$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa File: f0289389-aaa6-342d-8462-e0a519e36ae9.roa (raw, json) Hash identifier: ZQo9tSY9QQO4TvaDa4nLP/I7XQZS5XyEE9H9JtaArEs= Subject key identifier: 41:FB:8F:07:CA:B0:CB:1A:F5:F4:42:1F:83:84:3D:A7:12:CB:A5:A1 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F432858498769BC96CDE24D03F002C200 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 31898 IP address blocks: 161.69.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:bc:96:cd:e2:4d:03:f0:02:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=7414b88a-2f32-4f1c-ae56-c1a5a5eb57a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ca:08:b5:e6:06:b8:bb:75:ac:6e:76:75:95: 27:2b:53:cc:41:63:9a:d6:1b:41:12:e9:fd:e5:26: 78:fc:f0:da:55:72:25:65:5d:dd:79:ba:dc:4c:da: e8:ae:84:1a:3b:94:66:73:69:07:0f:bd:7b:96:47: 2e:ab:21:fd:11:3b:ba:c1:ad:3d:36:54:56:1a:26: f0:53:af:04:4a:ba:00:89:c5:a3:0f:52:f3:92:fe: 45:73:13:37:b9:f7:c3:23:31:fa:15:3d:94:db:9b: ac:74:58:6b:19:0f:54:bb:f0:12:0d:61:e9:53:48: 25:c7:b3:2e:35:51:bd:c5:b4:ab:f9:89:a4:90:da: ce:b0:d7:23:de:26:7b:25:ed:6a:ac:e0:13:c6:e8: 33:b4:30:45:da:9f:d2:6e:25:82:7e:e4:ce:31:90: 7c:fe:14:06:df:3d:e9:be:84:14:3a:19:f5:85:d3: 16:47:25:ac:7d:7b:78:22:d0:4b:45:5a:5d:bc:9a: 35:f8:61:1d:1e:c8:15:42:7a:51:5e:1e:f6:fe:e7: 5b:98:2d:6a:74:f6:04:30:42:de:2f:90:82:58:ca: 95:15:fa:e3:30:d3:dd:38:ab:b2:68:fd:05:dc:0a: 78:43:ca:30:66:78:19:4f:a9:23:9a:a0:b2:0d:89: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FB:8F:07:CA:B0:CB:1A:F5:F4:42:1F:83:84:3D:A7:12:CB:A5:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f0289389-aaa6-342d-8462-e0a519e36ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:25:34:fb:33:00:dd:c4:e1:ac:e8:94:7e:f3:67:2c:79:f9: 1c:e9:63:63:9d:4b:30:b5:66:d0:0e:b1:9b:fd:8f:6c:d9:b1: e2:49:1f:3b:ed:02:6f:a4:10:9f:72:3d:71:c3:d3:98:93:5d: 0e:d4:ba:e6:05:56:01:70:f0:45:a3:79:ff:84:d9:7e:2d:b1: cb:60:e7:81:f5:fb:aa:4b:2c:43:5c:b4:c0:c9:72:22:80:75: b8:3f:60:92:24:0a:d4:bd:ed:41:96:6f:4d:26:2d:18:f8:0e: d4:fb:c0:ef:a0:69:af:a6:6c:e5:19:87:42:81:1e:e8:e0:72: b6:66:0f:94:95:3f:a2:17:a1:d5:cf:80:80:19:79:ef:80:1d: b7:37:e2:16:6c:b5:61:15:27:9f:7f:3a:8a:46:f1:29:12:4f: c2:e7:ee:78:64:a1:33:d7:e2:bb:be:c9:59:d1:00:c4:2f:06: a5:06:d7:13:6c:9e:ec:0a:b1:96:40:76:15:37:58:15:91:e9: a1:f1:5e:00:7b:80:aa:8e:cb:a8:46:49:2f:f7:2f:5d:da:b1: 9f:15:f0:2a:bb:5d:52:bd:ee:e8:01:b2:35:14:9a:f6:8b:00: 12:32:c7:e2:8b:0c:9f:9b:a5:5a:72:d3:21:32:5f:84:06:d8: 06:ec:35:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabyWzeJNA/ACwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk NzQxNGI4OGEtMmYzMi00ZjFjLWFlNTYtYzFhNWE1ZWI1N2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMoIteYGuLt1rG52dZUnK1PMQWOa1htBEun9 5SZ4/PDaVXIlZV3debrcTNroroQaO5Rmc2kHD717lkcuqyH9ETu6wa09NlRWGibw U68ESroAicWjD1Lzkv5FcxM3uffDIzH6FT2U25usdFhrGQ9Uu/ASDWHpU0glx7Mu NVG9xbSr+YmkkNrOsNcj3iZ7Je1qrOATxugztDBF2p/SbiWCfuTOMZB8/hQG3z3p voQUOhn1hdMWRyWsfXt4ItBLRVpdvJo1+GEdHsgVQnpRXh72/udbmC1qdPYEMELe L5CCWMqVFfrjMNPdOKuyaP0F3Ap4Q8owZngZT6kjmqCyDYkrmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEH7jwfKsMsa9fRCH4OEPacSy6WhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjAyODkzODktYWFhNi0z NDJkLTg0NjItZTBhNTE5ZTM2YWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIlNPszAN3E4azolH7zZyx5+RzpY2OdSzC1ZtAOsZv9j2zZseJJHzvt Am+kEJ9yPXHD05iTXQ7UuuYFVgFw8EWjef+E2X4tsctg54H1+6pLLENctMDJciKA dbg/YJIkCtS97UGWb00mLRj4DtT7wO+gaa+mbOUZh0KBHujgcrZmD5SVP6IXodXP gIAZee+AHbc34hZstWEVJ59/OopG8SkST8Ln7nhkoTPX4ru+yVnRAMQvBqUG1xNs nuwKsZZAdhU3WBWR6aHxXgB7gKqOy6hGSS/3L13asZ8V8Cq7XVK97ugBsjUUmvaL ABIyx+KLDJ+bpVpy0yEyX4QG2AbsNWQ= -----END CERTIFICATE-----Generated at Mon Jun 23 06:48:18 2025 by rpki-client