$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/93219925-0f17-38df-b362-40da0cd19500.roa File: 93219925-0f17-38df-b362-40da0cd19500.roa (raw, json) Hash identifier: jp/3qPOsft405c2Mry4V9RkJMNRRWv8eAp5tcOb1UXM= Subject key identifier: 0E:96:CD:F9:61:D9:F1:CF:FE:3E:84:9F:7D:51:EB:09:3B:6E:78:D0 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D607EE22A9F572B17B0B40 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/93219925-0f17-38df-b362-40da0cd19500.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 205272 IP address blocks: 161.69.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:07:ee:22:a9:f5:72:b1:7b:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=28b86b0a-491d-45cf-9cfb-4628abda2ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:10:71:8d:8b:76:1c:1d:c0:3a:f3:94:cb: 52:da:1b:d6:d0:c6:d1:ae:b2:76:3c:58:b8:d5:ef: 80:68:6c:f8:85:1a:36:4b:3c:9e:94:88:d5:d9:e7: 1f:7b:0b:d9:b8:6f:96:e5:01:87:4e:4f:ad:cd:61: d4:bd:1e:11:28:89:86:81:07:52:4f:c6:99:66:b6: d4:e9:a7:0a:90:09:29:fa:ce:04:ab:45:d2:9a:dc: 58:a2:2c:7c:53:bc:b5:2f:5a:1e:2f:12:3a:25:cc: 81:15:cf:1d:1d:45:47:d6:52:14:4d:24:2b:47:c1: 10:c1:a2:25:c7:91:20:c3:59:b6:6e:33:82:96:38: 22:0a:4d:76:8c:7b:db:23:9a:f7:20:ce:c3:ae:03: 48:24:59:61:17:c6:84:ef:95:3f:11:f7:ad:b2:92: f9:aa:78:37:9e:c0:61:ac:24:f2:42:8b:06:3a:3c: 30:0f:0c:d4:0a:ae:89:d3:09:51:ca:f2:36:c4:b9: ae:c1:67:d8:84:1d:46:79:a9:2f:19:9b:bd:ef:5f: a1:01:8a:f3:97:b3:53:3b:56:8f:ff:e3:e0:44:c0: b8:d4:10:c1:2e:3a:d4:c8:7d:ed:7b:33:e5:30:2e: 96:b5:30:c5:c4:00:1c:68:21:6c:17:f7:b9:05:2b: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:96:CD:F9:61:D9:F1:CF:FE:3E:84:9F:7D:51:EB:09:3B:6E:78:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/93219925-0f17-38df-b362-40da0cd19500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a2:7f:04:bc:60:5c:9e:ab:80:3c:10:8e:28:5f:ae:78:86: 68:63:d6:d6:ec:bb:52:59:43:1d:4d:19:07:f5:f2:e8:97:6b: e5:99:0f:ec:71:f3:94:22:0a:f5:93:bf:84:a0:5a:e5:c0:4f: 7f:95:33:c0:cf:83:e5:bd:cf:a7:f4:a6:51:38:b0:8e:c2:5f: 4d:e2:0c:40:42:e8:2c:66:e2:96:95:8c:d5:c0:c2:62:6b:a7: c5:71:2c:cb:df:87:de:15:8d:d5:37:ec:7d:81:81:43:a5:dd: 19:a8:c8:bb:33:31:f0:ba:b9:88:a4:5e:39:a0:0d:15:d8:bb: fc:97:93:1a:fa:92:47:5a:30:e5:c4:97:8a:6e:4c:98:a5:4b: d8:36:a1:4d:25:a9:3d:74:d3:a2:5a:8e:5f:d0:9b:f0:05:64: b9:ae:87:95:39:a6:8e:5c:a8:c1:80:e2:ac:c6:65:3b:9a:e3: ff:6f:24:85:3e:78:fe:54:29:ba:ae:f0:4c:e2:2e:37:dd:29: 7f:95:bb:f5:42:0a:37:d2:2e:f2:34:91:db:61:43:10:71:e9: 12:f0:df:34:a9:a3:2a:6a:92:df:71:9a:08:16:34:a5:78:1d: 18:9f:6f:46:68:9f:bf:28:6f:9c:a7:db:49:06:4f:d6:e4:ca: 32:4e:97:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gfuIqn1crF7C0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MjhiODZiMGEtNDkxZC00NWNmLTljZmItNDYyOGFiZGEyZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIUQcY2LdhwdwDrzlMtS2hvW0MbRrrJ2PFi4 1e+AaGz4hRo2SzyelIjV2ecfewvZuG+W5QGHTk+tzWHUvR4RKImGgQdST8aZZrbU 6acKkAkp+s4Eq0XSmtxYoix8U7y1L1oeLxI6JcyBFc8dHUVH1lIUTSQrR8EQwaIl x5Egw1m2bjOCljgiCk12jHvbI5r3IM7DrgNIJFlhF8aE75U/EfetspL5qng3nsBh rCTyQosGOjwwDwzUCq6J0wlRyvI2xLmuwWfYhB1GeakvGZu971+hAYrzl7NTO1aP /+PgRMC41BDBLjrUyH3tezPlMC6WtTDFxAAcaCFsF/e5BSvfOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6Wzflh2fHP/j6En31R6wk7bnjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvOTMyMTk5MjUtMGYxNy0z OGRmLWIzNjItNDBkYTBjZDE5NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGifwS8YFyeq4A8EI4oX654hmhj1tbsu1JZQx1NGQf18uiXa+WZD+xx 85QiCvWTv4SgWuXAT3+VM8DPg+W9z6f0plE4sI7CX03iDEBC6Cxm4paVjNXAwmJr p8VxLMvfh94VjdU37H2BgUOl3RmoyLszMfC6uYikXjmgDRXYu/yXkxr6kkdaMOXE l4puTJilS9g2oU0lqT1006Jajl/Qm/AFZLmuh5U5po5cqMGA4qzGZTua4/9vJIU+ eP5UKbqu8EziLjfdKX+Vu/VCCjfSLvI0kdthQxBx6RLw3zSpoypqkt9xmggWNKV4 HRifb0Zon78ob5yn20kGT9bkyjJOl0k= -----END CERTIFICATE-----Generated at Sat Apr 5 13:17:39 2025 by rpki-client