$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5149a6d2-936a-33b4-ba1f-e6c5d6f6fa9d.roa File: 5149a6d2-936a-33b4-ba1f-e6c5d6f6fa9d.roa (raw, json) Hash identifier: ulI3PNfmo7xq0/0FvH/cVW/GLWpTeOi6jOpHDqJWCp0= Subject key identifier: 87:0B:0E:BD:24:CD:B9:51:DB:AA:3D:BB:D1:BD:65:BD:97:36:18:7E Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285848CC7B93EBDC1A7DA473F1B500 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5149a6d2-936a-33b4-ba1f-e6c5d6f6fa9d.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:93:eb:dc:1a:7d:a4:73:f1:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=f8855899-6c20-4eba-8bd7-676cad8a6726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:a4:bc:f0:60:8b:55:50:9b:5d:c7:83:88: 9c:d3:25:26:0a:09:00:bb:0a:57:47:0d:e2:42:9d: 23:40:02:54:f5:bc:52:f0:d0:62:f2:47:9f:8a:a4: 7d:bb:04:d4:32:95:3c:13:76:86:d3:62:50:0f:08: 46:c1:2d:d4:6f:ba:b4:b4:03:a0:9f:32:f2:f8:6a: c1:53:d3:bb:c8:5a:ba:13:64:a5:a8:a6:e8:f1:bb: ea:3f:97:2b:5c:8f:23:eb:46:b6:ae:f6:d3:78:4d: 8a:5e:e3:8b:7c:08:bd:5a:59:be:99:a8:7c:fb:aa: 9e:72:06:a0:46:bb:ba:3c:73:8f:e8:b6:a5:cb:ff: b5:f4:23:ff:fd:eb:c0:13:66:53:08:28:0d:bb:64: bc:37:64:a5:b4:f4:79:36:e7:ba:22:ce:f7:00:92: 6d:7a:9a:3a:5e:a4:98:fb:3e:68:36:b6:9f:fd:84: 03:68:c5:d5:3b:21:50:2e:bb:39:b1:0a:87:a2:87: 47:b4:74:1d:f4:21:3b:70:c6:8a:75:fd:cc:f7:88: 00:b6:8f:43:a4:f5:5e:1d:df:42:26:c9:00:15:b3: 27:d0:19:34:d7:cc:d3:ed:a9:de:59:c2:28:93:e7: 27:72:cf:94:75:73:fe:e2:53:d3:e5:83:99:52:fc: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0B:0E:BD:24:CD:B9:51:DB:AA:3D:BB:D1:BD:65:BD:97:36:18:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5149a6d2-936a-33b4-ba1f-e6c5d6f6fa9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a8:16:31:3c:c0:6f:2f:29:ab:5e:29:0b:c5:7a:d1:e8:51: 6c:6a:68:ff:d4:4c:72:41:f4:0d:74:49:6d:15:c9:6d:51:bc: d7:54:df:1b:18:38:12:96:6f:d6:d8:4b:45:5a:f8:ae:60:1e: 4b:af:7b:69:8b:f2:d4:9b:d2:9b:6c:31:69:a6:00:68:bb:46: ac:8e:23:73:e8:1d:e8:2b:78:34:db:c7:78:6e:99:1e:8e:5a: 8c:0f:6f:2e:e9:95:3f:95:a9:9a:09:df:be:78:ad:92:af:b4: 1b:09:27:c0:89:e2:4a:be:80:90:f2:8e:56:91:de:62:bb:0f: bd:4d:fa:20:5c:fd:b4:15:2c:36:b1:8f:2f:50:3e:17:d1:24: c8:42:55:e4:e6:c9:60:9a:88:65:d0:37:cf:d2:30:b1:11:e9: 6e:48:cc:25:fe:ad:a8:e1:60:67:85:54:ef:b4:64:4b:c5:bb: 41:80:81:1f:ac:5b:54:99:1e:d9:ba:ed:f5:7e:60:22:5e:7b: 14:7a:07:f2:9a:8b:49:fe:8b:9c:75:a9:8d:9d:83:12:bb:7c: 8d:26:40:69:a7:d4:ba:ec:11:d0:e9:b8:cc:98:a6:44:c8:09: 41:f6:0c:12:ab:71:46:cb:d1:89:d5:c8:87:e1:0c:34:93:66: a6:19:34:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5Pr3Bp9pHPxtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk Zjg4NTU4OTktNmMyMC00ZWJhLThiZDctNjc2Y2FkOGE2NzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUWkvPBgi1VQm13Hg4ic0yUmCgkAuwpXRw3i Qp0jQAJU9bxS8NBi8kefiqR9uwTUMpU8E3aG02JQDwhGwS3Ub7q0tAOgnzLy+GrB U9O7yFq6E2SlqKbo8bvqP5crXI8j60a2rvbTeE2KXuOLfAi9Wlm+mah8+6qecgag Rru6PHOP6Laly/+19CP//evAE2ZTCCgNu2S8N2SltPR5Nue6Is73AJJtepo6XqSY +z5oNraf/YQDaMXVOyFQLrs5sQqHoodHtHQd9CE7cMaKdf3M94gAto9DpPVeHd9C JskAFbMn0Bk018zT7aneWcIok+cncs+UdXP+4lPT5YOZUvxXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcLDr0kzblR26o9u9G9Zb2XNhh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNTE0OWE2ZDItOTM2YS0z M2I0LWJhMWYtZTZjNWQ2ZjZmYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6oFjE8wG8vKateKQvFetHoUWxqaP/UTHJB9A10SW0VyW1RvNdU3xsY OBKWb9bYS0Va+K5gHkuve2mL8tSb0ptsMWmmAGi7RqyOI3PoHegreDTbx3humR6O WowPby7plT+VqZoJ3754rZKvtBsJJ8CJ4kq+gJDyjlaR3mK7D71N+iBc/bQVLDax jy9QPhfRJMhCVeTmyWCaiGXQN8/SMLER6W5IzCX+rajhYGeFVO+0ZEvFu0GAgR+s W1SZHtm67fV+YCJeexR6B/Kai0n+i5x1qY2dgxK7fI0mQGmn1LrsEdDpuMyYpkTI CUH2DBKrcUbL0YnVyIfhDDSTZqYZNB0= -----END CERTIFICATE-----Generated at Sat Apr 5 22:32:32 2025 by rpki-client