$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/694e2ad7-5c25-3617-b99f-5cb4e0813f2e.roa File: 694e2ad7-5c25-3617-b99f-5cb4e0813f2e.roa (raw, json) Hash identifier: Cc/9BT2tMx+mf3gHv6/yHrEUcaJXj//qeU+DQlK9Pmg= Subject key identifier: 2F:99:EF:1F:E8:AC:7C:79:DB:80:A8:AB:FF:65:AD:FE:54:57:0C:9A Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584957F40D6F9AB2FFEABC700100 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/694e2ad7-5c25-3617-b99f-5cb4e0813f2e.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0d:6f:9a:b2:ff:ea:bc:70:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=6f0d836b-0cab-4970-b63e-0209b1d7753f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:4e:1e:d3:0d:a1:a7:ae:f3:da:5c:ce:aa: e1:49:0a:da:e2:08:4a:df:91:59:d5:e4:2b:00:c2: 6c:93:f5:67:7d:fb:3b:e4:c1:25:6c:ce:f3:0c:ee: 8e:ab:de:a2:9b:96:d4:a1:0c:1d:05:ee:48:30:d9: 28:4b:3f:55:0e:ca:0f:3f:05:07:44:b7:4a:f9:4e: fa:42:82:2a:5e:d2:ab:63:23:90:78:01:00:61:bf: fc:7e:87:f7:21:c4:f1:c2:29:71:e3:fb:a3:56:b2: 6a:c3:00:f4:44:8b:6e:29:37:5e:7e:a2:08:20:0e: 4e:e2:00:af:38:08:e4:43:b1:13:dc:2d:a8:04:03: da:8e:67:06:1e:d6:6b:18:c7:6f:a5:a1:07:68:f5: 3d:32:a2:a4:d8:0c:7a:30:84:60:bc:ec:12:a8:f3: 99:9c:d7:1b:57:28:0f:56:bf:3f:43:0d:c2:2a:6e: 77:3b:bb:5c:71:0f:d1:a0:8e:0f:8f:bc:b4:1e:fe: ca:e4:71:04:2b:b3:8e:5b:00:f6:c4:58:4c:19:f7: ca:44:4a:94:a6:b6:34:cd:18:a4:f3:1c:0f:42:16: f3:00:76:29:bc:65:13:8f:f0:d0:67:24:9c:d6:4e: fc:45:94:59:be:fa:36:14:cd:05:02:a6:f8:5e:37: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:99:EF:1F:E8:AC:7C:79:DB:80:A8:AB:FF:65:AD:FE:54:57:0C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/694e2ad7-5c25-3617-b99f-5cb4e0813f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:56:63:16:92:4a:3f:1c:23:a6:1d:76:ff:3e:43:3d:e4:58: 88:39:3e:60:c5:35:41:05:de:c3:1f:c1:f7:6e:8c:9c:6f:70: 6a:9a:ca:8d:e0:5e:0a:9f:32:54:70:70:dd:db:00:99:1f:bc: 24:6d:53:e1:c9:53:d9:51:88:c4:ec:5b:34:d8:16:b4:b6:a0: 9c:7c:d3:af:f7:6d:be:4b:06:95:b1:ed:ad:b6:10:c0:f3:f4: ca:82:ed:4d:90:d8:32:0e:77:90:77:d0:79:66:7d:a4:0c:d7: 09:95:7a:a5:8e:de:f4:98:b1:5b:cb:31:22:90:75:76:61:f3: 53:ea:73:08:55:df:9c:0d:63:3a:7c:a2:09:7d:b1:f0:a7:1f: 91:6a:2c:e9:8b:05:50:7e:ab:27:8e:f8:ba:6d:1e:01:da:52: d4:c2:f3:c6:38:ba:7f:dd:32:74:7f:03:6b:91:d1:52:4c:49: 2c:1a:80:7e:91:df:46:f7:a2:22:01:ad:f5:b7:b5:f0:5e:dd: c5:3b:f6:03:51:e9:ed:ed:fe:51:e1:f1:5d:67:5d:22:10:02: 7b:ec:4a:bc:79:4d:10:2f:09:41:52:bf:b7:1e:d5:45:14:cb: f2:74:2f:64:4b:13:28:41:49:29:98:9f:fc:db:91:4d:6a:c8: 62:3f:ce:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9A1vmrL/6rxwAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NmYwZDgzNmItMGNhYi00OTcwLWI2M2UtMDIwOWIxZDc3NTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveZOHtMNoaeu89pczqrhSQra4ghK35FZ1eQr AMJsk/Vnffs75MElbM7zDO6Oq96im5bUoQwdBe5IMNkoSz9VDsoPPwUHRLdK+U76 QoIqXtKrYyOQeAEAYb/8fof3IcTxwilx4/ujVrJqwwD0RItuKTdefqIIIA5O4gCv OAjkQ7ET3C2oBAPajmcGHtZrGMdvpaEHaPU9MqKk2Ax6MIRgvOwSqPOZnNcbVygP Vr8/Qw3CKm53O7tccQ/RoI4Pj7y0Hv7K5HEEK7OOWwD2xFhMGffKREqUprY0zRik 8xwPQhbzAHYpvGUTj/DQZySc1k78RZRZvvo2FM0FAqb4XjfiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+Z7x/orHx524Coq/9lrf5UVwyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNjk0ZTJhZDctNWMyNS0z NjE3LWI5OWYtNWNiNGUwODEzZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5WYxaSSj8cI6Yddv8+Qz3kWIg5PmDFNUEF3sMfwfdujJxvcGqayo3g XgqfMlRwcN3bAJkfvCRtU+HJU9lRiMTsWzTYFrS2oJx806/3bb5LBpWx7a22EMDz 9MqC7U2Q2DIOd5B30HlmfaQM1wmVeqWO3vSYsVvLMSKQdXZh81PqcwhV35wNYzp8 ogl9sfCnH5FqLOmLBVB+qyeO+LptHgHaUtTC88Y4un/dMnR/A2uR0VJMSSwagH6R 30b3oiIBrfW3tfBe3cU79gNR6e3t/lHh8V1nXSIQAnvsSrx5TRAvCUFSv7ce1UUU y/J0L2RLEyhBSSmYn/zbkU1qyGI/ztI= -----END CERTIFICATE-----Generated at Sat Apr 5 18:04:58 2025 by rpki-client