$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8dd54771-641c-3441-b738-5439e82997ca.roa File: 8dd54771-641c-3441-b738-5439e82997ca.roa (raw, json) Hash identifier: czQz77Fpmi7xFxvozOmSasIdGJVDwer/t/u2Z0xXy78= Subject key identifier: 34:64:F5:20:A1:EB:7E:5F:26:30:32:E6:E7:08:69:C3:01:A8:F1:18 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D603424E7EB5658A480080 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8dd54771-641c-3441-b738-5439e82997ca.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:03:42:4e:7e:b5:65:8a:48:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=e99a6002-cc27-475e-b1a8-44d4b2007c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c3:df:9d:f3:93:1b:e7:81:6f:04:c5:39:3c: be:41:1c:54:16:52:54:41:bd:7d:97:20:06:94:91: d9:52:af:5c:c0:16:a5:ba:3d:e2:17:9a:aa:83:60: e2:55:e4:43:af:ff:92:2d:40:ce:da:6f:8a:cf:95: e6:96:96:af:5e:dd:b9:57:00:42:fb:59:40:68:b5: 9a:50:2f:99:1e:73:82:a6:b7:ff:76:11:08:cf:45: f0:e1:8e:98:39:37:8c:bd:4b:7f:8f:38:33:b6:eb: 51:a4:0c:9d:1e:f7:48:9f:46:5e:7c:aa:84:71:41: f0:5a:e5:54:42:b2:b0:1d:e4:b2:11:9d:94:ee:37: 71:9a:9a:de:e0:9d:f9:e2:13:91:11:94:ac:ee:eb: b6:d7:88:0f:6e:bf:ba:ea:ae:bd:59:fa:9f:a6:31: 98:6d:fb:ea:43:55:fa:96:75:35:0c:c5:b8:5c:6c: b1:57:85:0d:f5:7a:28:6e:32:50:d8:02:2a:76:ea: fb:f8:53:86:4c:f9:82:ba:3f:5e:05:8e:3b:9c:ca: ca:8c:0b:78:96:e9:b4:47:63:f4:d6:f1:57:66:82: f2:93:6e:44:6d:f3:82:48:dd:c4:12:14:38:5a:4f: 20:23:a8:fa:9c:15:2d:b1:c1:3a:cd:b1:7a:a4:23: 39:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:F5:20:A1:EB:7E:5F:26:30:32:E6:E7:08:69:C3:01:A8:F1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8dd54771-641c-3441-b738-5439e82997ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7f:a6:ab:77:66:08:93:dd:0e:2e:e8:21:07:bc:10:43:55: 75:29:99:96:a9:57:33:ac:ab:86:a4:4d:7f:04:f1:13:14:bd: cc:df:dc:65:92:55:e0:57:79:e5:98:26:ea:b6:b1:90:ca:55: 5c:e4:9f:a5:b4:62:1a:e2:43:28:9b:8f:7e:44:24:ee:3f:15: 9c:21:54:08:63:55:24:36:01:ed:cc:eb:b3:81:86:82:23:ed: 01:d0:70:0f:fd:9b:10:ef:cc:53:f4:6f:d5:9c:42:b8:5d:ce: 36:f7:67:11:6c:71:5d:4d:6a:9d:16:81:6e:a8:ef:31:39:6d: 6a:46:2c:b5:c1:b9:c5:a4:54:78:fe:63:fd:11:6d:7a:18:f3: c9:c1:a3:e8:c8:93:8d:85:7f:0e:ae:5e:9c:37:67:69:13:82: ba:1a:a7:81:af:94:c3:7d:b3:66:d8:09:e2:15:49:3c:5a:9e: a5:89:c5:33:8e:97:b0:f9:23:0a:b7:d7:15:74:e5:c9:06:58: fc:1e:7d:6a:4f:3c:d0:c4:a7:04:df:9e:d7:a0:6f:4d:e4:4f: 20:ff:f7:94:a5:ed:fa:3a:48:bf:87:97:53:06:30:54:93:ec: 94:12:53:a7:66:58:f8:aa:ca:30:aa:a5:ee:dd:56:ad:1d:2c: 06:b7:51:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gNCTn61ZYpIAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZTk5YTYwMDItY2MyNy00NzVlLWIxYTgtNDRkNGIyMDA3YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicPfnfOTG+eBbwTFOTy+QRxUFlJUQb19lyAG lJHZUq9cwBaluj3iF5qqg2DiVeRDr/+SLUDO2m+Kz5XmlpavXt25VwBC+1lAaLWa UC+ZHnOCprf/dhEIz0Xw4Y6YOTeMvUt/jzgztutRpAydHvdIn0ZefKqEcUHwWuVU QrKwHeSyEZ2U7jdxmpre4J354hOREZSs7uu214gPbr+66q69WfqfpjGYbfvqQ1X6 lnU1DMW4XGyxV4UN9XoobjJQ2AIqdur7+FOGTPmCuj9eBY47nMrKjAt4lum0R2P0 1vFXZoLyk25EbfOCSN3EEhQ4Wk8gI6j6nBUtscE6zbF6pCM5zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRk9SCh635fJjAy5ucIacMBqPEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvOGRkNTQ3NzEtNjQxYy0z NDQxLWI3MzgtNTQzOWU4Mjk5N2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt/pqt3ZgiT3Q4u6CEHvBBDVXUpmZapVzOsq4akTX8E8RMUvczf3GWS VeBXeeWYJuq2sZDKVVzkn6W0YhriQyibj35EJO4/FZwhVAhjVSQ2Ae3M67OBhoIj 7QHQcA/9mxDvzFP0b9WcQrhdzjb3ZxFscV1Nap0WgW6o7zE5bWpGLLXBucWkVHj+ Y/0RbXoY88nBo+jIk42Ffw6uXpw3Z2kTgroap4GvlMN9s2bYCeIVSTxanqWJxTOO l7D5Iwq31xV05ckGWPwefWpPPNDEpwTfntegb03kTyD/95Sl7fo6SL+Hl1MGMFST 7JQSU6dmWPiqyjCqpe7dVq0dLAa3UQY= -----END CERTIFICATE-----Generated at Sat Apr 5 22:37:07 2025 by rpki-client