$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bef0998f-24db-3282-b3fd-539f3a48e773.roa File: bef0998f-24db-3282-b3fd-539f3a48e773.roa (raw, json) Hash identifier: kFEKj2qr8Fn80zZCq1u0m/Cg7b+pkay+SK8fLOMDl1w= Subject key identifier: 76:55:5C:9F:F8:A2:67:6F:2D:9A:F6:13:3D:B2:E9:AB:7A:2F:25:E4 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D6077DF6B4CD7A357B3900 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bef0998f-24db-3282-b3fd-539f3a48e773.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:07:7d:f6:b4:cd:7a:35:7b:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=c8e7df3f-f9f9-4298-9f7d-7251b0b45222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:11:28:4d:ce:5b:68:d2:99:bb:a8:57:2c:a1: 1c:60:1c:4c:b8:ef:9d:06:56:42:fc:23:7d:51:07: 0b:2e:66:bb:ac:ea:71:27:8b:0c:72:f0:a9:79:20: f0:c5:17:bd:0c:5e:14:38:65:b5:33:60:ad:74:af: a6:05:8d:0d:5b:82:61:aa:65:a8:92:84:ef:54:f5: 20:e0:6a:c7:c8:fe:55:36:1e:ca:c7:6c:ca:d3:3e: 46:91:74:8b:bc:8d:c4:72:e0:c7:d9:39:0d:f4:d8: 96:39:d1:3b:03:c9:6e:36:f3:dd:bc:94:db:fd:9a: f7:b4:1b:c6:c0:b9:cd:88:c1:b3:3b:1d:3e:a6:f2: 32:ad:2d:9d:09:22:15:a8:07:3d:5c:d0:d4:31:f0: 07:99:cd:2f:f7:d7:cf:a5:2c:fe:a6:22:e4:24:11: 76:fb:0c:fd:d3:43:9a:f4:61:a0:23:7b:3d:a1:c7: ee:b3:2f:9a:39:96:aa:1d:8a:ad:a1:d1:3a:74:96: 3e:c5:ed:d9:80:1b:7d:ad:f2:e9:a9:04:d6:0e:e2: 19:6b:be:de:b3:5f:4d:d0:86:34:ec:dc:2f:03:1f: e5:ad:cc:df:6e:2d:34:50:f9:c1:2d:12:a1:c1:7b: eb:b6:71:2f:ad:12:e8:df:8f:7b:1d:55:73:c0:a7: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:55:5C:9F:F8:A2:67:6F:2D:9A:F6:13:3D:B2:E9:AB:7A:2F:25:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bef0998f-24db-3282-b3fd-539f3a48e773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:63:a5:74:41:18:09:0f:c6:f7:16:39:13:9e:35:5a:38:d8: 5b:6d:a6:b3:c4:8f:cd:f4:43:d6:79:f2:97:71:06:58:a3:49: 1f:5a:d3:37:78:fa:ec:53:dc:a5:11:1e:f6:eb:fd:fa:0e:15: 69:de:ab:37:97:fe:46:42:43:4f:ca:4b:1b:ab:b4:cf:7e:a3: f7:86:94:0f:55:4c:a0:8b:15:32:bb:5b:5f:2d:94:05:71:ba: d9:03:98:69:c7:76:86:d1:71:90:29:28:e2:3a:15:d5:47:d4: bc:af:da:f1:f7:2c:3e:3f:64:8f:15:af:20:27:ca:8b:d1:42: 84:42:27:2f:4a:5e:bb:35:52:52:cc:ba:f3:e9:c1:8d:12:4d: ea:c0:1d:84:16:60:fe:a9:ab:e0:a8:7c:d6:b8:da:6d:1e:49: 34:76:fd:da:5a:57:e4:aa:a2:e6:f4:6b:38:ed:93:a1:0e:ee: 9c:d0:76:9c:56:56:54:b4:5c:75:b0:5b:be:2e:58:43:7d:82: 3e:f4:37:e4:8a:1c:23:30:2f:2e:60:9e:13:ad:c5:c6:41:47: 43:11:d9:b5:95:3c:fd:4f:70:e9:0c:91:82:ac:90:29:69:ce: 50:34:81:4e:95:cc:11:5e:e6:9d:1c:b9:4b:0e:cc:94:6f:08: 9e:ac:f1:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gd99rTNejV7OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk YzhlN2RmM2YtZjlmOS00Mjk4LTlmN2QtNzI1MWIwYjQ1MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhREoTc5baNKZu6hXLKEcYBxMuO+dBlZC/CN9 UQcLLma7rOpxJ4sMcvCpeSDwxRe9DF4UOGW1M2CtdK+mBY0NW4JhqmWokoTvVPUg 4GrHyP5VNh7Kx2zK0z5GkXSLvI3EcuDH2TkN9NiWOdE7A8luNvPdvJTb/Zr3tBvG wLnNiMGzOx0+pvIyrS2dCSIVqAc9XNDUMfAHmc0v99fPpSz+piLkJBF2+wz900Oa 9GGgI3s9ocfusy+aOZaqHYqtodE6dJY+xe3ZgBt9rfLpqQTWDuIZa77es19N0IY0 7NwvAx/lrczfbi00UPnBLRKhwXvrtnEvrRLo3497HVVzwKczkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZVXJ/4omdvLZr2Ez2y6at6LyXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYmVmMDk5OGYtMjRkYi0z MjgyLWIzZmQtNTM5ZjNhNDhlNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1jpXRBGAkPxvcWOROeNVo42FttprPEj830Q9Z58pdxBlijSR9a0zd4 +uxT3KURHvbr/foOFWneqzeX/kZCQ0/KSxurtM9+o/eGlA9VTKCLFTK7W18tlAVx utkDmGnHdobRcZApKOI6FdVH1Lyv2vH3LD4/ZI8VryAnyovRQoRCJy9KXrs1UlLM uvPpwY0STerAHYQWYP6pq+CofNa42m0eSTR2/dpaV+Sqoub0azjtk6EO7pzQdpxW VlS0XHWwW74uWEN9gj70N+SKHCMwLy5gnhOtxcZBR0MR2bWVPP1PcOkMkYKskClp zlA0gU6VzBFe5p0cuUsOzJRvCJ6s8WI= -----END CERTIFICATE-----Generated at Tue Apr 8 20:48:46 2025 by rpki-client