$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/95b7639b-e635-35de-8d90-dab72c7dc303.roa File: 95b7639b-e635-35de-8d90-dab72c7dc303.roa (raw, json) Hash identifier: itbAisesre/CYYO7BFdpq8VWpoBmMyxkhd2nOpeD98M= Subject key identifier: D0:52:E7:0E:29:95:1E:B7:7A:65:43:19:7D:2F:17:68:82:7D:81:4E Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285848FD56BF5EE9DE65DC5BD62B80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/95b7639b-e635-35de-8d90-dab72c7dc303.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 31898 IP address blocks: 161.69.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bf:5e:e9:de:65:dc:5b:d6:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=d2e2b0ed-e85e-4d6a-abe6-e2624a52aee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8a:52:51:0e:2d:8b:d7:c6:8a:4a:0b:d1:62: e8:02:9f:fd:47:f1:a1:c0:6e:8f:d3:9f:d0:a9:84: 8a:ca:bb:7a:6f:de:42:0d:b4:dd:f7:12:e1:37:a3: 63:dd:6e:66:0e:4a:9e:75:b7:8a:c6:bf:8e:1c:2d: 63:70:82:c9:68:b1:36:05:83:8b:8c:57:1c:88:94: 60:ea:37:83:6e:96:6a:3d:3e:0b:cc:b6:cd:42:e4: 7d:e7:e9:26:74:dd:70:d9:a8:5e:b7:62:26:d9:54: 63:7f:50:a5:1f:93:77:6d:86:f5:c4:ab:a1:98:3f: 20:6a:01:39:8b:83:9b:ea:44:e9:09:5d:19:59:41: b6:c3:a1:27:d9:a2:1e:92:2a:2f:d5:e8:37:fb:8b: b2:bb:82:bb:ba:6e:cc:ac:70:11:7f:91:33:25:0f: fc:78:6c:9c:04:e4:61:a1:0c:8e:08:fa:cc:4f:c2: 72:10:2f:8d:d8:7b:f4:1d:3a:2e:84:c7:5e:df:bc: 4d:15:c5:fb:5b:d1:2c:72:e7:7b:3a:cb:42:7b:6a: 8d:1d:aa:6d:77:89:36:68:1a:fb:e4:2a:ce:5a:59: 31:2b:86:a7:85:f8:4e:27:b9:60:5f:39:cb:fc:0e: 50:1c:9c:b8:d0:cc:74:14:d7:58:2f:c2:b5:73:42: 23:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:52:E7:0E:29:95:1E:B7:7A:65:43:19:7D:2F:17:68:82:7D:81:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/95b7639b-e635-35de-8d90-dab72c7dc303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4c:28:58:c0:18:fd:af:47:1b:e7:8a:57:01:48:46:27:91: 67:b5:24:44:93:8f:d5:c2:5d:c9:6f:3d:9d:42:5d:d6:ef:8a: d7:ff:69:75:e5:86:5c:ae:6b:99:8d:e8:4a:cf:f5:b6:9c:6a: 25:3f:32:b5:61:2d:ea:8c:b6:a2:21:38:4b:27:92:32:9b:67: c2:4c:41:2d:3c:66:96:fe:88:8b:37:83:cc:2e:7a:b4:45:c3: 0c:72:01:0c:8f:a8:83:db:af:7e:c8:73:eb:0a:ae:f2:36:df: 10:ed:84:b2:c5:95:a0:4a:57:10:b5:18:38:4d:02:21:af:15: 35:43:60:d1:2b:f2:c4:6f:1a:70:97:ff:cf:d9:27:86:73:b4: 0a:d8:b4:4b:24:69:52:9a:4d:35:f8:a4:73:08:fc:7e:26:d7: c0:88:95:f9:56:de:2b:36:44:e9:c3:a8:96:d2:df:7e:2f:b7: 5c:9c:9c:68:72:c0:04:19:ff:b4:25:51:8c:93:69:2a:17:c2: 14:50:6f:cf:2a:47:eb:c6:5d:3b:5c:67:31:32:4c:b3:90:d3: ba:eb:2a:74:d4:a4:04:ef:19:69:41:6e:8e:39:a2:00:db:68: 00:a0:45:8b:e9:b1:ef:f0:33:93:5b:25:c0:ed:3b:4b:d9:c2: 7a:35:24:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vr9e6d5l3FvWK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDJlMmIwZWQtZTg1ZS00ZDZhLWFiZTYtZTI2MjRhNTJhZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4pSUQ4ti9fGikoL0WLoAp/9R/GhwG6P05/Q qYSKyrt6b95CDbTd9xLhN6Nj3W5mDkqedbeKxr+OHC1jcILJaLE2BYOLjFcciJRg 6jeDbpZqPT4LzLbNQuR95+kmdN1w2ahet2Im2VRjf1ClH5N3bYb1xKuhmD8gagE5 i4Ob6kTpCV0ZWUG2w6En2aIekiov1eg3+4uyu4K7um7MrHARf5EzJQ/8eGycBORh oQyOCPrMT8JyEC+N2Hv0HTouhMde37xNFcX7W9Escud7OstCe2qNHaptd4k2aBr7 5CrOWlkxK4anhfhOJ7lgXznL/A5QHJy40Mx0FNdYL8K1c0IjjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBS5w4plR63emVDGX0vF2iCfYFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvOTViNzYzOWItZTYzNS0z NWRlLThkOTAtZGFiNzJjN2RjMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhMKFjAGP2vRxvnilcBSEYnkWe1JESTj9XCXclvPZ1CXdbvitf/aXXl hlyua5mN6ErP9bacaiU/MrVhLeqMtqIhOEsnkjKbZ8JMQS08Zpb+iIs3g8wuerRF wwxyAQyPqIPbr37Ic+sKrvI23xDthLLFlaBKVxC1GDhNAiGvFTVDYNEr8sRvGnCX /8/ZJ4ZztArYtEskaVKaTTX4pHMI/H4m18CIlflW3is2ROnDqJbS334vt1ycnGhy wAQZ/7QlUYyTaSoXwhRQb88qR+vGXTtcZzEyTLOQ07rrKnTUpATvGWlBbo45ogDb aACgRYvpse/wM5NbJcDtO0vZwno1JNY= -----END CERTIFICATE-----Generated at Sat Apr 5 13:09:56 2025 by rpki-client