$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa File: 401073da-de78-3d31-84e4-3349facc1d23.roa (raw, json) Hash identifier: FmCWAyC86UDFSGbJKp4NwiE2GSUOkEa0rxuQ73DdGso= Subject key identifier: AF:31:CE:E3:AD:16:A9:CF:74:42:31:A9:71:79:88:1F:DC:50:FB:8D Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F0594D8B30E0B8E547400 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 203724 IP address blocks: 161.69.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:05:94:d8:b3:0e:0b:8e:54:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=23dec212-0580-43d6-b14f-059ef32b82f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4b:0a:81:ac:d3:5e:c8:4f:e8:a9:08:b3:07: e1:59:31:6c:86:b7:3c:38:30:26:d5:2d:91:65:c2: 9a:d0:37:6d:fb:15:07:ae:50:29:71:65:f6:47:a6: f4:c7:38:31:87:31:77:eb:46:11:62:33:e4:e1:26: bf:81:44:ac:17:ea:95:8c:48:0b:1b:d9:14:db:10: 00:54:cf:4c:3c:e9:1d:7a:ba:14:19:a8:ea:e4:74: 98:17:7d:62:3b:18:50:66:76:71:f5:e2:6e:a1:fc: f0:76:dd:9c:16:97:37:c1:66:af:dc:a4:06:8a:aa: 84:95:14:0d:a8:a4:9c:45:ec:69:8c:65:d9:80:d9: e4:66:25:fc:98:73:b3:ae:9f:1c:0e:b2:6b:55:89: 99:49:0e:05:59:87:37:3b:df:89:fe:6a:0e:f0:ea: bc:0f:d5:05:da:3a:4b:15:a0:de:7f:0b:4d:09:31: 30:ca:b2:7e:18:cd:32:87:a2:4e:2a:3a:8f:20:5c: 06:16:f8:df:d4:e8:b0:d5:02:7a:15:86:20:25:5f: a1:f7:b6:57:2b:48:2d:a5:6e:aa:cf:28:78:4b:f9: c9:30:e0:e2:1d:64:cc:67:6b:32:99:99:29:8d:63: 15:6d:13:07:17:39:b8:c5:29:05:df:51:54:6a:37: 7a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:CE:E3:AD:16:A9:CF:74:42:31:A9:71:79:88:1F:DC:50:FB:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/401073da-de78-3d31-84e4-3349facc1d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:78:6e:4b:4b:47:35:a7:41:6b:5a:5c:1b:73:d6:91:39:96: 78:43:99:4b:1b:82:38:47:ab:5d:2a:04:be:c1:d5:4c:cf:3c: 4a:4f:3e:32:ae:4b:d5:f4:01:be:22:ed:89:3b:ed:77:7a:8f: 9c:79:ba:7e:98:f3:52:47:fd:16:46:2b:93:dd:da:99:43:da: 46:9b:7e:24:62:19:fe:a6:02:e7:e6:dc:f9:6f:9c:62:29:be: ea:4a:73:7f:7b:81:bf:06:1c:82:19:af:95:a8:b4:40:ce:e8: b1:22:6e:c2:d5:ed:fa:cf:27:26:4b:5e:6c:c0:ec:79:49:68: e9:6a:3a:76:ee:bf:9e:5b:a4:cd:57:b0:75:ae:50:c9:43:8d: c6:b3:6b:e6:32:9d:f4:1c:bd:be:10:b4:e3:45:0c:25:06:70: 4e:59:c5:c0:0d:a7:4c:b2:94:24:ca:e5:b9:7f:31:84:51:97: ef:6d:85:64:c5:ea:d0:83:31:f1:d6:88:af:21:1b:38:e1:00: e5:b6:f3:a0:28:30:1b:30:5b:db:9f:d5:5a:3b:4a:70:f2:9d: 6c:1d:1d:3b:f6:06:45:3c:dd:a8:8a:e5:47:02:65:ec:60:bc: 54:4a:55:e3:ca:70:6c:9a:50:68:ee:5b:c5:16:6b:f1:fc:80: 48:b2:50:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwWU2LMOC45UdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MjNkZWMyMTItMDU4MC00M2Q2LWIxNGYtMDU5ZWYzMmI4MmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgksKgazTXshP6KkIswfhWTFshrc8ODAm1S2R ZcKa0Ddt+xUHrlApcWX2R6b0xzgxhzF360YRYjPk4Sa/gUSsF+qVjEgLG9kU2xAA VM9MPOkderoUGajq5HSYF31iOxhQZnZx9eJuofzwdt2cFpc3wWav3KQGiqqElRQN qKScRexpjGXZgNnkZiX8mHOzrp8cDrJrVYmZSQ4FWYc3O9+J/moO8Oq8D9UF2jpL FaDefwtNCTEwyrJ+GM0yh6JOKjqPIFwGFvjf1Oiw1QJ6FYYgJV+h97ZXK0gtpW6q zyh4S/nJMODiHWTMZ2symZkpjWMVbRMHFzm4xSkF31FUajd6rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8xzuOtFqnPdEIxqXF5iB/cUPuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNDAxMDczZGEtZGU3OC0z ZDMxLTg0ZTQtMzM0OWZhY2MxZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd4bktLRzWnQWtaXBtz1pE5lnhDmUsbgjhHq10qBL7B1UzPPEpPPjKu S9X0Ab4i7Yk77Xd6j5x5un6Y81JH/RZGK5Pd2plD2kabfiRiGf6mAufm3PlvnGIp vupKc397gb8GHIIZr5WotEDO6LEibsLV7frPJyZLXmzA7HlJaOlqOnbuv55bpM1X sHWuUMlDjcaza+YynfQcvb4QtONFDCUGcE5ZxcANp0yylCTK5bl/MYRRl+9thWTF 6tCDMfHWiK8hGzjhAOW286AoMBswW9uf1Vo7SnDynWwdHTv2BkU83aiK5UcCZexg vFRKVePKcGyaUGjuW8UWa/H8gEiyUCs= -----END CERTIFICATE-----Generated at Mon Apr 28 23:21:05 2025 by rpki-client