$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0ea0197f-4449-393d-88a9-0a46b18137f0.roa File: 0ea0197f-4449-393d-88a9-0a46b18137f0.roa (raw, json) Hash identifier: J2KEd0qt4/qQve39BAA5fYidhAR+J/weY0MG1epAUTQ= Subject key identifier: A5:2D:42:97:05:2A:C0:28:5C:D5:1E:AC:B4:89:19:F9:24:42:CE:48 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D6009F63D43905B37DB700 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0ea0197f-4449-393d-88a9-0a46b18137f0.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 161.69.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:00:9f:63:d4:39:05:b3:7d:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=a983b19c-a954-48a7-8948-a8ed520149dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:11:5e:b0:07:fe:bb:2c:ca:a8:00:ba:df: 6d:77:74:e0:66:f3:0b:f0:ad:1e:fc:c2:6b:24:45: 1e:ff:75:a2:ed:12:66:e5:fd:5f:57:0e:66:3c:7a: 4a:0b:2e:05:8f:e8:0d:1d:f0:b2:e0:b4:10:66:fa: 63:aa:5e:1c:5a:19:71:70:4c:f7:ea:6f:d0:11:20: 57:cf:db:e8:14:3a:fc:23:d4:0a:da:ec:d1:23:f7: d0:42:90:e4:eb:38:2f:72:2f:54:51:15:53:5e:6d: 1d:87:54:3f:83:83:fe:a7:cf:d8:d4:0c:58:66:36: 9b:d9:87:0d:dc:33:74:d6:01:4d:b7:ec:91:76:8b: 06:cd:46:75:df:04:9d:ab:f0:9c:5b:f2:31:c2:cb: 98:69:a5:51:64:15:f6:d3:ca:82:43:f7:fc:a8:96: 51:9e:6a:83:55:50:51:47:6a:07:87:91:b0:52:6b: e7:6e:24:ff:53:d6:8d:c7:ed:5c:c7:6a:c5:38:09: ce:69:c5:58:76:3c:67:30:61:f3:f2:16:22:16:a3: 1d:fd:2b:12:b1:c4:47:ef:88:00:2d:88:4e:2a:41: 8f:7b:08:0f:07:7a:86:82:e4:25:97:7b:d1:64:59: 39:66:0e:79:d5:21:bb:f0:b7:99:66:ea:ae:aa:d1: b1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2D:42:97:05:2A:C0:28:5C:D5:1E:AC:B4:89:19:F9:24:42:CE:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0ea0197f-4449-393d-88a9-0a46b18137f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:69:a1:6c:fc:a2:79:f9:cf:02:6a:0a:6c:99:5e:96:b9:12: 0a:f1:ce:87:e1:e1:41:84:20:1c:a0:77:c3:d0:67:9f:47:ef: da:6e:bb:c3:b5:94:14:42:9e:ad:05:56:aa:2b:86:5a:6d:df: 69:ae:38:48:72:f0:df:ec:ed:16:54:09:ae:94:da:1c:cc:72: ca:71:d8:ac:8a:18:7a:3a:79:d3:03:97:73:3f:e9:06:59:63: d0:5a:a3:36:d2:c9:3c:f8:a8:e0:20:52:d0:90:3f:fd:0e:64: 1d:3f:c8:a5:6b:d8:ee:2c:65:49:a4:42:44:78:d2:d5:57:33: cc:6c:38:b8:22:5c:dd:74:ad:ad:1e:56:c7:66:cc:3d:8b:5a: 0a:42:f8:b4:45:12:12:5d:2a:ea:07:e3:1b:c4:c1:bc:02:61: 3f:28:47:10:d5:6e:c6:36:23:09:11:d6:45:fd:23:c1:61:0a: 11:f2:4e:40:f2:42:69:f8:aa:ec:86:db:84:b5:55:5a:80:2b: 6f:7b:ea:0c:45:2d:79:8d:83:a5:5e:5b:ae:b8:29:80:c0:4c: ab:e1:bb:d6:fd:72:59:71:e6:0d:0a:6e:1a:d5:e3:24:27:bc: a1:88:c6:a2:37:71:62:a4:2e:8f:ff:dd:a5:da:3c:6e:e1:5e: 74:58:b3:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gCfY9Q5BbN9twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk YTk4M2IxOWMtYTk1NC00OGE3LTg5NDgtYThlZDUyMDE0OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBcRXrAH/rssyqgAut9td3TgZvML8K0e/MJr JEUe/3Wi7RJm5f1fVw5mPHpKCy4Fj+gNHfCy4LQQZvpjql4cWhlxcEz36m/QESBX z9voFDr8I9QK2uzRI/fQQpDk6zgvci9UURVTXm0dh1Q/g4P+p8/Y1AxYZjab2YcN 3DN01gFNt+yRdosGzUZ13wSdq/CcW/IxwsuYaaVRZBX208qCQ/f8qJZRnmqDVVBR R2oHh5GwUmvnbiT/U9aNx+1cx2rFOAnOacVYdjxnMGHz8hYiFqMd/SsSscRH74gA LYhOKkGPewgPB3qGguQll3vRZFk5Zg551SG78LeZZuquqtGxtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUtQpcFKsAoXNUerLSJGfkkQs5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGVhMDE5N2YtNDQ0OS0z OTNkLTg4YTktMGE0NmIxODEzN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9poWz8onn5zwJqCmyZXpa5Egrxzofh4UGEIBygd8PQZ59H79puu8O1 lBRCnq0FVqorhlpt32muOEhy8N/s7RZUCa6U2hzMcspx2KyKGHo6edMDl3M/6QZZ Y9BaozbSyTz4qOAgUtCQP/0OZB0/yKVr2O4sZUmkQkR40tVXM8xsOLgiXN10ra0e VsdmzD2LWgpC+LRFEhJdKuoH4xvEwbwCYT8oRxDVbsY2IwkR1kX9I8FhChHyTkDy Qmn4quyG24S1VVqAK2976gxFLXmNg6VeW664KYDATKvhu9b9cllx5g0KbhrV4yQn vKGIxqI3cWKkLo//3aXaPG7hXnRYs+w= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:24 2025 by rpki-client