$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a7a757b-7eea-32d8-afef-24d081304d7e.roa File: 8a7a757b-7eea-32d8-afef-24d081304d7e.roa (raw, json) Hash identifier: FAQgWdWexRDC4OIrx5OaSs7JchkcydyKm6yO2FYVIdQ= Subject key identifier: 58:69:ED:40:4E:86:14:CF:FC:25:F4:FA:2F:5C:AD:F8:E5:07:59:3C Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D60672B0798807A5C9AC40 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a7a757b-7eea-32d8-afef-24d081304d7e.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:06:72:b0:79:88:07:a5:c9:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=3c955a3a-2f76-4d5f-b379-b1a20cfdb967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:08:5d:72:0d:a2:98:5f:48:ac:3e:14:40:e3: cf:1b:ce:d7:a0:5e:99:7c:3c:64:26:e7:0d:02:b0: 23:81:ba:a4:6c:28:3c:f0:84:2b:b6:52:b7:45:ec: f7:eb:eb:b0:e2:15:03:67:09:80:59:0b:e5:08:ed: 5d:d3:78:21:9f:a4:c6:27:1d:b3:f1:9d:8f:68:f1: 0d:ad:62:59:04:4c:01:52:3d:a0:88:ff:20:0f:d0: 51:55:dd:42:f3:5e:09:26:f1:06:61:5c:a3:ef:ca: 57:50:11:95:f6:d3:26:3e:0b:fd:7f:02:a0:f3:e4: 04:db:29:e1:48:c6:a4:10:e8:2c:b1:35:e5:de:2c: 57:38:ce:8a:fe:f4:f4:ca:a3:88:4d:d9:7c:c6:42: 6f:85:fb:6d:13:24:24:3b:79:6b:0d:83:f4:f9:d6: 9f:7c:c8:8e:7f:6a:c7:59:9f:c4:03:bf:b7:ce:51: 95:4c:d2:8e:ed:cf:8e:d8:93:a9:8c:50:3e:be:81: e7:63:69:31:aa:20:fa:9e:08:7c:74:08:fa:5c:5a: 93:86:32:38:b3:d1:95:ab:bf:b3:e2:71:94:54:17: 9e:fc:6f:58:1f:a1:35:4e:ec:93:dc:e8:73:69:3d: 7b:f5:d1:4d:6f:83:1e:38:77:00:bd:23:d8:25:c6: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:69:ED:40:4E:86:14:CF:FC:25:F4:FA:2F:5C:AD:F8:E5:07:59:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a7a757b-7eea-32d8-afef-24d081304d7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:61:31:f3:69:7a:f6:a7:b9:9c:7e:15:c4:25:6a:99:ba:62: df:2d:53:48:f8:1e:94:d1:aa:ba:0e:ce:27:f8:2c:53:e9:fb: 77:1a:a3:71:df:f1:63:b2:c1:a0:f2:dc:da:7f:ca:1c:0d:25: bd:db:09:3c:0a:89:04:b9:b1:3d:cc:a4:8d:e8:34:c9:61:cd: 3c:ed:6d:ee:db:41:22:e6:97:f2:dc:99:ae:59:c6:c6:98:dd: 24:28:90:81:3c:77:83:2b:4c:cf:a4:9f:5f:14:33:76:2c:a1: c8:ab:03:ad:bb:d9:2b:1f:5e:71:1a:1f:4f:6f:ba:61:c0:9d: cd:b8:3a:4c:bd:0f:d0:53:4c:7b:26:69:d5:e2:cb:d2:5f:ea: a6:e1:74:1f:22:c3:c5:17:26:ca:59:4e:68:15:37:41:6e:83: 38:7b:12:c4:89:0c:ab:13:2d:bd:b5:25:d3:73:eb:07:23:d0: 22:8a:da:b1:07:be:40:12:33:d2:84:45:df:d7:3f:b9:e7:cf: a3:27:53:b3:c1:8c:12:52:7a:a4:43:b0:e1:a4:24:4c:94:25: 08:16:2c:38:16:95:c7:f0:5b:7a:f2:d3:76:a2:1f:e4:ee:af: 90:a1:4c:4f:08:74:37:74:e0:9f:1c:87:7e:c0:da:39:3f:18: 43:a8:f3:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gZysHmIB6XJrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk M2M5NTVhM2EtMmY3Ni00ZDVmLWIzNzktYjFhMjBjZmRiOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qhdcg2imF9IrD4UQOPPG87XoF6ZfDxkJucN ArAjgbqkbCg88IQrtlK3Rez36+uw4hUDZwmAWQvlCO1d03ghn6TGJx2z8Z2PaPEN rWJZBEwBUj2giP8gD9BRVd1C814JJvEGYVyj78pXUBGV9tMmPgv9fwKg8+QE2ynh SMakEOgssTXl3ixXOM6K/vT0yqOITdl8xkJvhfttEyQkO3lrDYP0+daffMiOf2rH WZ/EA7+3zlGVTNKO7c+O2JOpjFA+voHnY2kxqiD6ngh8dAj6XFqThjI4s9GVq7+z 4nGUVBee/G9YH6E1TuyT3OhzaT179dFNb4MeOHcAvSPYJcbG6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhp7UBOhhTP/CX0+i9crfjlB1k8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvOGE3YTc1N2ItN2VlYS0z MmQ4LWFmZWYtMjRkMDgxMzA0ZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZhMfNpevanuZx+FcQlapm6Yt8tU0j4HpTRqroOzif4LFPp+3cao3Hf 8WOywaDy3Np/yhwNJb3bCTwKiQS5sT3MpI3oNMlhzTztbe7bQSLml/Lcma5ZxsaY 3SQokIE8d4MrTM+kn18UM3YsocirA6272SsfXnEaH09vumHAnc24Oky9D9BTTHsm adXiy9Jf6qbhdB8iw8UXJspZTmgVN0Fugzh7EsSJDKsTLb21JdNz6wcj0CKK2rEH vkASM9KERd/XP7nnz6MnU7PBjBJSeqRDsOGkJEyUJQgWLDgWlcfwW3ry03aiH+Tu r5ChTE8IdDd04J8ch37A2jk/GEOo86I= -----END CERTIFICATE-----Generated at Sat Apr 5 13:08:39 2025 by rpki-client