$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0b13dffe-361e-39dd-8258-33526ff6be31.roa File: 0b13dffe-361e-39dd-8258-33526ff6be31.roa (raw, json) Hash identifier: f2DeIuZsoHna7P4hxsSLxOkq+wUmAhMPfaHwASmvi7Q= Subject key identifier: F3:1E:3F:90:54:91:62:57:E5:BC:DA:D5:A1:DF:E9:F7:EB:63:A4:F0 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D607A128BBE5D04583E2D0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0b13dffe-361e-39dd-8258-33526ff6be31.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:07:a1:28:bb:e5:d0:45:83:e2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=c0921490-a84c-44b0-8270-a6c66ee073cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:ae:14:fb:e6:35:11:0f:2b:53:6e:a5:93: 81:04:4d:11:e4:bc:d4:c7:55:eb:50:b9:fc:88:77: f3:82:af:e9:0d:15:7e:80:85:93:0a:60:57:25:53: 38:55:e2:51:4c:45:04:70:2f:04:34:ef:d6:81:50: 74:d8:49:f2:9c:84:de:3b:8b:75:8c:67:ca:ac:9a: 3c:b1:1a:c5:27:c4:c0:ab:74:0e:51:20:59:30:d6: 38:98:24:c1:07:ae:65:df:7b:38:95:3b:4b:05:bb: 01:d4:15:43:e7:42:89:02:f1:e6:b1:11:69:cf:06: 38:11:c4:fe:80:b2:f3:34:6e:d2:b7:90:1c:ee:27: 2f:d4:d3:a4:c9:f4:da:b1:34:c5:a8:c5:ac:a8:67: fc:91:f0:94:c4:6b:19:d1:e3:32:1d:14:0a:f7:77: 39:f6:bb:51:5a:9e:7c:56:2d:99:b3:57:dc:d4:14: 86:9d:40:26:bd:21:75:23:87:04:d2:7c:3c:84:53: 11:59:be:7a:09:a2:3b:ad:80:fd:9b:2a:81:bc:79: e9:af:a7:21:68:47:75:66:e0:ce:a7:27:c8:31:af: 74:a4:fd:e8:88:91:a2:f3:ca:7e:58:a8:58:65:1b: 6e:76:dc:fa:9c:e3:ea:de:f4:00:0e:c6:0d:b2:3d: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1E:3F:90:54:91:62:57:E5:BC:DA:D5:A1:DF:E9:F7:EB:63:A4:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0b13dffe-361e-39dd-8258-33526ff6be31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:33:fd:e8:d0:37:63:95:60:53:50:91:04:e9:1b:4e:08:41: aa:9d:8c:38:ac:d6:0e:28:77:1b:0d:f3:e9:e5:56:b9:95:ac: 8f:53:4b:c5:c6:c1:29:11:cd:55:68:7d:4d:ed:e3:7d:d0:e7: 03:f0:51:a4:7f:5b:19:9f:c3:bf:c9:45:cf:cd:fc:3b:4b:69: 08:3f:28:d8:48:78:75:08:1b:aa:94:0d:11:a1:db:6d:0d:b7: 76:d4:cf:7a:1a:58:2f:f3:91:c4:07:3a:be:b6:68:ba:a3:84: 1d:13:f5:b0:a1:dd:9b:52:66:73:f3:64:c0:42:51:85:db:dd: 05:16:44:f4:4c:67:74:11:4b:1b:d7:01:4a:f8:78:85:da:38: 1c:29:bd:d4:01:41:b1:89:17:4b:90:02:2d:2e:eb:f5:1b:f9: 8f:f5:16:2e:eb:d1:52:3e:e6:d1:5b:bc:73:35:5c:d5:80:b3: d7:d1:fc:1c:4b:e2:86:19:44:09:09:7f:fa:a4:4a:dd:e7:90: 77:33:cd:93:90:7e:19:c4:ba:20:fe:0c:5d:fc:3f:06:38:81: 55:af:13:74:2a:9a:7c:40:7f:39:39:22:09:08:b6:a5:ea:af: 0a:87:e7:a5:c5:90:58:74:92:3b:69:eb:e5:4b:22:14:c1:45: 7a:9d:89:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gehKLvl0EWD4tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk YzA5MjE0OTAtYTg0Yy00NGIwLTgyNzAtYTZjNjZlZTA3M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlauFPvmNREPK1NupZOBBE0R5LzUx1XrULn8 iHfzgq/pDRV+gIWTCmBXJVM4VeJRTEUEcC8ENO/WgVB02EnynITeO4t1jGfKrJo8 sRrFJ8TAq3QOUSBZMNY4mCTBB65l33s4lTtLBbsB1BVD50KJAvHmsRFpzwY4EcT+ gLLzNG7St5Ac7icv1NOkyfTasTTFqMWsqGf8kfCUxGsZ0eMyHRQK93c59rtRWp58 Vi2Zs1fc1BSGnUAmvSF1I4cE0nw8hFMRWb56CaI7rYD9myqBvHnpr6chaEd1ZuDO pyfIMa90pP3oiJGi88p+WKhYZRtudtz6nOPq3vQADsYNsj2wFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMeP5BUkWJX5bza1aHf6ffrY6TwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGIxM2RmZmUtMzYxZS0z OWRkLTgyNTgtMzM1MjZmZjZiZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoz/ejQN2OVYFNQkQTpG04IQaqdjDis1g4odxsN8+nlVrmVrI9TS8XG wSkRzVVofU3t433Q5wPwUaR/Wxmfw7/JRc/N/DtLaQg/KNhIeHUIG6qUDRGh220N t3bUz3oaWC/zkcQHOr62aLqjhB0T9bCh3ZtSZnPzZMBCUYXb3QUWRPRMZ3QRSxvX AUr4eIXaOBwpvdQBQbGJF0uQAi0u6/Ub+Y/1Fi7r0VI+5tFbvHM1XNWAs9fR/BxL 4oYZRAkJf/qkSt3nkHczzZOQfhnEuiD+DF38PwY4gVWvE3QqmnxAfzk5IgkItqXq rwqH56XFkFh0kjtp6+VLIhTBRXqdiYg= -----END CERTIFICATE-----Generated at Sun Apr 6 04:52:07 2025 by rpki-client