$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa File: 0da288e2-8c4b-3f48-8630-d0e217b213f8.roa (raw, json) Hash identifier: OgNN9/sc1ggoPCE94ccEHtV6QJPm9DyINu2gHJC/0R8= Subject key identifier: 94:AC:E9:4D:7A:0A:00:62:BA:23:AE:13:AA:7C:3A:E8:EE:45:04:10 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F0C3A8720E45E521D8680 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 161.69.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0c:3a:87:20:e4:5e:52:1d:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=7a5673b3-3e96-43aa-9fc3-6874ed5d3990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:b3:eb:8d:c2:d3:83:14:9a:18:e7:20:66: 7a:99:30:16:c0:29:2b:70:92:24:17:f5:99:bd:13: a8:c6:8b:c6:38:39:68:1d:14:cc:1f:8a:95:40:c4: 6b:5e:6a:6d:53:0b:68:95:be:e5:45:63:3a:30:34: 25:12:86:bf:5f:ab:3f:64:b4:8f:e9:e5:ab:1f:e8: d7:23:dc:31:a5:63:f7:17:2a:1e:4a:56:8f:1e:61: 1f:d2:76:49:08:ca:e7:66:9d:00:70:c7:08:79:50: 93:41:a7:25:3d:ea:ad:38:b1:16:82:4d:8d:2d:f0: 49:17:0e:ea:47:7a:e6:51:62:48:ec:e3:4e:67:f8: 23:f9:bd:40:2b:15:90:2b:bc:7b:ec:8d:a8:0b:43: 7e:53:e3:81:99:f1:a6:98:b4:60:1b:c8:e0:ea:28: a2:51:8d:01:da:36:f8:94:e9:e2:3f:b5:ad:dc:d2: 18:3c:c0:a2:3b:f3:9b:07:a1:d3:24:0d:c8:00:3e: 38:95:38:b5:38:bd:ee:64:bd:6e:40:d1:26:cf:0f: 7a:aa:4b:09:c6:d4:fb:6c:f6:68:d2:c7:a6:c1:6a: 5b:31:ac:1d:f1:30:54:86:40:ea:67:d7:df:0f:ff: 8b:bf:0a:91:29:59:d3:5e:94:db:f3:b3:cb:70:e5: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AC:E9:4D:7A:0A:00:62:BA:23:AE:13:AA:7C:3A:E8:EE:45:04:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0da288e2-8c4b-3f48-8630-d0e217b213f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:71:3c:22:8f:76:6c:cf:1c:98:62:4c:95:cb:cd:f9:a2:6c: a6:29:ca:8a:c7:68:88:96:09:7f:ec:54:91:82:8e:f9:dc:ba: 9f:a0:16:1a:1d:01:0f:51:75:1b:e4:30:96:e6:4e:94:0d:d9: 67:01:93:88:2a:e5:08:12:53:32:c7:12:f0:d7:d3:b6:e5:1c: c2:9f:85:6c:da:bb:81:c2:1e:ce:67:1b:b5:49:f5:c7:8f:8f: f8:a7:06:7a:94:7f:2c:48:25:98:25:9d:8d:d9:73:30:d5:4c: 77:70:83:d0:50:10:28:e5:37:da:db:6a:ce:dd:9d:5e:46:43: cf:65:69:3c:4c:aa:c4:67:24:2b:5e:15:a0:f0:72:31:a4:63: 35:29:dc:98:93:f2:df:f2:33:ea:f9:15:54:c4:0b:86:df:47: 33:c4:c4:39:d5:19:cc:24:76:34:1f:35:ba:8a:f1:76:ff:e6: c5:56:98:35:c4:2b:c9:4c:cc:75:44:26:64:5c:85:13:75:91: bf:ea:a1:25:b8:66:30:ec:0f:93:36:53:d5:93:57:82:01:9f: f6:b9:0f:23:78:2c:b7:9a:d2:9c:26:9c:cd:e6:23:11:5d:83: 3d:ee:2c:2d:81:fc:97:3a:31:88:1e:e6:27:65:df:eb:dc:0a: e6:a9:2e:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dww6hyDkXlIdhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk N2E1NjczYjMtM2U5Ni00M2FhLTlmYzMtNjg3NGVkNWQzOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb+z643C04MUmhjnIGZ6mTAWwCkrcJIkF/WZ vROoxovGODloHRTMH4qVQMRrXmptUwtolb7lRWM6MDQlEoa/X6s/ZLSP6eWrH+jX I9wxpWP3FyoeSlaPHmEf0nZJCMrnZp0AcMcIeVCTQaclPeqtOLEWgk2NLfBJFw7q R3rmUWJI7ONOZ/gj+b1AKxWQK7x77I2oC0N+U+OBmfGmmLRgG8jg6iiiUY0B2jb4 lOniP7Wt3NIYPMCiO/ObB6HTJA3IAD44lTi1OL3uZL1uQNEmzw96qksJxtT7bPZo 0semwWpbMawd8TBUhkDqZ9ffD/+LvwqRKVnTXpTb87PLcOX2uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSs6U16CgBiuiOuE6p8OujuRQQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGRhMjg4ZTItOGM0Yi0z ZjQ4LTg2MzAtZDBlMjE3YjIxM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtxPCKPdmzPHJhiTJXLzfmibKYpyorHaIiWCX/sVJGCjvncup+gFhod AQ9RdRvkMJbmTpQN2WcBk4gq5QgSUzLHEvDX07blHMKfhWzau4HCHs5nG7VJ9ceP j/inBnqUfyxIJZglnY3ZczDVTHdwg9BQECjlN9rbas7dnV5GQ89laTxMqsRnJCte FaDwcjGkYzUp3JiT8t/yM+r5FVTEC4bfRzPExDnVGcwkdjQfNbqK8Xb/5sVWmDXE K8lMzHVEJmRchRN1kb/qoSW4ZjDsD5M2U9WTV4IBn/a5DyN4LLea0pwmnM3mIxFd gz3uLC2B/Jc6MYge5idl3+vcCuapLnQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:08:19 2025 by rpki-client