$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/71dbef97-cfe4-32ef-b8ba-91f7a31e140b.roa File: 71dbef97-cfe4-32ef-b8ba-91f7a31e140b.roa (raw, json) Hash identifier: QO4627t4QJklxiteFO+mis8IQt8MOoBsrVcDCf1xBJs= Subject key identifier: 83:5E:68:94:79:A2:B1:91:D7:AE:12:1D:60:3D:19:C2:55:77:C5:29 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D6072FE2E3D1E38EA2F500 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/71dbef97-cfe4-32ef-b8ba-91f7a31e140b.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 161.69.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:07:2f:e2:e3:d1:e3:8e:a2:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=fc2e156f-2271-4132-b107-dd2b123fead8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:66:3e:3b:4e:5f:9c:7d:c8:0d:5c:56:60: 30:62:53:6c:36:33:06:e2:9e:a7:81:ea:92:82:54: c6:58:aa:ff:ea:59:d9:09:b4:e4:d8:a9:5b:a5:a8: 66:ea:52:63:b0:f8:df:1b:65:da:f3:9a:b0:0c:12: c9:82:f1:f1:5a:4b:4e:d3:5b:ae:1c:e6:69:a3:f3: c2:1b:6b:b7:ea:93:53:2e:ad:1f:6e:79:a4:28:6b: d4:4a:ac:34:ed:2b:78:1d:c0:9c:a4:65:2f:e2:d2: 44:c1:5e:2c:23:ef:c8:aa:57:f5:46:67:cd:13:3f: 5b:c4:ae:ea:55:e3:04:37:73:22:34:a4:a3:a2:9c: 15:8c:94:86:7f:ce:1e:5a:63:97:c4:a6:96:24:b7: 4f:0d:0d:fd:93:e4:c2:4e:75:e0:3c:25:48:14:27: 0b:cd:77:41:ee:c0:04:03:f7:e6:2a:32:b7:0e:db: 3f:66:8f:04:24:76:71:b6:1d:30:bb:24:89:70:d2: 10:62:d9:5a:07:e6:16:61:a1:fc:59:77:a9:ed:d7: cb:9e:e9:65:1b:22:2d:1d:4b:5c:6d:51:1e:ec:e3: 3f:ea:81:80:35:63:70:6e:0f:3b:c8:49:f4:ef:b9: 2b:3e:3d:4b:62:bc:03:e6:a7:fd:32:a2:66:88:8c: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5E:68:94:79:A2:B1:91:D7:AE:12:1D:60:3D:19:C2:55:77:C5:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/71dbef97-cfe4-32ef-b8ba-91f7a31e140b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3e:aa:31:1f:fa:87:51:b4:17:5b:17:5a:ed:62:81:ad:34: 20:20:0c:6e:f4:4f:ff:b6:84:df:2b:72:33:f4:c4:6c:38:75: 5b:be:d8:45:c9:32:70:a9:6d:a2:2f:f4:83:9e:d6:be:c8:3b: bd:7c:ff:f8:6e:2d:02:90:99:ce:18:8e:58:9f:f2:c4:ed:31: 93:e0:8d:35:47:66:4a:ea:bb:bc:1a:f9:1d:0a:35:72:74:4b: 21:c5:5c:b8:a1:30:e5:6e:42:53:fd:3d:a8:2b:c6:c8:91:1c: 16:b0:f8:c4:38:c8:6b:bd:d1:08:b9:18:d6:ea:7c:76:57:3c: 55:d9:77:85:63:71:0d:cf:41:7f:63:11:a5:04:16:5a:dc:58: df:fa:7c:76:43:8d:73:f6:ad:2f:b1:69:48:6f:e3:c1:84:19: ab:0c:80:f4:d1:99:a9:b1:4a:15:e5:06:67:9e:96:38:0b:44: 5e:9a:18:7c:27:11:8c:03:12:5c:b5:54:c3:2e:29:a3:42:a8: a3:bf:bf:72:3a:8c:58:0e:db:f5:6d:07:f4:2c:c2:b6:de:cf: 0b:c8:99:b9:12:05:c8:2d:5f:9e:43:33:30:d6:03:73:9e:22: 5d:f0:f7:c2:a2:61:3b:ca:63:7d:2b:f9:27:2e:27:40:95:58: a6:e4:91:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gcv4uPR446i9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmMyZTE1NmYtMjI3MS00MTMyLWIxMDctZGQyYjEyM2ZlYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYVmPjtOX5x9yA1cVmAwYlNsNjMG4p6ngeqS glTGWKr/6lnZCbTk2Klbpahm6lJjsPjfG2Xa85qwDBLJgvHxWktO01uuHOZpo/PC G2u36pNTLq0fbnmkKGvUSqw07St4HcCcpGUv4tJEwV4sI+/Iqlf1RmfNEz9bxK7q VeMEN3MiNKSjopwVjJSGf84eWmOXxKaWJLdPDQ39k+TCTnXgPCVIFCcLzXdB7sAE A/fmKjK3Dts/Zo8EJHZxth0wuySJcNIQYtlaB+YWYaH8WXep7dfLnullGyItHUtc bVEe7OM/6oGANWNwbg87yEn077krPj1LYrwD5qf9MqJmiIxewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINeaJR5orGR164SHWA9GcJVd8UpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNzFkYmVmOTctY2ZlNC0z MmVmLWI4YmEtOTFmN2EzMWUxNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0+qjEf+odRtBdbF1rtYoGtNCAgDG70T/+2hN8rcjP0xGw4dVu+2EXJ MnCpbaIv9IOe1r7IO718//huLQKQmc4Yjlif8sTtMZPgjTVHZkrqu7wa+R0KNXJ0 SyHFXLihMOVuQlP9PagrxsiRHBaw+MQ4yGu90Qi5GNbqfHZXPFXZd4VjcQ3PQX9j EaUEFlrcWN/6fHZDjXP2rS+xaUhv48GEGasMgPTRmamxShXlBmeeljgLRF6aGHwn EYwDEly1VMMuKaNCqKO/v3I6jFgO2/VtB/QswrbezwvImbkSBcgtX55DMzDWA3Oe Il3w98KiYTvKY30r+ScuJ0CVWKbkkRc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:21 2025 by rpki-client