$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8891f72d-79e8-3207-b7cc-72a7aa7cc4e2.roa File: 8891f72d-79e8-3207-b7cc-72a7aa7cc4e2.roa (raw, json) Hash identifier: ipr1M+NxRWLtoayKyoBrAftbVkvlrvHgbAVkvaPRocI= Subject key identifier: 9E:FD:36:96:96:0C:6F:1B:60:AA:A7:6C:C3:2F:C5:70:4F:42:69:2C Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849A61F3F296526BC193A0546C0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8891f72d-79e8-3207-b7cc-72a7aa7cc4e2.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 203724 IP address blocks: 161.69.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3f:29:65:26:bc:19:3a:05:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=789e4a33-0355-403e-bf26-6220e3124b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:ec:77:a2:39:01:62:cd:09:8e:bd:6d:8a: c8:38:a1:26:fb:b1:3b:9f:d3:c4:69:28:4b:43:d1: fb:38:ba:ee:93:6d:05:67:f6:00:2c:f7:ea:38:ee: fd:4a:f4:2e:14:64:c9:c7:13:d7:ba:e7:19:af:63: 6f:16:8b:bf:d1:14:91:77:54:c2:98:80:e1:28:ca: 52:57:d9:74:e8:4d:47:c8:ad:d3:f1:67:89:db:d0: e8:14:b3:a6:5f:90:ff:67:14:a9:37:43:68:7f:c3: 45:0b:54:89:08:5a:64:42:88:a8:ad:64:a6:73:7e: d4:40:13:cf:65:45:2c:12:f8:1a:8d:10:45:11:cd: 7a:72:e3:61:88:5f:a7:f0:a0:e2:34:d5:f6:44:12: 31:25:0d:fb:53:12:58:d1:54:4f:17:4d:20:86:0b: 32:32:83:0e:be:da:0a:8d:a9:8a:23:bb:cb:23:6d: eb:be:21:b9:d1:c8:40:49:7c:d3:b8:30:df:70:54: a7:3d:bd:4e:36:d6:b0:b7:d5:18:11:a5:9c:6a:2d: 3a:d1:1a:16:3b:77:f4:5e:e5:3e:fb:2a:84:b2:a8: c7:c7:d2:29:53:4f:2e:50:3d:de:6d:ec:fb:92:21: be:25:09:78:fd:51:7c:98:80:b4:09:b1:cc:5c:eb: 75:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FD:36:96:96:0C:6F:1B:60:AA:A7:6C:C3:2F:C5:70:4F:42:69:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8891f72d-79e8-3207-b7cc-72a7aa7cc4e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6c:25:21:50:ad:f5:92:94:56:eb:77:07:9e:35:a5:ae:6f: 18:53:95:46:27:c3:08:f5:57:a3:0e:19:25:1b:68:68:6c:b3: c9:18:d8:2d:5c:51:d7:bd:56:14:21:70:36:a5:f3:66:34:ce: c7:e7:74:8b:cc:50:29:fe:b7:6b:0a:a0:6a:47:fb:69:d0:fe: b8:bb:6f:5f:38:b6:54:a4:89:9c:b2:f9:e1:d6:81:e8:06:a4: fc:d5:07:64:b8:f6:9d:9c:70:e9:a2:0c:85:10:b2:8b:92:4b: 73:9d:22:f6:c0:0e:a9:f5:72:19:3c:90:5c:d0:fa:8e:ac:b5: 2b:cb:10:cf:9d:55:bb:d1:3c:a8:4d:c0:27:ff:d6:bd:51:5a: 62:c8:74:32:f5:a9:82:58:35:5b:e0:ed:7d:ad:25:7a:5d:2e: 21:4b:0c:0a:e3:d3:a5:35:8b:6e:a8:c0:ed:49:ab:29:48:c5: 82:05:45:22:6b:64:84:4f:23:c8:7c:e9:28:67:38:fc:41:61: ae:fd:1e:aa:56:b6:e2:20:95:ed:ea:4a:20:e0:e5:7e:66:09: 56:52:6f:a5:3a:91:53:9e:c7:c5:f2:f4:d9:b7:ff:86:65:b8: 0a:36:09:01:fe:31:7a:7b:2b:1b:dd:11:33:2c:63:42:c8:4b: 55:0c:a4:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz8pZSa8GToFRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk Nzg5ZTRhMzMtMDM1NS00MDNlLWJmMjYtNjIyMGUzMTI0YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUrsd6I5AWLNCY69bYrIOKEm+7E7n9PEaShL Q9H7OLruk20FZ/YALPfqOO79SvQuFGTJxxPXuucZr2NvFou/0RSRd1TCmIDhKMpS V9l06E1HyK3T8WeJ29DoFLOmX5D/ZxSpN0Nof8NFC1SJCFpkQoiorWSmc37UQBPP ZUUsEvgajRBFEc16cuNhiF+n8KDiNNX2RBIxJQ37UxJY0VRPF00ghgsyMoMOvtoK jamKI7vLI23rviG50chASXzTuDDfcFSnPb1ONtawt9UYEaWcai060RoWO3f0XuU+ +yqEsqjHx9IpU08uUD3ebez7kiG+JQl4/VF8mIC0CbHMXOt1DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ79NpaWDG8bYKqnbMMvxXBPQmksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvODg5MWY3MmQtNzllOC0z MjA3LWI3Y2MtNzJhN2FhN2NjNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5sJSFQrfWSlFbrdweeNaWubxhTlUYnwwj1V6MOGSUbaGhss8kY2C1c Ude9VhQhcDal82Y0zsfndIvMUCn+t2sKoGpH+2nQ/ri7b184tlSkiZyy+eHWgegG pPzVB2S49p2ccOmiDIUQsouSS3OdIvbADqn1chk8kFzQ+o6stSvLEM+dVbvRPKhN wCf/1r1RWmLIdDL1qYJYNVvg7X2tJXpdLiFLDArj06U1i26owO1JqylIxYIFRSJr ZIRPI8h86ShnOPxBYa79HqpWtuIgle3qSiDg5X5mCVZSb6U6kVOex8Xy9Nm3/4Zl uAo2CQH+MXp7KxvdETMsY0LIS1UMpDI= -----END CERTIFICATE-----Generated at Mon Apr 28 15:25:58 2025 by rpki-client