$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa File: 9bc1236b-7372-3b11-93cd-1762f91ca362.roa (raw, json) Hash identifier: SMJJw6dFfDTgx9vEwZrKhTkOQUyDeRQMSmcqto8Fwh0= Subject key identifier: BC:76:55:88:DB:6C:FE:97:B6:7E:73:C9:59:CA:E0:AD:17:45:81:60 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285848B8F0C891E3E8DCA05B801880 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c8:91:e3:e8:dc:a0:5b:80:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=2a17a56a-4f0f-45fb-ad1d-f6baf9dbff50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:68:62:b1:ec:24:8f:e0:e1:02:90:3c:6f:f4: 03:4c:e1:b1:30:64:20:b1:6b:0d:a5:f0:3b:41:e5: 2f:2d:56:e0:86:12:ca:a9:15:f5:50:e8:06:9a:40: 01:1a:48:c9:07:54:1b:53:52:d6:8b:67:3d:09:eb: e6:1c:0b:a6:f1:bf:3c:a4:58:45:cc:2e:b0:0c:2e: b7:43:a3:bc:23:e3:dd:31:67:e7:4b:ee:63:b7:fe: 9a:7a:83:ed:5a:b5:64:74:44:b0:51:d9:a2:dc:d6: 81:9a:6f:1a:75:f5:eb:28:fc:dd:4d:00:ae:4a:07: de:97:3c:b8:cd:da:20:cf:5a:57:05:e1:b4:88:62: c2:89:1f:f8:bf:1a:6e:0f:bf:ea:23:59:ae:55:63: ba:b9:b6:7d:24:70:32:aa:d8:bb:44:65:dd:25:5e: 3e:bd:d1:84:d0:04:d4:f6:86:2e:a1:d3:5d:84:c1: 62:0d:fe:bf:a6:eb:80:09:e1:13:2d:39:ac:86:2a: c5:a8:5d:04:fa:8d:53:51:56:b8:c7:47:9c:42:31: a0:d1:23:8c:57:98:89:1b:19:75:69:fe:29:83:8d: 35:d1:e9:f3:be:e4:b7:28:d5:6b:c5:46:a6:e7:c3: ef:8b:bb:2a:35:6e:5e:37:fa:17:3c:96:55:96:64: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:76:55:88:DB:6C:FE:97:B6:7E:73:C9:59:CA:E0:AD:17:45:81:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/9bc1236b-7372-3b11-93cd-1762f91ca362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:86:68:a3:38:bc:4e:75:c7:54:b0:df:f8:bf:b5:41:d5:92: b9:d6:e5:ed:b5:03:da:e1:da:91:f8:cc:93:7e:02:8f:f1:4c: 3c:c7:47:96:02:49:ba:7d:41:8c:8c:8d:80:b5:fb:9c:60:11: 24:ba:54:e0:89:2d:70:9c:47:69:99:68:76:0f:36:b7:d2:2c: e8:e2:7f:21:bf:b5:55:1a:bc:cf:88:12:7d:1f:d1:67:1a:c6: 77:cf:f0:90:2c:3a:f5:cd:f4:f0:70:1c:9c:bc:74:8c:bb:6b: c5:3f:73:94:5a:65:83:26:0c:b0:02:92:3d:e5:48:e2:70:c4: b8:6e:90:0b:80:fa:6b:09:c9:8c:92:d3:8c:c2:df:17:fa:dc: 52:43:19:b5:f8:8d:cb:e5:5a:39:a6:bd:c1:69:2f:b8:1b:e9: 16:6c:b5:99:b3:ef:90:5a:1e:77:50:33:99:e2:4a:69:8c:00: 5e:b9:bf:61:92:ad:04:26:a0:88:f6:f9:fe:34:d3:08:6a:14: 5a:4c:a4:b3:e5:0c:bd:06:8c:e1:bf:15:74:66:c5:14:8e:cb: 9b:69:9c:84:00:3c:64:4b:f2:5f:b4:0a:55:81:7e:d5:17:b3: f0:a1:0e:75:43:29:a1:1f:71:84:fc:66:3c:55:17:d9:9d:f3: 89:6c:36:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48MiR4+jcoFuAGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MmExN2E1NmEtNGYwZi00NWZiLWFkMWQtZjZiYWY5ZGJmZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmhisewkj+DhApA8b/QDTOGxMGQgsWsNpfA7 QeUvLVbghhLKqRX1UOgGmkABGkjJB1QbU1LWi2c9CevmHAum8b88pFhFzC6wDC63 Q6O8I+PdMWfnS+5jt/6aeoPtWrVkdESwUdmi3NaBmm8adfXrKPzdTQCuSgfelzy4 zdogz1pXBeG0iGLCiR/4vxpuD7/qI1muVWO6ubZ9JHAyqti7RGXdJV4+vdGE0ATU 9oYuodNdhMFiDf6/puuACeETLTmshirFqF0E+o1TUVa4x0ecQjGg0SOMV5iJGxl1 af4pg4010enzvuS3KNVrxUam58Pvi7sqNW5eN/oXPJZVlmRipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx2VYjbbP6Xtn5zyVnK4K0XRYFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvOWJjMTIzNmItNzM3Mi0z YjExLTkzY2QtMTc2MmY5MWNhMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaGaKM4vE51x1Sw3/i/tUHVkrnW5e21A9rh2pH4zJN+Ao/xTDzHR5YC Sbp9QYyMjYC1+5xgESS6VOCJLXCcR2mZaHYPNrfSLOjifyG/tVUavM+IEn0f0Wca xnfP8JAsOvXN9PBwHJy8dIy7a8U/c5RaZYMmDLACkj3lSOJwxLhukAuA+msJyYyS 04zC3xf63FJDGbX4jcvlWjmmvcFpL7gb6RZstZmz75BaHndQM5niSmmMAF65v2GS rQQmoIj2+f400whqFFpMpLPlDL0GjOG/FXRmxRSOy5tpnIQAPGRL8l+0ClWBftUX s/ChDnVDKaEfcYT8ZjxVF9md84lsNnY= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:42 2025 by rpki-client