$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa File: 5396e692-d7cf-352b-9d2a-cb00286b30e8.roa (raw, json) Hash identifier: gf2W12ywokRJnCVwrqcTPzSE/kqH0rHX/5jJ9P9QizQ= Subject key identifier: 7C:78:06:00:24:A0:85:09:73:49:8E:A6:A3:84:66:FB:45:27:8D:70 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285848FD56BF9632557D8FF69AAAC0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 31898 IP address blocks: 161.69.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bf:96:32:55:7d:8f:f6:9a:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=3f7513bb-e46f-41e8-a021-47a61343cf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:9a:e8:ab:96:c1:02:8b:97:e5:89:49:6e: 87:58:4c:1e:63:bd:90:48:90:54:51:3a:39:d4:ae: 8b:e4:b2:a6:54:c7:40:3b:94:4e:12:8e:d2:76:6c: 6b:bc:23:fd:3c:ab:6f:55:68:50:5e:dd:86:a5:f6: 8e:52:00:b6:85:cb:54:ce:30:da:8c:d2:ec:fe:f0: cc:e1:43:b1:2f:ee:73:2e:a7:1f:d5:4a:94:1c:e0: ed:e1:4c:61:35:54:03:6a:a8:39:99:62:93:d5:c0: 56:dd:e2:47:f2:32:b7:85:42:ee:18:e9:93:e6:f3: 99:d3:57:4c:6d:39:1f:05:44:f7:b3:d6:91:9a:a9: 0b:4e:3d:3b:ff:9a:3e:a0:0b:12:93:d0:f7:15:1f: a2:50:25:40:97:b4:3c:67:08:be:e1:f7:a5:f6:32: 59:f1:90:63:37:c5:3b:00:31:95:a5:dc:fa:68:ea: 2e:3f:e7:5e:89:75:29:9d:7d:94:4a:a2:f4:e7:62: ea:f7:2f:43:31:79:46:6a:30:4b:f9:0b:81:c8:ba: e2:f8:6c:35:2a:d2:29:a3:a8:e6:c7:df:5f:5e:1a: 3a:30:4e:ca:bc:5f:57:70:ba:83:70:44:f1:8c:d6: ed:2b:1c:2c:2f:a7:94:9e:6c:72:b3:a6:a7:2e:55: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:06:00:24:A0:85:09:73:49:8E:A6:A3:84:66:FB:45:27:8D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5396e692-d7cf-352b-9d2a-cb00286b30e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:67:c4:88:21:bc:31:08:93:f1:92:31:e5:77:1c:ee:20:87: 7d:f7:b8:75:4f:36:1b:76:20:40:7c:56:7e:46:14:48:3a:5b: a2:b9:65:ea:e8:37:fb:c0:d8:0e:82:a9:03:21:01:14:da:5b: 83:18:b1:51:2a:dd:31:95:1a:9e:8e:e8:b2:8c:36:d9:37:53: e3:f8:3d:ac:79:a2:57:ea:c3:78:d0:1c:34:86:73:5f:21:f5: ff:59:7e:36:ac:76:a6:b2:81:55:72:c8:78:0e:97:8a:3d:2d: 56:33:f5:cc:e5:c4:12:18:cb:51:85:c6:5f:98:6b:e9:7b:49: 18:23:e8:45:71:ef:0f:f7:27:77:9f:5d:a0:e6:b3:ca:3d:f6: ed:d4:17:2b:77:69:53:c4:c8:84:40:82:bf:fa:f7:07:0d:97: 8b:81:17:10:9e:83:cb:30:7f:f7:1e:0c:7b:39:2b:97:1f:ce: b4:6f:e2:06:c0:e6:df:92:03:16:d1:a6:54:3c:f3:a3:13:52: 02:8d:29:66:3c:9b:58:f5:38:fb:4c:b1:c8:b6:19:70:b3:3b: 47:9e:4c:a1:57:92:d5:81:04:bc:39:65:d5:4f:9c:01:ae:48: 7c:05:fb:14:64:0f:32:ed:ca:ae:04:19:c5:4e:b7:1c:b8:81: b0:55:70:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vr+WMlV9j/aaqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2Y3NTEzYmItZTQ2Zi00MWU4LWEwMjEtNDdhNjEzNDNjZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkGa6KuWwQKLl+WJSW6HWEweY72QSJBUUTo5 1K6L5LKmVMdAO5ROEo7SdmxrvCP9PKtvVWhQXt2GpfaOUgC2hctUzjDajNLs/vDM 4UOxL+5zLqcf1UqUHODt4UxhNVQDaqg5mWKT1cBW3eJH8jK3hULuGOmT5vOZ01dM bTkfBUT3s9aRmqkLTj07/5o+oAsSk9D3FR+iUCVAl7Q8Zwi+4fel9jJZ8ZBjN8U7 ADGVpdz6aOouP+deiXUpnX2USqL052Lq9y9DMXlGajBL+QuByLri+Gw1KtIpo6jm x99fXho6ME7KvF9XcLqDcETxjNbtKxwsL6eUnmxys6anLlW2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx4BgAkoIUJc0mOpqOEZvtFJ41wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNTM5NmU2OTItZDdjZi0z NTJiLTlkMmEtY2IwMDI4NmIzMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1nxIghvDEIk/GSMeV3HO4gh333uHVPNht2IEB8Vn5GFEg6W6K5Zero N/vA2A6CqQMhARTaW4MYsVEq3TGVGp6O6LKMNtk3U+P4Pax5olfqw3jQHDSGc18h 9f9ZfjasdqaygVVyyHgOl4o9LVYz9czlxBIYy1GFxl+Ya+l7SRgj6EVx7w/3J3ef XaDms8o99u3UFyt3aVPEyIRAgr/69wcNl4uBFxCeg8swf/ceDHs5K5cfzrRv4gbA 5t+SAxbRplQ886MTUgKNKWY8m1j1OPtMsci2GXCzO0eeTKFXktWBBLw5ZdVPnAGu SHwF+xRkDzLtyq4EGcVOtxy4gbBVcHE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:04:36 2025 by rpki-client