$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa File: 20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa (raw, json) Hash identifier: asgAo1yXaP4sJHz7mF76J1QtO0NLKsnLYOqtzPkL3Uo= Subject key identifier: 02:24:E6:63:5A:00:26:56:44:73:B9:5A:72:AE:A5:0D:BB:D7:BA:4A Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D607906246D45B71D57F00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 161.69.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:07:90:62:46:d4:5b:71:d5:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=430f09fb-1a77-48ee-944a-31f72dafa1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:f2:54:77:9a:e5:1b:06:e7:5b:d1:72:b6: 32:56:6e:9d:d5:df:0e:bf:64:2c:1b:9c:c1:48:24: a3:33:98:d5:69:78:e1:94:25:c2:75:f5:da:e0:c9: 20:ca:de:84:1a:8d:cd:f0:6e:44:43:d9:ac:83:67: 3b:58:53:30:79:45:32:73:80:ea:94:ce:97:ee:e1: 65:44:61:8e:e8:70:2d:70:29:96:4c:2c:1a:6d:47: 3e:01:84:26:68:c1:63:47:9f:ed:38:ca:c3:5b:90: 6b:6f:db:fa:74:d3:b0:e2:3a:79:f3:d6:1c:8a:07: 08:96:73:5b:94:c0:3c:3c:68:e5:a3:de:8c:71:3f: cd:d3:9a:db:96:74:39:af:f1:8a:4d:57:f2:0b:aa: d1:a4:72:eb:7a:65:1c:71:14:fd:00:ce:f3:f5:1a: 42:78:ff:9a:1a:b5:1a:5d:15:7f:81:56:bd:1a:3e: 70:37:e4:5f:bc:cb:d7:34:6e:61:52:ab:86:5e:ae: 5d:7a:82:ec:9d:8b:b1:54:a0:96:f0:39:9e:48:8c: f4:8a:ff:34:1c:b4:a4:f4:76:ee:89:90:cf:92:8c: 62:ca:bf:c2:62:6a:50:b8:20:b4:6d:64:5d:ef:2c: a0:67:0a:d9:56:7f:5a:cd:10:b9:48:19:82:cf:24: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:24:E6:63:5A:00:26:56:44:73:B9:5A:72:AE:A5:0D:BB:D7:BA:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/20a34366-c40c-392d-9c68-2db8e4a0b1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ad:83:28:93:44:6c:7d:6e:17:89:96:01:f8:b4:09:16:39: e2:1f:d2:c0:de:b2:65:36:d0:0d:1f:d8:82:9b:1e:19:86:33: fd:59:49:bb:39:f1:13:f0:24:e2:60:ad:79:ef:68:46:78:03: de:aa:99:98:38:17:8c:04:c5:6a:f6:6e:bc:9f:ee:fe:98:76: dc:86:61:0a:18:1f:01:96:6c:df:9e:c0:5d:38:1b:3a:02:4f: 19:fe:d6:c9:9f:52:da:3c:95:fa:f6:c4:c9:fe:11:ab:2b:0c: 5a:cd:1c:57:d3:34:d1:cd:10:be:ae:b2:9c:46:2e:39:7e:29: dd:09:97:ff:4d:8d:1e:cb:bd:36:b5:f7:74:c7:b7:10:2a:56: 19:7b:92:af:1e:f0:41:59:c2:4d:d9:ca:17:ad:db:2a:8b:75: a0:ee:e9:3c:23:05:6b:5d:2c:a9:28:f7:57:1f:db:27:08:9b: c6:57:cc:60:82:0c:b3:6a:ec:8b:da:f7:e8:bf:93:85:db:bf: 41:1b:d2:80:5e:9c:2c:be:0e:59:b8:27:2f:3f:6b:e8:80:47: bf:c4:6d:24:cd:56:79:8e:67:e1:dd:ab:e9:13:d8:c5:7e:8a: f8:31:ab:9d:b3:dd:e3:60:6d:09:4b:a0:d1:2e:42:f0:96:bf: c9:31:ca:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1geQYkbUW3HVfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NDMwZjA5ZmItMWE3Ny00OGVlLTk0NGEtMzFmNzJkYWZhMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm83yVHea5RsG51vRcrYyVm6d1d8Ov2QsG5zB SCSjM5jVaXjhlCXCdfXa4Mkgyt6EGo3N8G5EQ9msg2c7WFMweUUyc4DqlM6X7uFl RGGO6HAtcCmWTCwabUc+AYQmaMFjR5/tOMrDW5Brb9v6dNOw4jp589YcigcIlnNb lMA8PGjlo96McT/N05rblnQ5r/GKTVfyC6rRpHLremUccRT9AM7z9RpCeP+aGrUa XRV/gVa9Gj5wN+RfvMvXNG5hUquGXq5deoLsnYuxVKCW8DmeSIz0iv80HLSk9Hbu iZDPkoxiyr/CYmpQuCC0bWRd7yygZwrZVn9azRC5SBmCzyR4BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIk5mNaACZWRHO5WnKupQ2717pKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMjBhMzQzNjYtYzQwYy0z OTJkLTljNjgtMmRiOGU0YTBiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqtgyiTRGx9bheJlgH4tAkWOeIf0sDesmU20A0f2IKbHhmGM/1ZSbs5 8RPwJOJgrXnvaEZ4A96qmZg4F4wExWr2bryf7v6YdtyGYQoYHwGWbN+ewF04GzoC Txn+1smfUto8lfr2xMn+EasrDFrNHFfTNNHNEL6uspxGLjl+Kd0Jl/9NjR7LvTa1 93THtxAqVhl7kq8e8EFZwk3Zyhet2yqLdaDu6TwjBWtdLKko91cf2ycIm8ZXzGCC DLNq7Iva9+i/k4Xbv0Eb0oBenCy+Dlm4Jy8/a+iAR7/EbSTNVnmOZ+Hdq+kT2MV+ ivgxq52z3eNgbQlLoNEuQvCWv8kxyv4= -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:24 2025 by rpki-client