$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa File: 1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa (raw, json) Hash identifier: UUjswcouXfyPobclFaDWtkNxg+qD1hPHt1LjnNxLk8Y= Subject key identifier: B5:31:66:2D:C7:89:44:4E:B9:C3:96:13:58:30:E1:EF:35:16:1A:84 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D6012F8F0407F93572BD80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:01:2f:8f:04:07:f9:35:72:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=42a5f3c0-44c9-417a-a2d8-f1a45441a4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:ba:65:85:03:42:0d:aa:ae:3c:8a:cb:57: 2e:4f:ca:f1:6d:b6:1a:3a:fe:a2:bd:26:99:0e:f4: 0e:71:ae:14:83:94:32:68:37:b5:a6:eb:e3:da:dd: 30:dd:55:fd:6e:94:29:bf:90:9b:2e:0c:fe:8b:47: 6e:ae:68:30:30:1d:a4:36:67:16:49:12:48:3e:79: fa:6e:26:09:a5:86:86:6e:07:23:03:f1:76:c4:82: 27:08:c8:ab:37:78:11:f5:a6:dd:5d:cc:01:b0:ea: 4d:27:1c:e1:8a:3c:f4:dd:6b:1b:65:7b:5a:33:f9: cd:0b:49:31:4b:47:19:9e:f3:b9:17:aa:35:51:1d: 4b:10:5a:0d:30:b5:a4:be:69:23:dc:5e:ec:97:5f: ce:b7:cc:e4:36:a2:18:0d:d7:81:5b:75:0a:81:8d: 00:8e:c6:0f:43:da:48:67:01:9b:fa:81:45:bf:55: ec:61:7e:7f:6b:b2:99:5d:b5:b6:f6:f1:d0:01:bd: 8f:b9:f5:6c:a3:fc:42:7d:92:81:27:74:a2:5e:ef: 84:e7:bf:d4:8e:59:0e:72:8f:37:ba:01:67:98:5e: 5e:ac:00:b5:bf:17:a6:33:b8:fc:62:31:22:6e:65: 33:ee:49:96:ef:8e:58:d3:25:22:ae:5a:aa:87:0d: 72:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:66:2D:C7:89:44:4E:B9:C3:96:13:58:30:E1:EF:35:16:1A:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/1ebbfdff-32b7-3f05-8481-2ece4467e95d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:dd:f0:7f:0f:70:96:8a:dd:63:52:a6:fa:35:29:20:41:90: f8:56:44:c9:1b:f5:41:d4:ed:46:0f:00:0e:b5:77:9a:bc:1a: 99:e0:27:51:43:9e:bc:7e:b3:b8:64:5b:bc:62:b0:83:1c:cf: 10:45:55:61:28:71:54:14:a3:8c:d5:70:a6:22:41:45:3c:ae: 9a:72:50:11:0e:75:64:6e:22:8d:5d:09:59:05:ea:92:c1:cc: aa:1f:5e:83:b7:2e:18:f2:a8:bf:72:45:a0:71:81:9c:b6:bb: e1:2b:73:f8:a0:4d:23:a1:46:4d:07:5f:7d:cc:bb:f7:4e:71: aa:aa:6e:aa:40:f2:83:a9:45:fc:28:f4:61:5b:1e:e2:2d:23: 1c:ac:bc:96:ee:f3:e5:58:32:5b:08:e8:d1:96:34:93:73:d8: 49:b9:73:6b:90:79:4e:4c:67:6a:4a:3e:ba:94:77:f3:90:67: 14:23:98:e1:f8:9e:6b:08:c4:ef:5d:fc:3e:16:da:27:f8:8b: ad:f4:9f:a4:30:60:4e:00:02:07:4e:2d:09:aa:83:ce:1a:7e: a8:be:91:08:a8:e3:1f:62:f6:83:1b:2d:52:9c:9f:24:b4:c5: 11:88:f4:e4:93:73:d2:2d:fb:a6:80:13:1f:01:fb:98:fa:91: 3d:1e:83:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gEvjwQH+TVyvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NDJhNWYzYzAtNDRjOS00MTdhLWEyZDgtZjFhNDU0NDFhNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+C6ZYUDQg2qrjyKy1cuT8rxbbYaOv6ivSaZ DvQOca4Ug5QyaDe1puvj2t0w3VX9bpQpv5CbLgz+i0durmgwMB2kNmcWSRJIPnn6 biYJpYaGbgcjA/F2xIInCMirN3gR9abdXcwBsOpNJxzhijz03WsbZXtaM/nNC0kx S0cZnvO5F6o1UR1LEFoNMLWkvmkj3F7sl1/Ot8zkNqIYDdeBW3UKgY0AjsYPQ9pI ZwGb+oFFv1XsYX5/a7KZXbW29vHQAb2PufVso/xCfZKBJ3SiXu+E57/UjlkOco83 ugFnmF5erAC1vxemM7j8YjEibmUz7kmW745Y0yUirlqqhw1ynQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUxZi3HiUROucOWE1gw4e81FhqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMWViYmZkZmYtMzJiNy0z ZjA1LTg0ODEtMmVjZTQ0NjdlOTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjd8H8PcJaK3WNSpvo1KSBBkPhWRMkb9UHU7UYPAA61d5q8GpngJ1FD nrx+s7hkW7xisIMczxBFVWEocVQUo4zVcKYiQUU8rppyUBEOdWRuIo1dCVkF6pLB zKofXoO3LhjyqL9yRaBxgZy2u+Erc/igTSOhRk0HX33Mu/dOcaqqbqpA8oOpRfwo 9GFbHuItIxysvJbu8+VYMlsI6NGWNJNz2Em5c2uQeU5MZ2pKPrqUd/OQZxQjmOH4 nmsIxO9d/D4W2if4i630n6QwYE4AAgdOLQmqg84afqi+kQio4x9i9oMbLVKcnyS0 xRGI9OSTc9It+6aAEx8B+5j6kT0eg9M= -----END CERTIFICATE-----Generated at Sat Apr 5 12:58:07 2025 by rpki-client