$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa File: 13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa (raw, json) Hash identifier: Kmjp8nNdFicObDxbbKdhSQEDNejjTLbvFM+cZRcYchs= Subject key identifier: 26:54:20:AD:10:95:47:7D:26:E4:D7:1C:2D:CF:36:1F:75:BC:FB:91 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584957F40D7FDAE538404B2A1680 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0d:7f:da:e5:38:40:4b:2a:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=b0d28173-f9f6-4d16-921c-6ee570ecde75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:dd:b8:92:7c:0c:1f:c3:de:67:81:4f:1e: 36:84:d6:fe:c2:4d:d3:6e:87:36:7a:b5:da:63:de: a2:35:cf:6e:4c:98:9a:0f:90:45:69:ff:f9:ff:43: d1:1c:12:73:68:e8:07:03:11:2a:0f:77:25:f6:a8: 1e:47:80:08:40:e6:44:f5:7f:26:99:45:cb:b0:78: d3:96:96:3b:a5:66:51:72:41:62:26:aa:0e:cc:fa: b8:5d:5f:44:95:4a:92:42:1e:15:a2:f1:da:bb:b2: 0b:58:bf:f5:27:de:13:46:fa:5b:e5:fc:e6:9b:bc: 0c:c1:31:3f:18:ae:9d:ed:1a:ea:a5:f9:46:8f:66: af:6e:0c:54:f4:f7:11:27:4d:7b:e2:08:de:4e:75: 33:16:3e:07:95:c4:90:47:69:7d:03:33:a4:3e:00: b8:f9:43:36:9c:6b:e8:fe:dc:3b:45:ff:93:b7:ed: 58:b1:ed:67:41:7d:6b:8b:49:09:f3:56:22:8d:ff: 15:e9:ba:09:cb:91:d2:9b:51:ee:8c:29:08:b6:f8: b6:fd:14:4f:a9:fb:79:03:8c:0a:86:fa:41:0e:6a: 63:69:27:23:58:40:9f:a5:87:3e:2d:26:06:62:a7: 05:56:54:cc:8d:0f:94:69:59:04:d5:a2:60:8e:4c: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:54:20:AD:10:95:47:7D:26:E4:D7:1C:2D:CF:36:1F:75:BC:FB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/13d3d3f3-36be-38d9-910e-6d1bf4f47c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d2:01:49:35:d4:76:45:ca:20:39:fc:6e:d1:bd:52:ec:c0: 20:18:cd:c3:1f:fd:e7:77:db:79:af:6e:97:cb:7d:f8:17:af: cf:b8:61:3b:c2:5d:a6:67:cc:a4:43:44:0b:c7:74:7a:c8:d7: c6:89:ea:e3:33:52:8a:48:34:36:32:1b:36:2f:2c:2c:99:bc: 63:97:b8:92:d3:b4:6b:1c:b0:21:70:3f:d5:bd:ff:46:62:d9: 91:ea:8e:7d:21:05:ed:9a:a5:6a:94:24:e2:87:29:36:de:a2: ab:8e:e1:73:0c:ab:ef:98:8b:ed:cb:c6:c1:c5:57:57:cb:79: 52:f7:b2:96:f9:34:a5:c8:de:27:e1:94:00:fb:7c:6e:7d:83: 20:33:1c:f6:22:25:cf:a1:5c:2c:dc:a8:be:73:e2:bd:2d:00: 51:1c:d8:ad:6a:42:63:f2:16:9b:20:56:ea:f6:c2:08:00:d8: e8:ba:9c:f8:5c:a7:a5:50:ea:43:a4:0c:78:fc:65:71:5e:e3: 82:86:e8:c8:b5:0e:83:6e:17:07:70:d8:1e:8b:52:da:c5:f3: 8a:e9:48:3a:e4:33:79:60:bd:91:57:7a:dc:90:da:02:84:b8: ff:5f:f7:9a:a0:96:43:18:fe:d2:0c:2c:8b:9c:f8:2b:74:fd: ff:bc:8c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9A1/2uU4QEsqFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YjBkMjgxNzMtZjlmNi00ZDE2LTkyMWMtNmVlNTcwZWNkZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvfduJJ8DB/D3meBTx42hNb+wk3Tboc2erXa Y96iNc9uTJiaD5BFaf/5/0PRHBJzaOgHAxEqD3cl9qgeR4AIQOZE9X8mmUXLsHjT lpY7pWZRckFiJqoOzPq4XV9ElUqSQh4VovHau7ILWL/1J94TRvpb5fzmm7wMwTE/ GK6d7RrqpflGj2avbgxU9PcRJ0174gjeTnUzFj4HlcSQR2l9AzOkPgC4+UM2nGvo /tw7Rf+Tt+1Yse1nQX1ri0kJ81Yijf8V6boJy5HSm1HujCkItvi2/RRPqft5A4wK hvpBDmpjaScjWECfpYc+LSYGYqcFVlTMjQ+UaVkE1aJgjkwfdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZUIK0QlUd9JuTXHC3PNh91vPuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMTNkM2QzZjMtMzZiZS0z OGQ5LTkxMGUtNmQxYmY0ZjQ3YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDSAUk11HZFyiA5/G7RvVLswCAYzcMf/ed323mvbpfLffgXr8+4YTvC XaZnzKRDRAvHdHrI18aJ6uMzUopINDYyGzYvLCyZvGOXuJLTtGscsCFwP9W9/0Zi 2ZHqjn0hBe2apWqUJOKHKTbeoquO4XMMq++Yi+3LxsHFV1fLeVL3spb5NKXI3ifh lAD7fG59gyAzHPYiJc+hXCzcqL5z4r0tAFEc2K1qQmPyFpsgVur2wggA2Oi6nPhc p6VQ6kOkDHj8ZXFe44KG6Mi1DoNuFwdw2B6LUtrF84rpSDrkM3lgvZFXetyQ2gKE uP9f95qglkMY/tIMLIuc+Ct0/f+8jAA= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:19 2025 by rpki-client