$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0b13dffe-361e-39dd-8258-33526ff6be31.roa File: 0b13dffe-361e-39dd-8258-33526ff6be31.roa (raw, json) Hash identifier: kzBH2PcKhSeIw6Qxzir/K/VXEYSpAa93GTkCYILk9Ws= Subject key identifier: AB:AF:40:A1:09:CF:36:1D:27:73:8B:EC:21:8C:95:1D:4E:8E:D3:87 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F0CF12FBF00D0EEDA3350 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0b13dffe-361e-39dd-8258-33526ff6be31.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 203724 IP address blocks: 161.69.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0c:f1:2f:bf:00:d0:ee:da:33:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=6ca71b27-cd59-48c0-9b2a-b0523f4d7b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:a6:96:23:bd:f9:87:6e:0e:ed:f6:55:59: c7:82:59:06:e5:94:c0:b9:51:d3:70:63:75:43:79: 0b:41:5b:a8:22:b9:78:31:bb:e5:75:17:7a:35:95: 3b:35:22:59:c7:11:98:fd:31:08:9d:cb:85:52:2f: 76:2e:6f:10:2b:62:a8:c0:d5:f4:30:80:3b:fb:c9: 7b:0a:b9:06:bd:86:fe:1b:15:25:65:2d:8e:9f:29: 81:3f:40:07:8b:1b:39:30:50:5d:60:40:ce:1e:f5: 0a:2e:c9:5d:3d:28:57:58:d0:c4:b0:a4:e8:db:68: 45:24:2c:26:a4:5a:a0:d7:d5:27:3b:d6:1f:53:b0: 34:ec:49:0d:82:69:e7:d9:80:e6:1d:4b:03:a5:2f: e0:13:d7:6c:68:6b:fe:03:75:1a:a7:2e:a9:e8:f3: c5:58:c4:b4:de:75:d5:c4:6a:d2:3c:dd:d5:b2:b3: d6:4b:3c:be:da:67:62:92:5c:73:58:d6:1e:56:b5: 69:4b:b4:1e:59:e0:1a:6e:0e:ce:6f:3e:ab:14:96: 47:bf:dd:e2:42:7d:22:f2:f0:ab:e5:4e:2c:3f:65: ce:58:06:da:9b:9c:5e:48:48:0d:0f:85:83:0f:44: df:1b:c8:6e:15:8a:5a:d6:ec:f8:cd:27:e6:72:1c: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AF:40:A1:09:CF:36:1D:27:73:8B:EC:21:8C:95:1D:4E:8E:D3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0b13dffe-361e-39dd-8258-33526ff6be31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a7:2f:f6:cb:c0:ba:b3:87:7f:18:02:2a:68:b8:d3:96:8a: c2:ff:2b:d2:d8:14:0b:93:0c:38:00:d5:af:a5:36:27:1f:c6: 95:be:08:3b:72:de:1b:f6:d7:21:41:db:91:ef:5d:eb:1e:e2: 5e:69:5a:eb:20:5e:26:5b:ce:b6:84:72:8f:ed:55:22:f3:0f: 61:6d:8f:c8:6f:96:83:6a:30:ef:ce:1c:51:8d:c1:90:5e:68: 32:fb:7e:c9:f3:46:8c:b4:38:31:86:01:63:ef:57:1c:d4:cd: c3:95:7f:4c:4b:61:5d:05:5a:b8:83:20:f8:61:f0:36:b5:b2: a7:7a:18:a2:6b:4f:d7:3f:3a:67:82:db:c4:26:ed:da:b6:cf: 31:b4:81:5f:c4:cd:3d:de:e8:c4:26:97:55:65:9e:b0:3d:26: 4d:68:64:ee:08:e0:5d:f6:9c:03:60:a2:70:42:7d:63:4c:2e: b1:f2:fd:93:f3:cd:8a:7b:57:09:d2:72:34:3f:d2:bd:17:85: 85:dc:26:97:ad:1d:46:7d:6c:11:3e:fd:4b:7c:52:99:df:5c: 59:55:56:59:6b:d3:3c:58:3a:fb:4d:d7:d6:fc:ec:b6:c3:1b: cc:af:39:9f:96:62:09:99:56:9d:43:47:19:5a:d8:66:62:b3: 16:e3:ed:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwzxL78A0O7aM1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NmNhNzFiMjctY2Q1OS00OGMwLTliMmEtYjA1MjNmNGQ3YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXGmliO9+YduDu32VVnHglkG5ZTAuVHTcGN1 Q3kLQVuoIrl4MbvldRd6NZU7NSJZxxGY/TEIncuFUi92Lm8QK2KowNX0MIA7+8l7 CrkGvYb+GxUlZS2OnymBP0AHixs5MFBdYEDOHvUKLsldPShXWNDEsKTo22hFJCwm pFqg19UnO9YfU7A07EkNgmnn2YDmHUsDpS/gE9dsaGv+A3Uapy6p6PPFWMS03nXV xGrSPN3VsrPWSzy+2mdiklxzWNYeVrVpS7QeWeAabg7Obz6rFJZHv93iQn0i8vCr 5U4sP2XOWAbam5xeSEgND4WDD0TfG8huFYpa1uz4zSfmchz2IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuvQKEJzzYdJ3OL7CGMlR1OjtOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGIxM2RmZmUtMzYxZS0z OWRkLTgyNTgtMzM1MjZmZjZiZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABinL/bLwLqzh38YAipouNOWisL/K9LYFAuTDDgA1a+lNicfxpW+CDty 3hv21yFB25HvXese4l5pWusgXiZbzraEco/tVSLzD2Ftj8hvloNqMO/OHFGNwZBe aDL7fsnzRoy0ODGGAWPvVxzUzcOVf0xLYV0FWriDIPhh8Da1sqd6GKJrT9c/OmeC 28Qm7dq2zzG0gV/EzT3e6MQml1VlnrA9Jk1oZO4I4F32nANgonBCfWNMLrHy/ZPz zYp7VwnScjQ/0r0XhYXcJpetHUZ9bBE+/Ut8UpnfXFlVVllr0zxYOvtN19b87LbD G8yvOZ+WYgmZVp1DRxla2GZisxbj7Ts= -----END CERTIFICATE-----Generated at Mon Apr 28 08:29:03 2025 by rpki-client