$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/10dd6aa4-88a8-3a52-ad0c-1d8ebf0dc1d2.roa File: 10dd6aa4-88a8-3a52-ad0c-1d8ebf0dc1d2.roa (raw, json) Hash identifier: tX9Z+aKJALz9zt0Q+HDeggd1TViWTfLZRltlrMWSoAA= Subject key identifier: 96:BC:AE:58:75:33:DA:D2:34:F2:E3:64:5F:D1:10:7F:A9:DC:12:74 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D6024A85A4465C20718410 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/10dd6aa4-88a8-3a52-ad0c-1d8ebf0dc1d2.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:02:4a:85:a4:46:5c:20:71:84:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=968855b8-18b5-4fd2-9f2d-17e7b600fe64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:30:4d:e7:97:59:da:c9:23:43:06:08:48:ba: 68:44:54:8d:ae:0e:47:b4:0d:c7:28:00:f7:b2:ec: d0:de:39:9e:33:07:be:fc:af:13:52:8d:5b:3b:c1: be:4d:48:2c:58:0d:53:87:91:cf:7d:c1:11:1d:7b: 7f:d2:ad:8b:35:df:89:87:1b:bf:52:03:38:f1:2f: 66:82:fb:1c:34:dc:fb:e4:9a:96:e1:65:24:8f:d1: a9:cc:65:2f:df:5d:f0:5c:30:6a:04:8c:f4:da:6c: f0:f6:94:79:12:31:c1:4d:2d:2a:89:08:e7:4e:63: 3e:87:4c:94:c7:02:ed:68:f1:fc:82:a6:ab:31:05: 55:3b:ce:69:0a:63:5a:96:55:4d:99:d6:10:f8:e8: 0d:c5:01:bd:be:a4:75:f4:31:d2:07:12:10:a5:37: 92:70:24:6b:59:77:7a:d2:cf:26:7c:a6:30:ab:e2: 2e:1b:6f:8c:8e:24:b4:4e:49:c1:c6:c0:09:e1:ce: ae:73:c6:c8:37:f4:df:b8:07:97:a8:3c:c7:42:e4: 84:ef:db:dd:4a:aa:23:2a:1e:9d:24:d4:50:23:ba: ca:c2:86:de:a3:10:61:04:a2:b9:57:b5:c6:ae:2e: aa:af:62:ac:dc:c5:ee:8c:c8:10:41:48:9c:a2:06: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BC:AE:58:75:33:DA:D2:34:F2:E3:64:5F:D1:10:7F:A9:DC:12:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/10dd6aa4-88a8-3a52-ad0c-1d8ebf0dc1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:28:a7:45:03:f5:6a:61:cd:aa:4b:a5:d1:1a:6e:64:96:e0: a6:ba:2d:bd:1f:72:25:1e:d8:70:12:81:f6:ca:6f:95:51:a6: 7b:f2:35:ba:fe:53:f1:cc:03:b0:be:06:97:cb:97:13:96:24: da:5c:e4:85:14:ca:98:2a:4b:f1:61:6f:a3:3d:a6:88:e8:f7: c0:70:81:25:b8:78:41:a7:c0:d2:ee:7b:bd:eb:51:e6:6f:0d: 6c:b4:87:59:2e:e5:a4:98:c8:18:f9:04:f2:40:88:5c:89:ae: d0:e8:0a:f1:0f:b8:4a:a5:52:f6:e6:a3:18:38:aa:7a:dc:eb: de:20:4e:43:eb:ef:a6:13:c3:fd:c9:c1:95:fe:99:4c:48:a8: 7a:20:f0:70:0b:51:e7:f4:f7:ed:0b:4e:4b:cf:38:fe:f3:50: bb:40:55:fd:2c:72:83:f2:d2:74:40:8b:a6:96:6b:cb:47:35: 88:f6:e1:5c:34:1d:46:41:1b:ae:88:ce:23:e3:0a:23:bd:81: 4a:94:1b:36:6d:29:9a:07:1e:fc:21:2d:9c:12:19:7d:c6:13: 70:2e:89:d2:4e:2a:19:6e:f7:2b:cf:84:3c:ee:12:4f:05:c5: 3d:a0:ba:e0:57:b9:7a:44:b6:f8:f7:02:4b:6d:b2:bf:f6:0c: cd:76:fa:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gJKhaRGXCBxhBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk OTY4ODU1YjgtMThiNS00ZmQyLTlmMmQtMTdlN2I2MDBmZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDBN55dZ2skjQwYISLpoRFSNrg5HtA3HKAD3 suzQ3jmeMwe+/K8TUo1bO8G+TUgsWA1Th5HPfcERHXt/0q2LNd+Jhxu/UgM48S9m gvscNNz75JqW4WUkj9GpzGUv313wXDBqBIz02mzw9pR5EjHBTS0qiQjnTmM+h0yU xwLtaPH8gqarMQVVO85pCmNallVNmdYQ+OgNxQG9vqR19DHSBxIQpTeScCRrWXd6 0s8mfKYwq+IuG2+MjiS0TknBxsAJ4c6uc8bIN/TfuAeXqDzHQuSE79vdSqojKh6d JNRQI7rKwobeoxBhBKK5V7XGri6qr2Ks3MXujMgQQUicogagnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa8rlh1M9rSNPLjZF/REH+p3BJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMTBkZDZhYTQtODhhOC0z YTUyLWFkMGMtMWQ4ZWJmMGRjMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQop0UD9WphzapLpdEabmSW4Ka6Lb0fciUe2HASgfbKb5VRpnvyNbr+ U/HMA7C+BpfLlxOWJNpc5IUUypgqS/Fhb6M9pojo98BwgSW4eEGnwNLue73rUeZv DWy0h1ku5aSYyBj5BPJAiFyJrtDoCvEPuEqlUvbmoxg4qnrc694gTkPr76YTw/3J wZX+mUxIqHog8HALUef09+0LTkvPOP7zULtAVf0scoPy0nRAi6aWa8tHNYj24Vw0 HUZBG66IziPjCiO9gUqUGzZtKZoHHvwhLZwSGX3GE3AuidJOKhlu9yvPhDzuEk8F xT2guuBXuXpEtvj3Akttsr/2DM12+qA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:57:41 2025 by rpki-client