$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d2a207b-f934-3b52-90a2-08dbed9e5741.roa File: 4d2a207b-f934-3b52-90a2-08dbed9e5741.roa (raw, json) Hash identifier: ACb6XIesEWzMcZD9bvO9jyA+z0yi1pkRLvkL6aEx9es= Subject key identifier: CB:F8:20:71:54:A6:05:C0:C9:D3:7F:BB:77:7D:34:03:D5:73:13:FC Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584957F40D3DB2BD9D09EE5F473C Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d2a207b-f934-3b52-90a2-08dbed9e5741.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0d:3d:b2:bd:9d:09:ee:5f:47:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=ac07356c-0eb1-45f5-8521-78b6b0096748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:75:7b:17:96:95:8b:a3:1c:40:d9:41:d7: b1:01:61:51:2c:3b:24:70:6d:95:a8:14:7a:f5:ab: 29:b2:1e:95:31:95:0a:9e:96:51:75:4b:33:2d:bf: c3:65:1a:3c:dc:d2:26:7c:cb:55:5a:6b:98:84:cc: 5b:6f:1f:a5:43:31:ea:8f:57:9e:f4:a6:04:cd:b3: 22:38:13:ba:7c:e0:e5:1f:8c:d5:76:4f:2c:59:04: 67:6d:11:5f:c9:5e:76:db:c3:d4:d2:34:17:7a:b2: 46:62:10:cb:b5:e5:92:c3:ea:c0:04:d3:32:64:1b: 32:0f:9b:e1:be:e7:fb:83:34:02:0a:79:02:af:74: 38:4d:aa:a1:13:4a:c5:ef:45:57:f3:64:22:06:c8: 10:29:64:a1:a0:b2:c9:73:8f:37:a7:b3:3d:7f:1c: 4a:50:3d:3a:5b:ee:3b:77:c9:ba:01:9b:eb:85:87: 70:b8:f6:01:ba:d5:5f:8b:40:cd:30:c3:3f:1e:8e: bc:45:52:dc:b3:80:4c:52:b7:3e:5b:71:59:aa:47: 81:2b:ff:fa:a2:5f:f5:e6:8c:7a:a5:91:5b:04:fa: 5d:04:25:06:35:b1:94:02:12:69:83:70:db:a8:65: 89:68:dc:f9:0a:55:e6:4a:a7:72:83:fb:bc:67:70: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F8:20:71:54:A6:05:C0:C9:D3:7F:BB:77:7D:34:03:D5:73:13:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4d2a207b-f934-3b52-90a2-08dbed9e5741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1b:74:b8:4c:94:2c:09:be:16:a3:92:bb:97:92:1e:35:09: 35:94:ec:cf:ca:c6:82:ae:02:c3:5f:0a:83:b9:33:31:e2:23: 1f:93:c1:d9:ff:f1:89:6e:91:8d:e5:d2:b5:58:e2:fe:56:97: 2b:35:e5:d0:81:12:4c:ae:f4:dc:e3:75:c9:d7:f9:f8:45:c7: 00:0d:c0:c5:de:ec:7f:50:5e:e4:b2:dc:79:17:21:a1:e0:62: 70:fd:0e:34:9d:a0:7c:98:ef:37:0b:5a:a9:6d:51:5b:fd:1f: 9e:ff:5e:17:f6:7e:6c:c0:9d:dc:1f:2d:31:18:e8:60:8f:ef: e3:08:f9:56:24:32:67:b3:e1:72:1c:d5:d0:0c:99:60:ec:92: 3d:0b:4e:95:af:29:9f:54:99:60:68:4a:36:05:18:1f:c9:de: a8:b3:80:2e:03:89:eb:ff:e5:29:d3:5c:d0:0b:79:d0:f2:9c: 24:7a:cf:7a:03:64:cc:38:8a:6e:59:91:3c:24:ab:2f:56:63: bd:25:3f:58:d1:a0:89:08:b9:a5:85:27:04:60:7f:47:bc:c0: 5f:b9:24:d5:72:97:34:08:b5:73:b4:34:8d:f2:9a:96:45:82: 8c:bd:c3:24:56:d5:dc:b1:c5:7f:be:05:8b:5e:88:09:19:cd: 75:50:ab:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9A09sr2dCe5fRzwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YWMwNzM1NmMtMGViMS00NWY1LTg1MjEtNzhiNmIwMDk2NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzl1exeWlYujHEDZQdexAWFRLDskcG2VqBR6 9aspsh6VMZUKnpZRdUszLb/DZRo83NImfMtVWmuYhMxbbx+lQzHqj1ee9KYEzbMi OBO6fODlH4zVdk8sWQRnbRFfyV5228PU0jQXerJGYhDLteWSw+rABNMyZBsyD5vh vuf7gzQCCnkCr3Q4TaqhE0rF70VX82QiBsgQKWShoLLJc483p7M9fxxKUD06W+47 d8m6AZvrhYdwuPYButVfi0DNMMM/Ho68RVLcs4BMUrc+W3FZqkeBK//6ol/15ox6 pZFbBPpdBCUGNbGUAhJpg3DbqGWJaNz5ClXmSqdyg/u8Z3DbZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv4IHFUpgXAydN/u3d9NAPVcxP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGQyYTIwN2ItZjkzNC0z YjUyLTkwYTItMDhkYmVkOWU1NzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEbdLhMlCwJvhajkruXkh41CTWU7M/KxoKuAsNfCoO5MzHiIx+Twdn/ 8YlukY3l0rVY4v5Wlys15dCBEkyu9NzjdcnX+fhFxwANwMXe7H9QXuSy3HkXIaHg YnD9DjSdoHyY7zcLWqltUVv9H57/Xhf2fmzAndwfLTEY6GCP7+MI+VYkMmez4XIc 1dAMmWDskj0LTpWvKZ9UmWBoSjYFGB/J3qizgC4Diev/5SnTXNALedDynCR6z3oD ZMw4im5ZkTwkqy9WY70lP1jRoIkIuaWFJwRgf0e8wF+5JNVylzQItXO0NI3ympZF goy9wyRW1dyxxX++BYteiAkZzXVQq80= -----END CERTIFICATE-----Generated at Wed Apr 9 17:12:28 2025 by rpki-client