52:27:da:c2:26:c2:6e: 9c:05:cd:e4:0b:11:d9:94:f3:72:71:8d:d5:c4:45: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F9:DF:4F:4C:AC:00:9D:8A:FA:0E:80:BB:FF:2E:51:A3:61:DC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d73b186f-1b89-35f6-bf6c-fdf86f6a5be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:42:10:71:53:d7:20:33:e5:08:ba:7b:58:f3:a4:f9:bf:20: 7e:bd:08:77:c2:a4:2d:f1:e4:53:1c:f7:57:01:69:60:92:32: ce:ae:df:25:71:f0:4a:ff:85:2a:34:28:a3:0a:e2:29:c1:6b: f7:c8:72:c5:ff:cf:bb:12:bb:ac:0d:aa:31:fa:54:bd:c6:6f: 70:94:e7:ae:24:38:5c:74:97:0f:9f:87:78:ab:5f:5b:19:da: 05:7c:6d:79:fa:7e:b4:66:27:4b:a1:ea:8c:ba:c0:cb:1a:e5: 23:07:e8:49:1e:9a:ae:16:61:e3:5a:ce:10:3d:87:75:10:9b: c1:84:69:ce:8b:80:c2:3d:66:b7:1a:c3:ff:14:0f:db:6a:f8: f7:37:1b:18:06:94:7e:5f:48:b1:ae:6b:79:d3:46:9a:25:19: d1:41:7b:be:f1:2e:64:b2:92:3f:ca:12:b0:e2:0d:a1:91:d9: c1:a2:f2:cc:54:42:8c:69:cf:86:91:32:57:b3:c4:a8:0d:2e: d4:b5:a1:ab:ec:8b:b8:f4:1f:66:d6:9c:91:89:1e:4b:2a:f8: 83:fb:4e:7a:31:30:1e:03:e6:f1:5d:21:62:91:2a:eb:fe:2b: 55:9e:ed:cf:9d:68:a8:4b:4e:e8:d6:12:58:54:fd:08:94:7e: 35:b4:91:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gG1eIZ+UmmTxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MWVjZDE0MzAtNGZkMS00ZjA0LWE0YjItOWM5Y2MzNmQ1MjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM0qX/aeG5k6Szl6Cq/5EkTAmY78uU37FmAC FNiCBCp64UN4vvwst/ptfTYEjx5f8HaL1pBgVm2RHMOBX8EXDj+CvwMk/bs2NQHb sJKmXT8LUdVXqeWLoAOJdhA1xAFpyd4KpNBikW1d2U4wMSUYGAhRtKTx3M3B70MK waC3xG/nJGqsaisIwTC9NKAm6PBXSzefb0gAWU+6uAp6WI6EADNcu2z31a4Kyurw OUvRsBkiMq7X7BFjjY8pcee5TarqIPmn4IzXsWbb5zbHwfETy62oK4lfwL1QCOTG 8UdDOIY5miKHjGH/FVIn2sImwm6cBc3kCxHZlPNycY3VxEUS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH5309MrACdivoOgLv/LlGjYdxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZDczYjE4NmYtMWI4OS0z NWY2LWJmNmMtZmRmODZmNmE1YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtCEHFT1yAz5Qi6e1jzpPm/IH69CHfCpC3x5FMc91cBaWCSMs6u3yVx 8Er/hSo0KKMK4inBa/fIcsX/z7sSu6wNqjH6VL3Gb3CU564kOFx0lw+fh3irX1sZ 2gV8bXn6frRmJ0uh6oy6wMsa5SMH6Ekemq4WYeNazhA9h3UQm8GEac6LgMI9Zrca w/8UD9tq+Pc3GxgGlH5fSLGua3nTRpolGdFBe77xLmSykj/KErDiDaGR2cGi8sxU Qoxpz4aRMlezxKgNLtS1oavsi7j0H2bWnJGJHksq+IP7TnoxMB4D5vFdIWKRKuv+ K1We7c+daKhLTujWElhU/QiUfjW0kSE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:56:25 2025 by rpki-client