$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa File: 6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa (raw, json) Hash identifier: XQQlcALpkmLFNEfhsS6G7QeSbMAH/LtLFxbE0aC5FIo= Subject key identifier: 1F:D0:A2:01:97:1C:E2:3E:AE:F3:04:DA:D1:57:59:99:57:B1:5F:43 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D607DB2DD84DBEFE0E9DC0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:07:db:2d:d8:4d:be:fe:0e:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=d4d61923-fd57-444a-bbab-1391ea64754c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:18:05:59:5b:c5:76:a8:37:92:c0:87:3b: da:5a:28:09:a8:75:80:5f:39:0e:e7:8a:9f:22:3d: 8d:bb:1c:3b:f6:85:c4:d3:ec:ff:09:33:18:cd:84: 14:92:9c:07:6e:b7:d0:b0:2c:59:6e:19:6b:b5:f1: 5d:f2:93:3c:2f:53:d8:ed:a1:58:e0:2f:68:2d:90: 46:4e:1a:a3:ab:7b:a1:f1:94:40:94:0c:ec:2d:2e: b6:89:53:95:60:7a:95:15:14:ca:05:10:d5:5e:ae: 3c:d4:da:e1:b7:ce:c0:18:93:86:8c:19:fc:a8:96: ed:0a:af:04:60:f5:13:85:16:d8:74:a3:69:5b:a1: eb:22:e7:24:2b:48:57:3f:f3:82:5f:52:02:61:6f: f5:ef:9b:c6:85:fe:4f:11:a7:9a:fe:c9:28:dd:b9: 6c:d8:da:64:78:9e:29:75:f8:1c:79:86:82:63:7a: 18:70:53:25:4e:33:fd:9d:e6:90:93:2f:f4:ae:66: 30:ea:ac:82:55:23:cc:96:92:00:92:96:9f:6b:4e: 55:4c:7e:71:1c:c2:8d:2e:b5:1f:07:c8:29:85:f4: 6d:3f:08:bb:29:3a:82:05:ae:c7:15:50:27:03:d6: 8c:c5:60:58:ef:d9:20:5d:87:a4:a2:67:07:dd:70: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D0:A2:01:97:1C:E2:3E:AE:F3:04:DA:D1:57:59:99:57:B1:5F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:75:fd:58:88:f5:0a:4d:50:68:48:3f:dd:ec:53:46:f2:bb: 9c:5d:8d:c4:88:81:e5:b4:1e:71:6f:b3:17:68:8b:3b:7c:9a: 4f:7d:72:94:38:bd:da:b9:04:e0:a2:e4:dd:0d:2d:11:31:0b: d5:b6:02:b1:e4:8f:17:74:54:b0:d1:d6:1c:90:90:14:69:05: 88:9d:97:cd:32:ee:79:87:45:2e:0e:82:a0:2d:11:d9:1a:9f: 3f:e2:d2:2a:34:48:cc:22:dc:b4:aa:e1:d8:d5:4b:72:42:18: eb:ce:24:6b:4d:da:b7:b9:c0:e4:20:08:39:71:32:13:98:d2: 05:9f:21:2b:ed:2c:f9:3c:35:af:18:1d:e3:0d:db:39:2f:b9: ae:9b:e1:40:0e:63:f0:73:a8:7d:ca:3f:71:37:0d:08:16:20: 86:ad:33:2f:c2:01:17:0a:df:70:c8:15:20:60:c0:12:38:c3: 5d:77:62:1c:29:25:6c:47:f5:03:7c:ed:7b:06:4b:02:db:3d: 1a:1a:95:4b:8e:a9:83:3a:88:bf:81:59:07:bd:71:32:bc:b9: 58:a3:5b:df:ae:a3:fa:e6:d1:75:da:1e:5d:1c:de:16:21:65: f2:f9:b3:0f:54:95:75:fa:5a:08:0a:66:de:b5:ce:56:ac:84: 25:29:44:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gfbLdhNvv4OncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDRkNjE5MjMtZmQ1Ny00NDRhLWJiYWItMTM5MWVhNjQ3NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvgYBVlbxXaoN5LAhzvaWigJqHWAXzkO54qf Ij2Nuxw79oXE0+z/CTMYzYQUkpwHbrfQsCxZbhlrtfFd8pM8L1PY7aFY4C9oLZBG Thqjq3uh8ZRAlAzsLS62iVOVYHqVFRTKBRDVXq481Nrht87AGJOGjBn8qJbtCq8E YPUThRbYdKNpW6HrIuckK0hXP/OCX1ICYW/175vGhf5PEaea/sko3bls2NpkeJ4p dfgceYaCY3oYcFMlTjP9neaQky/0rmYw6qyCVSPMlpIAkpafa05VTH5xHMKNLrUf B8gphfRtPwi7KTqCBa7HFVAnA9aMxWBY79kgXYekomcH3XBj7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/QogGXHOI+rvME2tFXWZlXsV9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNmRjOTVhN2MtMTU0Ni0z ZmQ0LTg4N2ItN2NhMWUxMmE4YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE91/ViI9QpNUGhIP93sU0byu5xdjcSIgeW0HnFvsxdoizt8mk99cpQ4 vdq5BOCi5N0NLRExC9W2ArHkjxd0VLDR1hyQkBRpBYidl80y7nmHRS4OgqAtEdka nz/i0io0SMwi3LSq4djVS3JCGOvOJGtN2re5wOQgCDlxMhOY0gWfISvtLPk8Na8Y HeMN2zkvua6b4UAOY/BzqH3KP3E3DQgWIIatMy/CARcK33DIFSBgwBI4w113Yhwp JWxH9QN87XsGSwLbPRoalUuOqYM6iL+BWQe9cTK8uVijW9+uo/rm0XXaHl0c3hYh ZfL5sw9UlXX6WggKZt61zlashCUpRHs= -----END CERTIFICATE-----Generated at Sat Apr 5 13:00:17 2025 by rpki-client