$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/beba1029-5b47-3c4f-a05e-6aaac1fb3a1b.roa File: beba1029-5b47-3c4f-a05e-6aaac1fb3a1b.roa (raw, json) Hash identifier: rKK6aDG1PHOMyCvM3WouonL7MjkiYe3/vRIV8cHSx4s= Subject key identifier: 2A:11:20:15:18:69:17:A6:82:12:32:2F:92:12:DE:BA:60:6C:FA:05 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584898D606A975E9B51A58416080 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/beba1029-5b47-3c4f-a05e-6aaac1fb3a1b.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 203724 IP address blocks: 161.69.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:06:a9:75:e9:b5:1a:58:41:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=f0ac347b-8d9d-4552-96d9-7ccfdb818928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:a9:96:8b:26:e5:ae:65:f4:10:a4:59:32: 85:6d:14:8b:14:bf:1c:3b:66:2c:64:0c:66:f6:50: 19:f9:3b:06:ce:70:19:d8:b9:65:f4:e2:52:6a:b3: 16:42:7c:37:e8:0f:b2:f3:21:47:97:42:95:d1:a2: e8:10:19:c4:40:d6:86:e7:4c:cb:93:2d:2c:0a:ef: 9a:39:32:aa:b6:16:64:ec:dc:fe:99:cc:6e:8b:47: 8c:fe:21:6d:69:20:96:75:89:a7:b6:22:2b:c8:38: f2:c4:75:4f:fa:9f:4e:16:e3:3d:e0:4f:53:16:4e: 54:4a:84:47:3d:91:47:2b:7b:e7:19:94:12:8a:9c: 79:27:d2:6d:2b:60:83:ef:14:89:23:eb:10:b1:18: c3:71:e6:1a:45:e6:05:70:a0:5b:ed:6d:01:46:c1: 38:b2:f6:c8:a1:39:d7:ec:fa:57:6f:4a:6a:83:d1: 6e:3e:cd:f3:12:e6:19:19:5b:84:f5:75:94:0a:38: 25:f4:3e:db:27:4a:bb:65:53:6c:51:91:df:d1:86: 76:c5:2c:2f:18:dd:88:42:32:4e:cd:71:26:a6:84: 86:1e:ae:34:e9:72:f1:bd:df:98:a7:b3:cd:38:6e: cb:67:45:a2:a0:30:c2:3d:17:39:3a:8f:a4:6f:2c: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:11:20:15:18:69:17:A6:82:12:32:2F:92:12:DE:BA:60:6C:FA:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/beba1029-5b47-3c4f-a05e-6aaac1fb3a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b1:73:e2:92:e4:b1:03:77:67:87:fb:dd:98:3d:42:d5:6b: 4e:47:38:a7:c3:d7:e6:f6:26:86:25:8b:39:53:33:41:76:14: cd:1d:b7:2e:ca:d3:cf:a4:2a:5e:8f:af:d4:be:a1:4d:75:a5: 66:f9:7d:78:77:45:9e:93:28:e3:17:9d:ef:39:60:c4:b3:8b: 0d:81:a4:47:64:3e:3e:6b:e9:25:36:a5:6c:79:6b:bf:51:73: 19:2a:14:00:b3:94:33:6f:95:bf:51:17:3d:8a:0f:d1:5d:b4: 35:6f:ef:d7:9b:e8:b7:0f:1e:f0:f7:09:a7:95:eb:60:e3:b3: 42:e8:27:e4:11:69:c8:d9:42:62:3a:99:7d:a5:70:0b:c5:75: bd:ef:ac:57:48:d1:45:4d:35:3c:be:fd:e9:8c:bc:c3:0b:36: 9b:92:3c:6d:44:9b:4e:4a:29:9f:da:6e:32:61:b9:d7:cb:b5: 7a:b5:8d:22:f6:1c:9f:84:38:62:af:74:86:15:97:23:42:b9: a2:67:62:15:70:30:0e:41:48:6a:bb:13:f7:41:f2:6f:f2:97: d6:cb:0f:3c:25:e7:12:5a:fa:ef:e2:9d:4c:23:e7:c5:c5:9f: 12:38:cb:8c:84:ad:a9:48:8d:52:37:fb:95:ae:90:4b:57:e2: 5a:dc:ae:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gapdem1GlhBYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjBhYzM0N2ItOGQ5ZC00NTUyLTk2ZDktN2NjZmRiODE4OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaeplosm5a5l9BCkWTKFbRSLFL8cO2YsZAxm 9lAZ+TsGznAZ2Lll9OJSarMWQnw36A+y8yFHl0KV0aLoEBnEQNaG50zLky0sCu+a OTKqthZk7Nz+mcxui0eM/iFtaSCWdYmntiIryDjyxHVP+p9OFuM94E9TFk5USoRH PZFHK3vnGZQSipx5J9JtK2CD7xSJI+sQsRjDceYaReYFcKBb7W0BRsE4svbIoTnX 7PpXb0pqg9FuPs3zEuYZGVuE9XWUCjgl9D7bJ0q7ZVNsUZHf0YZ2xSwvGN2IQjJO zXEmpoSGHq406XLxvd+Yp7PNOG7LZ0WioDDCPRc5Oo+kbyy8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoRIBUYaRemghIyL5IS3rpgbPoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYmViYTEwMjktNWI0Ny0z YzRmLWEwNWUtNmFhYWMxZmIzYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWxc+KS5LEDd2eH+92YPULVa05HOKfD1+b2JoYlizlTM0F2FM0dty7K 08+kKl6Pr9S+oU11pWb5fXh3RZ6TKOMXne85YMSziw2BpEdkPj5r6SU2pWx5a79R cxkqFACzlDNvlb9RFz2KD9FdtDVv79eb6LcPHvD3CaeV62Djs0LoJ+QRacjZQmI6 mX2lcAvFdb3vrFdI0UVNNTy+/emMvMMLNpuSPG1Em05KKZ/abjJhudfLtXq1jSL2 HJ+EOGKvdIYVlyNCuaJnYhVwMA5BSGq7E/dB8m/yl9bLDzwl5xJa+u/inUwj58XF nxI4y4yEralIjVI3+5WukEtX4lrcrqQ= -----END CERTIFICATE-----Generated at Sat Apr 5 13:04:24 2025 by rpki-client