$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa File: b382ef6d-a70e-34fc-a854-25e1353abdf6.roa (raw, json) Hash identifier: Q3dG5i4NhPfCa3fN3pZB6C2BQwvA9S4AZnE7d+4YUKc= Subject key identifier: BE:0A:6F:EF:C4:72:74:2A:D1:D8:03:4E:0B:A9:07:B3:C6:30:07:33 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D602874287DF415BC9B480 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 161.69.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:02:87:42:87:df:41:5b:c9:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=f9f51594-324a-4142-87ef-d0c12e25f4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:29:26:74:20:cd:6e:c8:57:fc:55:f3:c4:93: b2:12:5d:1b:e2:a5:e7:fc:92:19:9e:6f:c8:86:b5: 75:59:3b:ea:26:3b:ed:fa:ed:bd:4e:1c:62:14:c1: 82:25:f4:b9:81:f5:c1:51:56:73:c0:73:8e:b6:e2: f8:f4:8c:de:24:6e:1e:13:87:ad:9f:ed:35:4e:4b: 25:dc:b9:a6:f3:10:8d:1b:fb:39:41:9a:33:5f:fc: b0:7b:8a:82:a1:4c:1e:b1:ee:12:3f:0d:1a:b4:22: 5d:ca:6c:64:a1:b6:90:c7:19:77:91:1f:e4:3b:ad: 76:ea:9b:62:36:97:f4:d7:71:ce:e5:a8:8b:d9:55: b0:06:8c:77:0e:55:a3:1c:70:a0:05:44:a2:67:13: 04:73:7f:94:54:f7:60:61:e2:b8:7c:ad:24:5a:fa: 1c:4a:60:a4:5e:41:5f:e1:88:47:dd:9e:33:64:5d: 47:e6:47:b2:61:a1:cc:ff:95:21:ca:39:99:05:dd: 1f:09:a5:b6:8c:f0:69:cd:13:54:6f:e1:90:66:2e: 23:fb:34:77:f6:22:34:83:38:d1:63:03:a9:34:ab: 24:56:43:99:4d:11:6a:c6:f6:61:73:3e:1d:61:d6: 37:89:4a:c6:d1:da:83:cf:e3:d0:a0:51:3e:37:2a: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0A:6F:EF:C4:72:74:2A:D1:D8:03:4E:0B:A9:07:B3:C6:30:07:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b382ef6d-a70e-34fc-a854-25e1353abdf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fd:cf:a4:a2:f5:94:d6:18:8f:af:40:24:9a:92:94:42:71: 5f:f9:01:05:c9:94:e1:b0:b3:23:72:b3:24:a1:9b:f7:41:e7: eb:a6:ab:85:1d:26:8c:41:3c:fc:f5:df:a3:83:63:28:3e:46: 45:26:7a:38:11:73:2a:7c:f7:46:0b:6c:49:e5:18:71:10:0f: 35:a8:d4:fb:c6:2a:46:0c:3f:bf:9e:fe:93:d2:26:e9:de:a2: 81:07:6a:9d:fd:ea:62:05:00:53:12:8f:98:de:bc:d2:53:d7: cb:67:1f:07:0c:1e:8b:8e:c5:e4:4f:ca:b0:4f:7a:8f:bf:84: c2:d5:72:ed:bf:8d:94:eb:62:5e:77:df:fc:93:a7:06:5c:36: 7c:b6:6c:b6:e8:5b:31:8f:82:f0:da:5b:d2:5b:40:ae:70:67: d7:92:4c:ba:50:52:76:45:f5:9c:71:04:b7:5b:70:60:a7:c3: 4a:c3:1f:68:8a:f7:77:05:52:53:50:7e:53:ba:b0:85:db:e0: bf:24:66:4b:40:97:8d:ba:fa:16:77:27:3a:70:08:e0:10:fe: 9f:36:4d:32:29:12:03:84:40:fa:e0:71:3b:26:c8:f8:50:bc: ca:e9:be:06:d8:a1:8d:14:70:6b:d6:ec:4d:a7:db:ba:bc:c9: 1b:18:75:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gKHQoffQVvJtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjlmNTE1OTQtMzI0YS00MTQyLTg3ZWYtZDBjMTJlMjVmNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSkmdCDNbshX/FXzxJOyEl0b4qXn/JIZnm/I hrV1WTvqJjvt+u29ThxiFMGCJfS5gfXBUVZzwHOOtuL49IzeJG4eE4etn+01Tksl 3Lmm8xCNG/s5QZozX/ywe4qCoUwese4SPw0atCJdymxkobaQxxl3kR/kO6126pti Npf013HO5aiL2VWwBox3DlWjHHCgBUSiZxMEc3+UVPdgYeK4fK0kWvocSmCkXkFf 4YhH3Z4zZF1H5keyYaHM/5UhyjmZBd0fCaW2jPBpzRNUb+GQZi4j+zR39iI0gzjR YwOpNKskVkOZTRFqxvZhcz4dYdY3iUrG0dqDz+PQoFE+Nyrz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4Kb+/EcnQq0dgDTgupB7PGMAczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYjM4MmVmNmQtYTcwZS0z NGZjLWE4NTQtMjVlMTM1M2FiZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb9z6Si9ZTWGI+vQCSakpRCcV/5AQXJlOGwsyNysyShm/dB5+umq4Ud JoxBPPz136ODYyg+RkUmejgRcyp890YLbEnlGHEQDzWo1PvGKkYMP7+e/pPSJune ooEHap396mIFAFMSj5jevNJT18tnHwcMHouOxeRPyrBPeo+/hMLVcu2/jZTrYl53 3/yTpwZcNny2bLboWzGPgvDaW9JbQK5wZ9eSTLpQUnZF9ZxxBLdbcGCnw0rDH2iK 93cFUlNQflO6sIXb4L8kZktAl426+hZ3JzpwCOAQ/p82TTIpEgOEQPrgcTsmyPhQ vMrpvgbYoY0UcGvW7E2n27q8yRsYdTw= -----END CERTIFICATE-----Generated at Sat Apr 5 12:18:28 2025 by rpki-client