$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa File: 4e648413-26b2-3336-a1ab-8879a3f0b013.roa (raw, json) Hash identifier: eeCqW+HxutHsKZ21EFf39zzkwJQq3ZJ4MN4yY+QRmUA= Subject key identifier: 5C:5B:2B:89:27:3B:60:8F:BC:D7:0E:D6:B8:1B:97:F7:E9:83:75:20 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285848A830B32E5EFDEA645DE96C00 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b3:2e:5e:fd:ea:64:5d:e9:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=ac3e105b-c0fb-4d3c-ae1f-52f2db6d3ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3a:17:27:bf:98:ba:e7:5c:15:ca:62:58:46: 5f:db:57:17:c8:9b:d8:72:0a:98:2d:b2:1f:33:54: 02:de:e2:59:71:01:0f:b2:03:80:23:45:f5:ca:62: 0b:9f:a6:7c:dd:00:3b:bb:3f:44:02:78:18:12:af: 06:b4:ea:58:f6:57:3c:56:f4:e9:e6:40:b6:13:08: 52:a3:0d:85:4c:7d:2b:49:dc:a6:65:3e:3b:04:3c: 05:ae:f9:33:d8:34:4d:5f:61:7e:4f:c7:08:01:26: bd:bd:8d:c2:7e:e6:f7:bc:3f:60:fc:0b:2c:fe:72: f5:0d:bf:ae:63:10:e2:29:b1:49:ac:23:64:c9:67: aa:03:36:70:8c:dc:24:dd:29:4d:f4:3d:5f:dc:b5: e0:ca:24:4c:d3:2f:94:a7:77:09:04:12:60:bd:b5: b4:c0:03:56:c8:4a:9b:ed:59:50:48:bd:58:cf:12: c8:89:a3:56:28:27:94:4b:01:75:ba:d8:58:e0:5c: 1c:bf:b5:06:f5:8d:c5:13:4c:d0:ed:0e:94:bd:ae: 30:a4:d8:24:20:87:35:86:12:cf:bb:9d:72:7d:5d: 08:b7:5a:6c:0b:1a:9c:ce:8f:75:fa:70:1c:89:e5: 13:f8:51:d3:c4:8f:68:74:e5:ba:3c:36:b1:33:38: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5B:2B:89:27:3B:60:8F:BC:D7:0E:D6:B8:1B:97:F7:E9:83:75:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4e648413-26b2-3336-a1ab-8879a3f0b013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ba:74:f9:5c:09:cf:72:e9:d4:e9:58:63:76:73:36:bf:d0: 22:7e:d0:93:96:d6:a2:6a:9d:46:e5:8f:1b:47:3b:42:a4:75: 84:dc:12:bb:07:46:a3:a8:56:9c:8b:91:d9:79:72:fe:6b:e4: 2d:55:2d:e5:58:bc:08:b7:9f:be:34:e8:91:23:8f:e9:b6:97: f3:44:d8:7b:1f:ef:4d:90:26:2c:60:a1:ea:f5:67:dc:b0:95: ce:49:9d:eb:13:cc:56:45:18:98:5b:44:37:97:06:ab:2a:32: 4b:ba:6a:a8:cc:c6:a5:4d:12:12:5d:ef:2d:3d:4c:18:f7:24: 4d:49:f5:36:13:e2:a1:75:33:77:d8:36:24:ea:39:f2:eb:28: 8b:7a:f9:10:f3:0c:38:52:87:f7:3c:81:9f:ce:f6:a0:ab:eb: 99:d2:7e:52:06:29:b5:61:c4:8d:bd:73:14:c8:dd:37:9b:2b: 21:00:37:8f:0e:19:d9:72:85:ee:cb:9c:4c:1b:73:23:f2:41: de:bb:dc:e5:59:e8:77:75:13:68:5f:f5:b3:46:30:3d:ee:46: a8:df:10:fd:48:c9:e2:ec:77:44:70:95:37:41:4c:80:6d:a6: 9b:9f:d0:a6:d0:c3:84:d0:65:c7:09:04:e7:09:bc:df:59:c6: 0a:96:ef:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLMuXv3qZF3pbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YWMzZTEwNWItYzBmYi00ZDNjLWFlMWYtNTJmMmRiNmQzZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkToXJ7+YuudcFcpiWEZf21cXyJvYcgqYLbIf M1QC3uJZcQEPsgOAI0X1ymILn6Z83QA7uz9EAngYEq8GtOpY9lc8VvTp5kC2EwhS ow2FTH0rSdymZT47BDwFrvkz2DRNX2F+T8cIASa9vY3Cfub3vD9g/Ass/nL1Db+u YxDiKbFJrCNkyWeqAzZwjNwk3SlN9D1f3LXgyiRM0y+Up3cJBBJgvbW0wANWyEqb 7VlQSL1YzxLIiaNWKCeUSwF1uthY4Fwcv7UG9Y3FE0zQ7Q6Uva4wpNgkIIc1hhLP u51yfV0It1psCxqczo91+nAcieUT+FHTxI9odOW6PDaxMzj+yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxbK4knO2CPvNcO1rgbl/fpg3UgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGU2NDg0MTMtMjZiMi0z MzM2LWExYWItODg3OWEzZjBiMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC6dPlcCc9y6dTpWGN2cza/0CJ+0JOW1qJqnUbljxtHO0KkdYTcErsH RqOoVpyLkdl5cv5r5C1VLeVYvAi3n7406JEjj+m2l/NE2Hsf702QJixgoer1Z9yw lc5JnesTzFZFGJhbRDeXBqsqMku6aqjMxqVNEhJd7y09TBj3JE1J9TYT4qF1M3fY NiTqOfLrKIt6+RDzDDhSh/c8gZ/O9qCr65nSflIGKbVhxI29cxTI3TebKyEAN48O Gdlyhe7LnEwbcyPyQd673OVZ6Hd1E2hf9bNGMD3uRqjfEP1IyeLsd0RwlTdBTIBt ppuf0KbQw4TQZccJBOcJvN9ZxgqW7+g= -----END CERTIFICATE-----Generated at Wed Apr 9 12:51:08 2025 by rpki-client