$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa File: 15d788a4-7d75-34f3-8f99-0b197da91520.roa (raw, json) Hash identifier: sONuP/Zr5h2ub/dTq1+0GCLaZbZeTx0L7q/w9E3poMs= Subject key identifier: B3:9F:DA:9F:56:AC:C8:75:BC:25:55:07:9E:38:FA:FE:CF:32:28:1A Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F0C02B056852CAA988CC0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 203724 IP address blocks: 161.69.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0c:02:b0:56:85:2c:aa:98:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=7d44a30e-4d29-4863-95a8-bad135685979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:5e:64:55:a3:60:c0:db:11:80:9d:48:53: 9c:eb:40:a9:25:32:59:69:ca:f0:94:e9:b4:c4:a0: 12:f2:35:49:56:6d:13:7f:09:30:ce:f9:75:f7:29: 56:fc:9f:e2:11:8e:4c:5e:f9:d0:53:f4:94:2e:81: f2:3e:60:5e:8f:f0:79:01:55:3d:19:c1:bb:90:2d: be:ac:b9:90:b4:f0:ba:b2:3e:d8:c3:a1:c1:33:df: 21:87:b1:55:f3:3c:e0:08:9c:14:71:08:4c:eb:e2: 96:42:f5:d9:7a:12:b8:4b:c8:3f:14:43:f2:54:52: 5f:46:d5:5b:57:15:3c:1d:06:39:fc:0d:76:eb:50: f6:38:db:ba:60:cb:73:2e:ff:12:34:f8:03:08:e3: 43:4c:ab:5d:19:4e:01:62:21:71:18:52:1a:9b:58: b6:0f:64:4e:a1:4c:3d:33:5c:07:a0:0e:4b:17:03: e8:84:7e:ea:82:d8:e0:b9:db:ba:06:92:2a:76:ac: 0e:f9:d2:5a:84:78:60:3b:a2:f5:ff:01:fe:60:80: b2:69:94:6e:7c:db:02:0a:fa:93:69:8b:54:e2:4e: 94:54:62:f5:5c:eb:c6:4b:05:b4:9a:9a:64:36:04: 0c:57:da:5c:d6:3e:a5:95:87:c1:b7:31:36:e5:a4: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9F:DA:9F:56:AC:C8:75:BC:25:55:07:9E:38:FA:FE:CF:32:28:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/15d788a4-7d75-34f3-8f99-0b197da91520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0e:58:09:0b:c2:2b:79:85:23:ac:43:46:39:cd:14:24:74: bb:10:b9:57:f1:d6:cf:0a:95:43:96:0e:c8:b1:04:34:ca:00: 1d:6c:c5:2a:1d:82:f8:df:25:91:d5:ab:d1:59:4a:24:51:56: dd:91:e2:71:be:9b:88:09:7e:36:fc:00:6a:8b:72:30:19:9a: 02:87:9b:78:47:4c:d9:0a:f5:ce:41:8c:0e:69:71:e6:96:55: 13:88:3e:78:3a:9d:fa:87:f5:c7:07:70:ff:69:f4:42:69:6d: 0c:28:89:d0:f5:6f:c6:80:e9:69:bb:e0:35:c4:a3:f4:c5:24: e5:90:4e:c5:9a:a4:3c:00:4c:6c:85:a6:60:2a:b8:66:1a:68: 3d:7b:24:6e:1a:a6:01:0e:2c:2d:ef:64:02:62:c2:93:01:26: 27:3f:60:24:63:16:8c:d5:ab:15:c7:d6:45:0b:6d:bf:96:ba: dc:99:29:67:03:b1:e5:12:b4:fb:8d:83:37:90:c2:c0:4e:8c: 08:1d:19:3e:b0:c0:13:1e:55:3d:9f:73:33:0f:63:6b:12:fe: a0:01:24:24:3a:11:ef:15:c8:ee:21:3a:ef:db:33:2d:cc:09: 00:d2:c9:77:1a:b4:30:d1:d3:82:1a:9a:b4:9f:16:f6:7f:f5: 47:9a:0f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwwCsFaFLKqYjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk N2Q0NGEzMGUtNGQyOS00ODYzLTk1YTgtYmFkMTM1Njg1OTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1JeZFWjYMDbEYCdSFOc60CpJTJZacrwlOm0 xKAS8jVJVm0Tfwkwzvl19ylW/J/iEY5MXvnQU/SULoHyPmBej/B5AVU9GcG7kC2+ rLmQtPC6sj7Yw6HBM98hh7FV8zzgCJwUcQhM6+KWQvXZehK4S8g/FEPyVFJfRtVb VxU8HQY5/A1261D2ONu6YMtzLv8SNPgDCONDTKtdGU4BYiFxGFIam1i2D2ROoUw9 M1wHoA5LFwPohH7qgtjgudu6BpIqdqwO+dJahHhgO6L1/wH+YICyaZRufNsCCvqT aYtU4k6UVGL1XOvGSwW0mppkNgQMV9pc1j6llYfBtzE25aRCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOf2p9WrMh1vCVVB544+v7PMigaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMTVkNzg4YTQtN2Q3NS0z NGYzLThmOTktMGIxOTdkYTkxNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMOWAkLwit5hSOsQ0Y5zRQkdLsQuVfx1s8KlUOWDsixBDTKAB1sxSod gvjfJZHVq9FZSiRRVt2R4nG+m4gJfjb8AGqLcjAZmgKHm3hHTNkK9c5BjA5pceaW VROIPng6nfqH9ccHcP9p9EJpbQwoidD1b8aA6Wm74DXEo/TFJOWQTsWapDwATGyF pmAquGYaaD17JG4apgEOLC3vZAJiwpMBJic/YCRjFozVqxXH1kULbb+WutyZKWcD seUStPuNgzeQwsBOjAgdGT6wwBMeVT2fczMPY2sS/qABJCQ6Ee8VyO4hOu/bMy3M CQDSyXcatDDR04IamrSfFvZ/9UeaD5g= -----END CERTIFICATE-----Generated at Mon Apr 28 00:38:39 2025 by rpki-client