$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa File: 0da288e2-8c4b-3f48-8630-d0e217b213f8.roa (raw, json) Hash identifier: MJyDPwT0OOFEAqMiA0rVxRDmxckCnN0oBuPUQV1pGH4= Subject key identifier: F9:4C:3E:47:E3:0F:65:5F:0D:32:C6:C1:E2:E0:C6:E0:E9:FE:E5:0E Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D606FE061CE969DF021980 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 161.69.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:06:fe:06:1c:e9:69:df:02:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=5ae2beb7-93c7-41e9-93db-0a5c2d0e6976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:da:ee:f9:0a:b5:31:1e:dc:e3:74:56:c8: 1c:dc:a4:c7:67:6b:4a:f7:90:0a:c9:58:e6:fc:18: c2:71:84:6f:39:8b:24:7d:3e:13:fa:e9:7f:b2:9e: 2c:3b:33:e3:b4:f1:66:b6:ab:42:71:e2:7f:c2:c0: 89:c1:65:8a:d2:bc:3a:b6:f5:21:d8:07:2a:a4:62: 94:bd:d1:09:aa:c5:82:bb:0d:b3:22:ce:72:bd:f6: 2e:a7:7a:df:f0:29:ae:e3:9f:70:2c:50:94:a2:ac: 93:83:ad:b4:21:55:11:34:bd:05:d1:c3:1b:cd:42: c8:24:ac:11:8a:43:e6:a0:f9:ff:95:3e:55:59:b6: 3c:3a:b5:73:4f:82:eb:23:a2:06:2e:3c:19:82:fa: 06:5f:9f:c2:bb:cf:01:5a:24:a1:3b:43:49:52:3e: dd:f2:44:4a:86:92:59:5a:8e:26:e5:d8:92:40:e1: 0d:39:83:40:07:f9:6a:13:be:55:0e:37:6d:28:b5: 10:74:1f:14:f5:bf:87:a6:8b:fb:d2:4c:6c:a8:c0: 3b:86:1c:ab:25:1d:f1:a2:ec:29:6f:20:61:72:98: d1:64:ad:c5:a3:14:c0:ae:d3:fd:0b:4b:d7:36:9c: cd:f8:33:26:d8:d8:25:b0:fb:19:77:79:fa:fc:18: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4C:3E:47:E3:0F:65:5F:0D:32:C6:C1:E2:E0:C6:E0:E9:FE:E5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7c:35:b1:20:b2:2e:c0:3e:b0:fc:43:ef:43:64:c3:cd:61: 19:f1:0a:f1:01:2d:01:a4:e2:af:c6:17:df:48:56:ee:44:4c: 74:13:c9:46:c1:90:7d:80:37:39:f8:c8:b7:00:d8:e0:33:2e: 6d:2e:08:32:0f:54:50:9f:d7:91:28:ad:07:5c:e4:ae:50:37: 13:65:a1:14:c1:24:73:ec:1d:2c:63:c9:cb:54:bd:81:2d:66: fc:1f:6a:86:7e:22:62:c5:dc:db:59:f8:ad:6c:39:1a:21:ee: 0d:5e:3e:35:19:0f:2a:31:a9:75:3f:42:77:a2:53:d4:b8:18: a5:0a:05:75:8a:e7:77:a9:93:d9:8c:c1:fd:3a:31:9c:75:af: db:5e:9f:ce:da:47:14:c1:b0:89:28:d6:14:32:2c:b5:a2:f1: 06:3e:87:76:a4:b8:b3:ed:71:ca:97:98:23:95:8b:10:b9:78: 39:fe:6a:d6:3d:4b:7d:27:a4:43:0a:b9:96:d9:5c:77:ea:a0: fe:1e:00:f8:fe:1b:fd:30:d7:6d:29:6a:01:9a:b4:e0:1b:98: b9:fe:e5:be:e3:1d:07:fa:de:91:1f:f5:1a:06:84:27:c7:44: 6f:49:ef:c4:88:ab:0b:e3:08:02:50:6d:a8:c6:08:bd:76:24: c1:bd:4b:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gb+Bhzpad8CGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NWFlMmJlYjctOTNjNy00MWU5LTkzZGItMGE1YzJkMGU2OTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2Pa7vkKtTEe3ON0Vsgc3KTHZ2tK95AKyVjm /BjCcYRvOYskfT4T+ul/sp4sOzPjtPFmtqtCceJ/wsCJwWWK0rw6tvUh2AcqpGKU vdEJqsWCuw2zIs5yvfYup3rf8Cmu459wLFCUoqyTg620IVURNL0F0cMbzULIJKwR ikPmoPn/lT5VWbY8OrVzT4LrI6IGLjwZgvoGX5/Cu88BWiShO0NJUj7d8kRKhpJZ Wo4m5diSQOENOYNAB/lqE75VDjdtKLUQdB8U9b+Hpov70kxsqMA7hhyrJR3xouwp byBhcpjRZK3FoxTArtP9C0vXNpzN+DMm2NglsPsZd3n6/BhlLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlMPkfjD2VfDTLGweLgxuDp/uUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGRhMjg4ZTItOGM0Yi0z ZjQ4LTg2MzAtZDBlMjE3YjIxM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ8NbEgsi7APrD8Q+9DZMPNYRnxCvEBLQGk4q/GF99IVu5ETHQTyUbB kH2ANzn4yLcA2OAzLm0uCDIPVFCf15EorQdc5K5QNxNloRTBJHPsHSxjyctUvYEt ZvwfaoZ+ImLF3NtZ+K1sORoh7g1ePjUZDyoxqXU/QneiU9S4GKUKBXWK53epk9mM wf06MZx1r9ten87aRxTBsIko1hQyLLWi8QY+h3akuLPtccqXmCOVixC5eDn+atY9 S30npEMKuZbZXHfqoP4eAPj+G/0w120pagGatOAbmLn+5b7jHQf63pEf9RoGhCfH RG9J78SIqwvjCAJQbajGCL12JMG9S2U= -----END CERTIFICATE-----Generated at Sat Apr 5 11:06:34 2025 by rpki-client