$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c2cf59f9-c5cc-35de-a2b0-7f76a38bbd67.roa File: c2cf59f9-c5cc-35de-a2b0-7f76a38bbd67.roa (raw, json) Hash identifier: Bb77rBXeT244t+5Kwc5GR3gjwTyfea3RA8dKcU76AZs= Subject key identifier: C5:F2:11:10:D0:63:56:5F:48:D2:EE:AB:AD:84:9B:D1:D9:CD:EA:6B Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285848A830B35F2A99418E233F6300 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c2cf59f9-c5cc-35de-a2b0-7f76a38bbd67.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:b3:5f:2a:99:41:8e:23:3f:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=a55dd07b-8003-4257-a4fe-647a37924030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8a:36:98:f5:16:43:13:04:5c:b9:af:b7:8b: 5d:f5:10:dd:22:d9:d6:18:af:53:0f:b9:20:5b:3a: f1:1c:a1:86:71:b4:56:b5:df:43:a8:69:c9:3c:6d: 59:e3:72:93:5e:a0:ad:5d:c1:35:4d:bc:90:f8:a8: dd:e7:dd:6e:f9:46:94:ef:76:7a:d0:80:a1:3b:1e: 6c:24:17:be:df:8b:1d:b7:5b:26:ec:73:3a:f8:8a: 02:23:f9:a3:11:f5:ae:11:a1:2b:0c:75:6e:07:b0: 7a:fc:80:e8:6e:e9:59:2e:36:ad:f6:b9:45:2c:79: 83:e0:08:8e:80:77:86:0a:bf:4b:0c:ed:2b:7b:1c: 6b:65:61:da:68:20:48:d3:dd:3f:73:99:e4:46:01: 95:6d:12:94:a9:88:c4:9e:f2:13:f8:14:32:02:3e: 37:3d:c1:69:a5:66:9b:e4:2f:de:2b:78:06:89:0c: 69:e2:28:b0:9a:87:d1:9d:21:ec:ed:ce:a6:46:fe: a1:be:19:a6:78:a1:03:ed:48:0d:30:d4:42:aa:e0: 5b:0b:28:02:56:35:4e:4e:70:16:04:c4:2f:b7:25: 86:cc:cc:ed:60:1b:7d:22:1a:39:61:4d:df:9c:98: a3:72:3f:06:fa:1a:61:6f:64:b8:40:7f:74:33:f4: e6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F2:11:10:D0:63:56:5F:48:D2:EE:AB:AD:84:9B:D1:D9:CD:EA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c2cf59f9-c5cc-35de-a2b0-7f76a38bbd67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:74:b0:34:d2:5c:42:40:65:0c:b0:43:6b:c0:8e:40:c9:fd: ec:f5:28:37:04:25:6b:07:8a:0b:0e:90:9b:65:14:f2:62:b2: 19:4d:be:d0:df:5b:b5:8b:ae:4b:0f:3a:e0:9f:7a:01:50:3a: 8e:92:ce:36:fc:60:7e:f5:37:5c:e3:d7:15:7b:08:f5:3d:1c: ec:f5:ac:65:1f:62:9e:4b:32:fb:8a:99:c2:1f:fb:6f:05:8a: bf:20:ce:65:3b:10:d9:42:7d:fd:ab:71:f9:95:b6:b6:12:b3: 83:1e:98:4f:39:ee:d4:ea:a5:cc:cd:dc:72:7f:31:8a:82:ce: 6c:3a:26:2e:a8:df:ba:e8:d3:2e:bb:a2:a7:e3:a7:58:b8:ba: 12:b3:b7:17:8c:80:ff:a5:1b:01:16:16:d6:e0:e8:37:d5:c6: 88:80:03:0b:50:7e:2b:ff:cf:2b:30:99:5b:f6:3e:1b:08:b4: 1c:b8:44:84:e1:56:b1:04:dc:00:75:89:d4:05:f0:a9:47:4d: 77:32:1e:3a:72:45:32:ec:b0:0c:e4:5b:4c:27:03:9b:fe:f5: 71:a6:80:26:33:58:c4:67:3b:98:9d:32:00:6c:5a:ad:88:32: b4:59:a2:94:c6:22:7c:3e:57:67:2b:da:9b:e7:0b:61:3e:12: 0c:bc:51:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMLNfKplBjiM/YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk YTU1ZGQwN2ItODAwMy00MjU3LWE0ZmUtNjQ3YTM3OTI0MDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIo2mPUWQxMEXLmvt4td9RDdItnWGK9TD7kg WzrxHKGGcbRWtd9DqGnJPG1Z43KTXqCtXcE1TbyQ+Kjd591u+UaU73Z60IChOx5s JBe+34sdt1sm7HM6+IoCI/mjEfWuEaErDHVuB7B6/IDobulZLjat9rlFLHmD4AiO gHeGCr9LDO0rexxrZWHaaCBI090/c5nkRgGVbRKUqYjEnvIT+BQyAj43PcFppWab 5C/eK3gGiQxp4iiwmofRnSHs7c6mRv6hvhmmeKED7UgNMNRCquBbCygCVjVOTnAW BMQvtyWGzMztYBt9Iho5YU3fnJijcj8G+hphb2S4QH90M/Tm0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXyERDQY1ZfSNLuq62Em9HZzeprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYzJjZjU5ZjktYzVjYy0z NWRlLWEyYjAtN2Y3NmEzOGJiZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR0sDTSXEJAZQywQ2vAjkDJ/ez1KDcEJWsHigsOkJtlFPJishlNvtDf W7WLrksPOuCfegFQOo6Szjb8YH71N1zj1xV7CPU9HOz1rGUfYp5LMvuKmcIf+28F ir8gzmU7ENlCff2rcfmVtrYSs4MemE857tTqpczN3HJ/MYqCzmw6Ji6o37ro0y67 oqfjp1i4uhKztxeMgP+lGwEWFtbg6DfVxoiAAwtQfiv/zyswmVv2PhsItBy4RITh VrEE3AB1idQF8KlHTXcyHjpyRTLssAzkW0wnA5v+9XGmgCYzWMRnO5idMgBsWq2I MrRZopTGInw+V2cr2pvnC2E+Egy8UXw= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:12 2025 by rpki-client