$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4f796a53-bd59-3e44-bf4d-700aff778998.roa File: 4f796a53-bd59-3e44-bf4d-700aff778998.roa (raw, json) Hash identifier: uGkE7N49YD/ZL7RVgtgdSPlEa4FPulwBCc0l9N+KQbc= Subject key identifier: 45:7B:0E:AF:73:60:1E:FF:44:92:CE:5E:A9:4E:51:E1:B7:67:5D:DA Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D6010D6ECF9EAD44E9E180 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4f796a53-bd59-3e44-bf4d-700aff778998.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 205272 IP address blocks: 161.69.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:01:0d:6e:cf:9e:ad:44:e9:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=d22b68ff-1615-4413-88dc-67de9d3061dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:51:d5:9d:ad:3a:31:9c:04:92:00:08:12:c5: 22:12:46:33:c1:2e:5e:cb:53:8c:5a:6a:21:ac:82: 41:49:da:76:18:61:13:0c:18:b3:60:4a:cb:8c:d1: 2a:2a:e1:be:e8:0c:b3:88:ea:f4:d9:67:b2:c2:5b: e9:a4:f7:93:10:28:3d:fd:ec:9f:72:90:fd:0c:f9: 18:fb:69:1b:c2:a3:6b:ed:af:aa:ad:e0:d7:f6:27: 95:cc:0b:ee:52:b7:fb:2d:f5:81:b8:20:a2:4f:38: 40:90:51:aa:dc:c1:1f:2b:1f:96:8f:00:c5:8a:07: 1d:fc:e2:f3:66:8b:ad:15:8b:a9:0c:7c:f3:69:a6: 79:6a:db:3c:80:f3:98:15:d6:cc:06:50:14:de:43: f8:76:54:e9:32:2c:cd:a3:65:0e:81:a1:04:a6:2e: 38:d1:4d:68:02:ab:19:54:3c:b0:47:66:fe:42:e0: 17:7e:51:39:3c:d5:91:90:ee:2a:69:61:c0:96:07: c5:79:49:f4:09:ea:76:1c:4a:da:44:bd:13:99:f6: 2d:a3:64:6c:be:89:07:ed:38:54:c8:e4:71:8a:53: 2c:04:30:73:3d:fe:51:98:e8:a5:6f:7f:a7:28:2e: c3:ed:57:4e:6e:1f:41:f8:6c:a7:71:11:c4:8a:8e: 08:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:0E:AF:73:60:1E:FF:44:92:CE:5E:A9:4E:51:E1:B7:67:5D:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/4f796a53-bd59-3e44-bf4d-700aff778998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e5:4e:38:01:d2:16:ad:4f:40:b7:35:0e:48:3a:48:7b:34: a6:74:e8:32:d1:aa:f3:06:41:c2:a8:11:7e:fb:76:e7:34:78: fd:cf:35:42:19:df:aa:c7:a7:ca:58:79:f9:95:da:e3:6c:48: 8e:f0:c0:5a:42:45:13:84:2c:7e:9d:f8:ed:49:46:bc:0b:3e: d9:ac:7a:87:8c:c3:d5:dc:ea:a9:dc:b9:9b:ca:4d:35:a6:d1: f6:f5:e7:11:72:b0:2e:58:d9:07:d9:32:4e:93:a7:19:60:bd: 7f:5f:ac:62:ac:bd:3e:75:a9:17:02:77:56:ac:29:ab:1f:8a: 79:86:10:54:ef:cc:a6:ad:9d:54:92:4e:95:7d:0b:a7:76:83: 58:2e:83:fd:bf:dc:e3:91:cd:5e:0d:db:31:d5:b5:f3:b8:23: ee:eb:e9:fa:54:75:25:85:5c:80:3f:0f:c8:51:38:15:05:53: c5:92:7a:2a:15:48:d7:f3:6d:cc:90:1d:b6:59:d9:92:58:eb: 1e:8e:1a:6a:aa:cd:55:4f:39:3a:cd:84:0b:73:e6:51:d8:cd: 13:b8:25:cf:89:c6:d1:46:60:92:21:46:97:51:09:c1:8b:60: 99:40:65:f8:d7:22:df:f5:f9:38:68:7a:31:aa:a9:97:3a:22: 57:c9:0e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gENbs+erUTp4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDIyYjY4ZmYtMTYxNS00NDEzLTg4ZGMtNjdkZTlkMzA2MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFHVna06MZwEkgAIEsUiEkYzwS5ey1OMWmoh rIJBSdp2GGETDBizYErLjNEqKuG+6AyziOr02WeywlvppPeTECg9/eyfcpD9DPkY +2kbwqNr7a+qreDX9ieVzAvuUrf7LfWBuCCiTzhAkFGq3MEfKx+WjwDFigcd/OLz ZoutFYupDHzzaaZ5ats8gPOYFdbMBlAU3kP4dlTpMizNo2UOgaEEpi440U1oAqsZ VDywR2b+QuAXflE5PNWRkO4qaWHAlgfFeUn0Cep2HEraRL0TmfYto2RsvokH7ThU yORxilMsBDBzPf5RmOilb3+nKC7D7VdObh9B+GyncRHEio4IZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV7Dq9zYB7/RJLOXqlOUeG3Z13aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNGY3OTZhNTMtYmQ1OS0z ZTQ0LWJmNGQtNzAwYWZmNzc4OTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHflTjgB0hatT0C3NQ5IOkh7NKZ06DLRqvMGQcKoEX77duc0eP3PNUIZ 36rHp8pYefmV2uNsSI7wwFpCRROELH6d+O1JRrwLPtmseoeMw9Xc6qncuZvKTTWm 0fb15xFysC5Y2QfZMk6TpxlgvX9frGKsvT51qRcCd1asKasfinmGEFTvzKatnVSS TpV9C6d2g1gug/2/3OORzV4N2zHVtfO4I+7r6fpUdSWFXIA/D8hROBUFU8WSeioV SNfzbcyQHbZZ2ZJY6x6OGmqqzVVPOTrNhAtz5lHYzRO4Jc+JxtFGYJIhRpdRCcGL YJlAZfjXIt/1+ThoejGqqZc6IlfJDjg= -----END CERTIFICATE-----Generated at Sun Apr 6 07:23:29 2025 by rpki-client