$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa File: 32df2551-b0bc-351f-bb8d-07bd37404e7d.roa (raw, json) Hash identifier: XyZC/CYma/0MRAxOTHqoStIMITmIGTLOZ2Im0zfohjI= Subject key identifier: D5:78:A6:AC:DE:A7:A6:57:A2:06:A6:C9:1A:36:17:D9:09:DA:4F:18 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285848D37658023140FC47E1E18A90 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 203724 IP address blocks: 161.69.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:58:02:31:40:fc:47:e1:e1:8a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=29dae018-a9d2-45ca-85a8-fc22e97cefc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:59:42:85:b6:6c:5a:98:c2:d8:1d:a4:ea: 2e:eb:db:e2:b3:69:bc:44:d1:91:be:63:34:1e:75: 18:0f:1a:3d:05:d7:f6:20:ca:c6:ab:9b:10:70:3b: d9:ed:c8:08:c4:e3:cb:f3:39:e5:b8:0d:e2:f5:ec: d9:d5:35:d3:a9:23:c6:aa:88:2b:65:96:d8:2d:30: e0:9d:61:5e:f2:35:44:0a:67:b3:5f:d2:27:31:0f: bc:8a:b6:f4:ac:e5:6d:fc:39:36:b3:53:5c:0a:87: d8:a3:67:7d:62:8f:9c:39:8e:16:43:1b:b3:1d:51: 49:e5:cc:7d:3a:78:88:d5:9a:9c:2b:08:fa:d1:cb: e9:79:6f:1f:40:23:44:f8:ad:51:eb:37:37:de:73: 19:5a:27:40:81:58:27:96:26:48:f6:24:5e:c3:22: 41:6b:c5:ad:a5:ec:2a:65:dd:ac:2c:44:e6:3e:db: cd:b2:33:de:98:df:fd:e0:b2:c3:b1:7d:0b:c5:83: 46:b8:7f:63:b2:bc:6f:f2:7f:4c:20:e3:f0:58:b2: f1:c1:b0:9d:e1:03:77:f5:f4:af:16:35:7a:10:90: d4:b4:86:93:4e:42:d1:96:30:26:f9:c6:78:4a:7f: d3:c1:b8:8a:f1:0c:3f:9a:66:fc:6f:c4:f0:1e:3d: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:78:A6:AC:DE:A7:A6:57:A2:06:A6:C9:1A:36:17:D9:09:DA:4F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:3c:e1:dc:86:64:2e:81:75:0e:d7:0d:28:ca:5c:f3:12:11: d4:f3:b7:19:ed:60:82:9b:57:a2:d6:14:9e:10:62:38:25:07: 16:42:65:1c:e7:5f:42:ef:33:36:07:43:bb:4c:ba:26:9e:e5: 8c:8b:d4:f2:1b:59:42:bf:1b:b1:65:61:3d:ef:9e:a4:e1:3a: f2:1e:ff:a4:e0:95:e4:4f:30:8a:3d:0d:3d:a0:4e:f7:5d:3e: bb:6a:12:75:07:d4:f2:f6:ff:af:3c:3f:4e:37:a7:35:0e:1a: 2a:81:a1:ed:02:c8:96:c4:70:fa:a3:32:aa:c3:4d:13:6c:2c: 66:99:29:8f:26:02:71:b5:06:2b:17:bd:1d:89:41:12:49:21: 8a:9b:db:e4:09:94:2e:18:7b:21:5a:e2:57:bd:c8:ca:03:da: c7:a8:61:76:4c:4b:d0:10:2d:da:c2:89:e2:98:fb:74:47:ae: 16:59:e4:6a:2f:59:e9:20:1a:e6:3c:9a:9f:c7:db:78:49:c5: fb:f4:3f:37:a6:01:e3:ae:67:c6:74:94:c4:36:93:44:ed:53: e6:84:53:d4:64:4e:15:a8:f1:ee:af:a1:07:27:cc:a2:65:6f: 95:e2:99:e6:ab:7d:77:cf:be:63:e3:ba:69:b9:af:2c:73:07: 70:4e:ab:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdlgCMUD8R+HhipAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk MjlkYWUwMTgtYTlkMi00NWNhLTg1YTgtZmMyMmU5N2NlZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD9ZQoW2bFqYwtgdpOou69vis2m8RNGRvmM0 HnUYDxo9Bdf2IMrGq5sQcDvZ7cgIxOPL8znluA3i9ezZ1TXTqSPGqogrZZbYLTDg nWFe8jVECmezX9InMQ+8irb0rOVt/Dk2s1NcCofYo2d9Yo+cOY4WQxuzHVFJ5cx9 OniI1ZqcKwj60cvpeW8fQCNE+K1R6zc33nMZWidAgVgnliZI9iRewyJBa8Wtpewq Zd2sLETmPtvNsjPemN/94LLDsX0LxYNGuH9jsrxv8n9MIOPwWLLxwbCd4QN39fSv FjV6EJDUtIaTTkLRljAm+cZ4Sn/TwbiK8Qw/mmb8b8TwHj0RMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV4pqzep6ZXogamyRo2F9kJ2k8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMzJkZjI1NTEtYjBiYy0z NTFmLWJiOGQtMDdiZDM3NDA0ZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFk84dyGZC6BdQ7XDSjKXPMSEdTztxntYIKbV6LWFJ4QYjglBxZCZRzn X0LvMzYHQ7tMuiae5YyL1PIbWUK/G7FlYT3vnqThOvIe/6TgleRPMIo9DT2gTvdd PrtqEnUH1PL2/688P043pzUOGiqBoe0CyJbEcPqjMqrDTRNsLGaZKY8mAnG1BisX vR2JQRJJIYqb2+QJlC4YeyFa4le9yMoD2seoYXZMS9AQLdrCieKY+3RHrhZZ5Gov WekgGuY8mp/H23hJxfv0PzemAeOuZ8Z0lMQ2k0TtU+aEU9RkThWo8e6voQcnzKJl b5XimearfXfPvmPjumm5ryxzB3BOqzE= -----END CERTIFICATE-----Generated at Mon Apr 28 01:31:04 2025 by rpki-client