$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ce39d691-4e41-3676-9593-1093107776f8.roa File: ce39d691-4e41-3676-9593-1093107776f8.roa (raw, json) Hash identifier: h1+V4EG9Ln1Ji9jV/N31K7InLQ3KX7oDDskqRkHXvFE= Subject key identifier: 50:51:E3:7C:05:6C:09:93:F0:8E:CB:D5:FF:B3:C1:90:F3:5B:3B:40 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584957F40D0CF387AC489E442C80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ce39d691-4e41-3676-9593-1093107776f8.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0d:0c:f3:87:ac:48:9e:44:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=c59a5d86-60d5-416c-9826-2c3f1ce650be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:a9:c6:55:c5:d1:fd:cb:5c:e5:6a:97:4f: 00:f5:d8:99:27:62:1d:27:ad:29:9c:05:2f:ee:46: aa:95:f0:e3:4f:25:b4:c2:ad:82:f5:a3:32:78:de: 5b:57:5c:05:10:22:e5:32:47:20:06:b9:d8:20:1a: f3:53:ac:8a:22:d6:cd:41:c8:16:c6:f5:bd:65:89: 53:ab:92:6b:cc:68:a0:ad:6f:74:f3:56:30:f3:d4: 26:54:92:8f:cc:c9:62:f5:59:71:16:8e:b9:0f:7b: c2:ca:ab:b3:92:58:1c:09:88:3a:a0:6e:b4:15:30: 21:cf:22:44:ef:1e:00:95:fb:98:7f:cd:92:84:0a: 88:5d:eb:9f:71:96:a2:06:3c:57:fd:16:35:89:11: 0e:51:a0:05:77:ec:cb:7e:ef:2e:be:3b:ef:3e:99: d8:69:1b:3f:fd:7a:31:8a:47:80:48:fc:96:fa:5b: 7a:69:75:e9:33:cb:d0:d7:cf:13:df:f6:8e:40:82: fb:15:da:9f:67:a1:39:80:e0:1f:7d:f7:ae:cf:07: 27:fc:3e:a7:46:40:f5:74:05:86:02:eb:4d:dc:e7: 5e:98:e9:62:c0:55:79:40:32:8b:f0:75:a1:81:51: ab:4d:c0:86:bb:8b:72:dc:2e:de:d7:37:8d:da:b8: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:51:E3:7C:05:6C:09:93:F0:8E:CB:D5:FF:B3:C1:90:F3:5B:3B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ce39d691-4e41-3676-9593-1093107776f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a5:b8:47:54:1d:04:18:8a:16:98:a5:4f:33:c8:cc:65:10: b7:d4:00:30:68:08:65:d4:e6:5c:c7:16:7a:44:6a:0d:46:6a: 03:4e:02:37:97:96:58:56:c4:4a:a1:81:1f:37:e3:dc:6e:44: 4e:9a:a3:ed:bd:e1:34:35:04:05:ed:77:d4:b5:03:19:7d:03: b5:d2:ba:38:ca:d4:29:5d:ca:6c:5f:2e:f2:15:6f:d3:7c:28: 51:f6:74:1d:af:d0:bd:0c:f1:69:b6:2a:41:c1:22:c1:1c:b7: b0:46:70:58:9b:fd:f7:94:37:74:f9:f8:a4:7b:89:a6:77:9b: 4a:f1:7c:08:6a:10:26:6a:c9:e5:23:cd:e7:15:71:6f:c8:bc: 2f:96:00:86:06:e4:b8:0c:2c:83:5d:5c:3d:ca:b5:cc:06:56: 36:92:2a:a5:ad:e7:b6:06:30:21:37:60:ca:f1:a5:db:e2:8f: 61:22:d5:8c:2e:ed:72:8d:56:20:89:a3:22:24:08:b3:a7:1f: 73:d1:bf:5f:c3:6d:89:1f:de:38:20:e6:bd:e4:45:36:f2:2a: 06:61:a0:1a:cd:9e:61:8e:98:10:4e:53:14:96:1b:2d:fa:bb: a2:2d:0b:2f:d7:80:fc:0a:08:28:6d:81:20:7c:3c:0e:d0:58: 01:20:3b:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9A0M84esSJ5ELIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YzU5YTVkODYtNjBkNS00MTZjLTk4MjYtMmMzZjFjZTY1MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuupxlXF0f3LXOVql08A9diZJ2IdJ60pnAUv 7kaqlfDjTyW0wq2C9aMyeN5bV1wFECLlMkcgBrnYIBrzU6yKItbNQcgWxvW9ZYlT q5JrzGigrW9081Yw89QmVJKPzMli9VlxFo65D3vCyquzklgcCYg6oG60FTAhzyJE 7x4AlfuYf82ShAqIXeufcZaiBjxX/RY1iREOUaAFd+zLfu8uvjvvPpnYaRs//Xox ikeASPyW+lt6aXXpM8vQ188T3/aOQIL7FdqfZ6E5gOAfffeuzwcn/D6nRkD1dAWG AutN3OdemOliwFV5QDKL8HWhgVGrTcCGu4ty3C7e1zeN2rjZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBR43wFbAmT8I7L1f+zwZDzWztAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2UzOWQ2OTEtNGU0MS0z Njc2LTk1OTMtMTA5MzEwNzc3NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUURMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCluEdUHQQYihaYpU8zyMxlELfUADBoCGXU5lzHFnpEag1GagNOAjeX llhWxEqhgR8349xuRE6ao+294TQ1BAXtd9S1Axl9A7XSujjK1CldymxfLvIVb9N8 KFH2dB2v0L0M8Wm2KkHBIsEct7BGcFib/feUN3T5+KR7iaZ3m0rxfAhqECZqyeUj zecVcW/IvC+WAIYG5LgMLINdXD3KtcwGVjaSKqWt57YGMCE3YMrxpdvij2Ei1Ywu 7XKNViCJoyIkCLOnH3PRv1/DbYkf3jgg5r3kRTbyKgZhoBrNnmGOmBBOUxSWGy36 u6ItCy/XgPwKCChtgSB8PA7QWAEgOzk= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:14 2025 by rpki-client