$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a0967967-7a49-3589-8360-2e0bb305d1ae.roa File: a0967967-7a49-3589-8360-2e0bb305d1ae.roa (raw, json) Hash identifier: AUDh2Uy8+iWZq8y9c5LzLpesvfIDDt2JeqBpFpTJS1c= Subject key identifier: 76:49:A3:F7:4D:D7:36:F2:B0:DE:83:60:D7:B1:B6:D8:44:FB:CE:29 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F432858495C242BEF0478D3C450BE3480 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a0967967-7a49-3589-8360-2e0bb305d1ae.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 31898 IP address blocks: 161.69.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:2b:ef:04:78:d3:c4:50:be:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=57b86ab0-826e-4138-b78e-9f16d170d4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:96:3a:49:27:66:8b:de:8e:5e:24:24:92: 30:66:c9:e2:67:35:a1:f8:f9:b0:e4:6f:62:84:2a: 74:b9:e2:2f:a2:cf:d9:70:17:de:81:d1:cb:48:86: 62:90:ac:69:8a:06:12:93:2c:2d:79:97:97:33:22: ee:22:fa:33:c9:20:13:38:96:65:12:53:30:8e:93: 0e:85:4c:ad:ce:19:ef:82:be:e8:55:ce:d7:0d:a9: 20:84:51:b7:c8:f6:84:3a:e4:03:9e:ba:a8:22:a2: 98:47:a9:80:32:27:45:da:6f:9d:79:f7:5f:3e:b5: 75:5d:27:7a:81:f8:b6:44:a1:b9:7d:74:20:33:54: 0c:14:7a:dc:fd:7e:3b:b8:dc:b9:58:56:56:2f:3b: 7c:40:ff:a6:3b:34:ca:d1:87:7d:8c:f8:15:91:27: b6:e8:f0:b0:c6:f2:3e:b0:e1:17:e1:5f:7d:ea:5e: 57:c7:b1:9b:64:4f:5d:01:fd:92:a7:8f:2a:f6:48: 18:fe:2c:c6:72:d1:2b:ed:a3:b5:db:50:ad:c1:cc: 2e:2c:56:2f:49:ca:ea:f3:b0:e9:fb:d2:11:1e:b5: 3d:6a:43:70:60:6a:28:b2:6b:3c:1b:28:e9:2b:93: 7e:9e:f6:1d:99:ec:ff:be:32:99:a1:33:2f:c8:ef: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:49:A3:F7:4D:D7:36:F2:B0:DE:83:60:D7:B1:B6:D8:44:FB:CE:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a0967967-7a49-3589-8360-2e0bb305d1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ca:9f:33:cc:35:96:54:be:81:40:a6:9a:93:14:9c:81:ea: 77:e2:1b:37:45:ad:26:b6:1b:a7:cc:c3:45:d9:ea:24:8f:bc: f5:84:a0:e4:f9:d9:d0:26:8d:d8:dd:bf:4d:63:8b:1b:f9:89: 5b:53:1e:81:6c:1d:9d:d0:62:83:9c:26:f4:6c:f7:33:5b:96: 63:b8:28:c5:3e:16:37:a4:7f:d5:e2:04:b0:64:a2:a8:b4:f3: 21:46:fd:f7:6f:28:e3:23:d3:12:e5:3f:fe:ae:5b:70:40:75: c3:28:cf:bf:92:c9:5a:59:ff:b4:46:84:7d:37:f0:83:b9:d9: d4:68:2a:27:bd:6a:4f:2f:19:bc:96:77:b5:75:cd:de:af:f3: d6:35:88:97:0c:aa:63:62:76:28:fa:f7:3e:14:2e:ac:08:61: d7:fa:33:56:30:9c:51:46:e9:60:97:e8:a5:a2:fc:04:81:88: 3b:e1:e8:7b:f6:36:73:fc:2e:23:ed:f6:c5:9e:f2:70:fb:26: c3:46:e0:a3:71:e6:7d:34:88:98:1f:22:c5:b8:0e:90:7c:c9: a3:a5:39:5c:8f:62:ff:d8:55:80:70:2f:85:1e:c1:28:14:99: ea:82:42:77:0e:aa:8a:92:17:37:ac:80:3a:88:39:23:97:ee: 9f:b7:b4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJCvvBHjTxFC+NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NTdiODZhYjAtODI2ZS00MTM4LWI3OGUtOWYxNmQxNzBkNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+aWOkknZovejl4kJJIwZsniZzWh+Pmw5G9i hCp0ueIvos/ZcBfegdHLSIZikKxpigYSkywteZeXMyLuIvozySATOJZlElMwjpMO hUytzhnvgr7oVc7XDakghFG3yPaEOuQDnrqoIqKYR6mAMidF2m+defdfPrV1XSd6 gfi2RKG5fXQgM1QMFHrc/X47uNy5WFZWLzt8QP+mOzTK0Yd9jPgVkSe26PCwxvI+ sOEX4V996l5Xx7GbZE9dAf2Sp48q9kgY/izGctEr7aO121CtwcwuLFYvScrq87Dp +9IRHrU9akNwYGoosms8GyjpK5N+nvYdmez/vjKZoTMvyO9+swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZJo/dN1zbysN6DYNextthE+84pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYTA5Njc5NjctN2E0OS0z NTg5LTgzNjAtMmUwYmIzMDVkMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfKnzPMNZZUvoFAppqTFJyB6nfiGzdFrSa2G6fMw0XZ6iSPvPWEoOT5 2dAmjdjdv01jixv5iVtTHoFsHZ3QYoOcJvRs9zNblmO4KMU+Fjekf9XiBLBkoqi0 8yFG/fdvKOMj0xLlP/6uW3BAdcMoz7+SyVpZ/7RGhH038IO52dRoKie9ak8vGbyW d7V1zd6v89Y1iJcMqmNidij69z4ULqwIYdf6M1YwnFFG6WCX6KWi/ASBiDvh6Hv2 NnP8LiPt9sWe8nD7JsNG4KNx5n00iJgfIsW4DpB8yaOlOVyPYv/YVYBwL4UewSgU meqCQncOqoqSFzesgDqIOSOX7p+3tFA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:34 2025 by rpki-client