$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa File: 3d59fe02-e286-37b5-a4e0-ee928379db85.roa (raw, json) Hash identifier: RM8vUV2whEN3Yk6Qcza9CLLna6DKzXR59RoGxpzgWJg= Subject key identifier: DF:28:49:ED:EF:42:A1:D5:36:91:38:99:52:F6:0B:81:5D:2D:E4:BC Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F432858493C093D44BECEDA802D5AF280 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 203724 IP address blocks: 161.69.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3d:44:be:ce:da:80:2d:5a:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=0c0a4d2e-3f8e-4b6b-8897-edabe16a1772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:a5:34:c8:29:06:85:9b:65:a0:9d:ea:6e: be:49:07:71:e5:64:b2:98:5b:0a:df:51:3e:24:d3: bd:b7:41:05:65:88:81:a5:22:24:47:ab:7c:58:79: 81:93:57:98:c3:27:28:28:15:dd:18:42:4e:36:5a: 89:97:e1:c4:5b:4a:34:1b:cb:8c:f8:b6:14:45:3e: 77:11:eb:8f:36:85:66:9e:c8:f3:55:c8:0c:57:e4: b2:93:27:80:7d:84:49:2d:4f:fe:92:87:20:81:8b: 5d:e5:4c:91:f5:60:b2:68:c1:c4:84:3b:42:ca:09: c9:cf:66:a1:d0:25:dc:1f:40:ff:1c:e8:b6:16:49: 9b:28:42:1a:04:27:f1:66:c3:11:c2:1a:62:63:95: fd:d4:4f:f5:16:e2:6e:0f:e5:a4:e6:44:ef:57:07: 88:61:fb:65:fb:5f:74:b1:55:77:80:41:f5:28:8c: 67:12:ee:fc:74:e6:fd:f4:13:12:a5:04:47:42:6f: 29:e8:66:70:a9:dc:28:6b:cb:03:b9:46:ca:05:5a: 4f:38:53:e9:85:44:a5:27:53:37:e2:2e:ad:38:9b: 71:4e:43:7c:0f:9c:d4:cf:1f:dd:37:bc:ac:54:df: 16:63:cc:39:64:22:af:13:b8:ef:b1:5b:ec:27:16: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:28:49:ED:EF:42:A1:D5:36:91:38:99:52:F6:0B:81:5D:2D:E4:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/3d59fe02-e286-37b5-a4e0-ee928379db85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:42:5b:8d:b2:7e:86:08:ef:08:62:9e:c3:e6:12:75:eb:cb: 4a:7d:55:ee:5c:7e:2e:e7:8d:30:c9:f6:08:fb:95:ae:19:51: d3:d4:9f:7a:cd:37:af:f2:59:1f:08:25:2a:a1:7e:f7:c1:5a: 12:be:bd:bf:43:57:b1:b5:11:09:79:64:fb:20:18:5b:d6:7b: 81:f8:0b:49:f2:a9:96:63:09:19:9f:78:a5:56:c1:de:51:ac: cf:8e:49:bb:1a:ce:64:60:df:45:ff:d1:25:e9:92:43:15:21: 7b:4a:bf:7c:99:23:99:90:31:c9:7b:aa:f9:cc:38:dd:1e:00: 2a:89:78:28:25:9a:56:46:8a:28:dd:d3:8c:56:7b:6f:89:a9: 02:99:87:ac:b1:87:13:51:b3:b4:87:0b:c6:bb:44:e9:f4:2e: ad:ad:95:a9:bc:ab:1c:83:ab:86:4b:f5:ad:95:60:9e:dc:f1: 1d:24:46:c5:8a:85:4e:dc:12:1d:7c:7f:57:bd:5f:28:99:a2: 38:fa:2d:7c:a6:39:2a:bb:0e:5f:92:22:71:a2:f3:f8:84:be: 60:c7:9d:60:2a:d6:f8:49:a6:1c:43:c3:4b:06:48:df:1d:66: a4:fc:18:f3:29:f9:59:cb:1c:96:49:e9:3c:7f:46:19:54:08: 1f:eb:65:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CT1Evs7agC1a8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MGMwYTRkMmUtM2Y4ZS00YjZiLTg4OTctZWRhYmUxNmExNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSClNMgpBoWbZaCd6m6+SQdx5WSymFsK31E+ JNO9t0EFZYiBpSIkR6t8WHmBk1eYwycoKBXdGEJONlqJl+HEW0o0G8uM+LYURT53 EeuPNoVmnsjzVcgMV+SykyeAfYRJLU/+kocggYtd5UyR9WCyaMHEhDtCygnJz2ah 0CXcH0D/HOi2FkmbKEIaBCfxZsMRwhpiY5X91E/1FuJuD+Wk5kTvVweIYftl+190 sVV3gEH1KIxnEu78dOb99BMSpQRHQm8p6GZwqdwoa8sDuUbKBVpPOFPphUSlJ1M3 4i6tOJtxTkN8D5zUzx/dN7ysVN8WY8w5ZCKvE7jvsVvsJxY+hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8oSe3vQqHVNpE4mVL2C4FdLeS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvM2Q1OWZlMDItZTI4Ni0z N2I1LWE0ZTAtZWU5MjgzNzlkYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVCW42yfoYI7whinsPmEnXry0p9Ve5cfi7njTDJ9gj7la4ZUdPUn3rN N6/yWR8IJSqhfvfBWhK+vb9DV7G1EQl5ZPsgGFvWe4H4C0nyqZZjCRmfeKVWwd5R rM+OSbsazmRg30X/0SXpkkMVIXtKv3yZI5mQMcl7qvnMON0eACqJeCglmlZGiijd 04xWe2+JqQKZh6yxhxNRs7SHC8a7ROn0Lq2tlam8qxyDq4ZL9a2VYJ7c8R0kRsWK hU7cEh18f1e9XyiZojj6LXymOSq7Dl+SInGi8/iEvmDHnWAq1vhJphxDw0sGSN8d ZqT8GPMp+VnLHJZJ6Tx/RhlUCB/rZeg= -----END CERTIFICATE-----Generated at Mon Apr 28 06:29:02 2025 by rpki-client