$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/35c988fe-48b9-3ac7-9d24-863b564701f3.roa File: 35c988fe-48b9-3ac7-9d24-863b564701f3.roa (raw, json) Hash identifier: 6YAg7Rcuhe0BAPXFEhKRpGEbRf1FzogqaUN+hp5cyOc= Subject key identifier: B1:0A:68:F3:2D:21:F0:C1:CB:B4:EE:4A:C0:4E:D7:0F:14:9E:01:89 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584957F40DA05CB8C17CC4C1BF10 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/35c988fe-48b9-3ac7-9d24-863b564701f3.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 203724 IP address blocks: 161.69.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0d:a0:5c:b8:c1:7c:c4:c1:bf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=19a0b82d-82ec-48af-bbce-ad6dfaffbeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:33:51:12:7d:74:41:65:4a:b4:de:74:0b: 34:56:85:3f:3f:91:40:fc:a6:91:72:3f:60:9b:7c: 47:66:20:cb:07:73:53:c1:76:88:0c:ec:6b:39:c7: aa:4b:7d:69:a2:1d:1c:8c:02:df:ff:48:c4:34:f6: 60:97:76:bb:59:db:24:2c:75:b7:62:f3:16:48:d0: ff:65:83:64:67:fb:be:4c:1b:52:eb:61:6b:2f:e4: 54:8a:82:4a:c0:d2:c5:be:7c:31:ec:5e:1a:af:03: c0:73:2c:c3:4c:35:03:98:81:13:ab:3b:7c:94:dd: c4:78:4e:00:c1:2d:2f:49:64:9f:4d:42:6c:7c:7a: 53:bf:7f:77:a2:00:18:59:01:2f:19:3d:5b:19:a1: 57:51:b2:b2:56:f1:ee:56:d0:b6:0c:e5:ca:45:23: ef:65:dd:59:1c:f6:24:76:62:31:db:28:a2:9e:c1: 79:8b:49:8d:22:4c:c8:81:53:62:54:3b:08:b4:0d: 10:eb:4b:cf:ab:66:bb:5f:42:fb:50:19:8a:e7:fc: cb:e3:af:b4:bd:dd:15:d0:35:ed:16:9d:86:93:54: 4b:9a:86:dc:5f:bb:ca:71:66:63:12:9e:93:3d:5e: 12:07:82:2b:f9:61:93:90:3f:aa:a5:fd:8c:0b:e9: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0A:68:F3:2D:21:F0:C1:CB:B4:EE:4A:C0:4E:D7:0F:14:9E:01:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/35c988fe-48b9-3ac7-9d24-863b564701f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f0:db:0e:d0:67:de:38:81:e3:65:fd:df:01:51:93:1d:c6: 2e:3e:b0:29:9a:89:50:f8:42:5b:55:e4:15:74:79:8f:0b:db: 40:e4:2a:98:39:b1:5c:d8:74:16:dd:d7:74:a4:d7:e7:93:27: 8c:71:63:62:11:06:0a:99:ce:9a:75:df:bf:f6:32:26:89:c5: ae:91:db:8d:dc:5a:85:ce:26:6d:e3:7c:30:f3:0b:ef:b0:6a: e7:8b:14:ac:7a:f8:04:19:8d:33:97:3c:d8:4e:0b:75:d3:a3: 1b:92:0e:e3:d5:d9:31:53:32:64:e9:f4:62:b6:4d:e9:e3:9e: cf:73:4f:20:55:93:f0:2b:5e:bf:d0:b6:15:83:76:3e:60:76: 3e:75:bc:14:03:2d:fe:9b:b4:85:1c:66:b5:6f:94:6a:0f:4d: 13:53:a4:dc:2d:48:e4:af:83:b9:23:c8:31:39:b1:f6:09:49: 41:fc:61:3d:4f:51:eb:a5:80:72:55:ee:f5:d4:ba:f6:d7:16: f2:fc:6d:1a:57:ff:8f:39:75:6e:07:2c:be:ba:65:86:59:a5: d0:a5:fb:f0:72:9d:06:7c:65:3f:6c:c0:0f:95:d1:d5:aa:0d: 83:79:08:c3:f9:fe:33:75:2b:aa:4a:28:fe:54:ee:f7:02:c0: 3f:c7:e2:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9A2gXLjBfMTBvxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MTlhMGI4MmQtODJlYy00OGFmLWJiY2UtYWQ2ZGZhZmZiZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xszURJ9dEFlSrTedAs0VoU/P5FA/KaRcj9g m3xHZiDLB3NTwXaIDOxrOceqS31poh0cjALf/0jENPZgl3a7WdskLHW3YvMWSND/ ZYNkZ/u+TBtS62FrL+RUioJKwNLFvnwx7F4arwPAcyzDTDUDmIETqzt8lN3EeE4A wS0vSWSfTUJsfHpTv393ogAYWQEvGT1bGaFXUbKyVvHuVtC2DOXKRSPvZd1ZHPYk dmIx2yiinsF5i0mNIkzIgVNiVDsItA0Q60vPq2a7X0L7UBmK5/zL46+0vd0V0DXt Fp2Gk1RLmobcX7vKcWZjEp6TPV4SB4Ir+WGTkD+qpf2MC+knSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEKaPMtIfDBy7TuSsBO1w8UngGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMzVjOTg4ZmUtNDhiOS0z YWM3LTlkMjQtODYzYjU2NDcwMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzw2w7QZ944geNl/d8BUZMdxi4+sCmaiVD4QltV5BV0eY8L20DkKpg5 sVzYdBbd13Sk1+eTJ4xxY2IRBgqZzpp137/2MiaJxa6R243cWoXOJm3jfDDzC++w aueLFKx6+AQZjTOXPNhOC3XToxuSDuPV2TFTMmTp9GK2Tenjns9zTyBVk/ArXr/Q thWDdj5gdj51vBQDLf6btIUcZrVvlGoPTRNTpNwtSOSvg7kjyDE5sfYJSUH8YT1P UeulgHJV7vXUuvbXFvL8bRpX/485dW4HLL66ZYZZpdCl+/BynQZ8ZT9swA+V0dWq DYN5CMP5/jN1K6pKKP5U7vcCwD/H4ko= -----END CERTIFICATE-----Generated at Tue Apr 29 09:24:23 2025 by rpki-client