$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa File: ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa (raw, json) Hash identifier: AsIKszUFW68T3THxalb1cSawDkg3wqMcl0ttDHKJxIo= Subject key identifier: E0:27:2E:05:66:87:82:A3:92:59:AD:69:67:0E:B3:1B:F5:4E:1E:7A Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849780F0DA27C02BEB228804C80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 161.69.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0d:a2:7c:02:be:b2:28:80:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=8a689004-66d2-453d-a429-9269e56e96e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:a3:e7:63:ae:05:90:a5:e5:89:06:aa:8b: 84:ff:c2:a6:4c:78:68:06:42:57:d0:2e:7b:61:6b: f3:8c:67:5f:7a:5a:35:68:5b:9c:ff:5c:cb:6f:70: 6c:cb:c3:9c:f9:c0:03:5b:aa:39:b0:84:c6:c2:eb: 96:cf:c6:52:17:36:e1:dd:05:fd:e2:c5:af:98:50: 5b:3b:fb:8a:e2:b4:22:aa:0b:fb:0f:0e:f2:06:f6: 73:2a:54:9b:7f:f1:29:11:3a:d6:0f:7a:89:c7:b1: 40:bf:88:db:ce:4c:ed:61:c4:12:98:92:ab:be:05: 48:7d:f0:84:71:da:d8:f5:89:ee:c6:a4:69:2f:cc: 78:c1:3d:32:6f:8b:ed:04:6b:e5:73:03:02:36:d3: 17:65:f6:24:b7:39:4c:e2:15:28:ab:3e:2b:e2:ca: a8:d9:d9:3a:62:ff:3a:86:6f:22:02:57:70:35:40: d8:b7:ba:8b:13:77:0f:68:9f:c2:61:04:03:89:d1: 4b:85:8e:9e:0c:09:7f:83:69:39:c2:7c:c6:e0:a2: b6:66:4d:bd:2b:de:23:bc:bb:b9:7c:7f:f3:4e:e4: c2:4a:31:4f:e5:d9:a4:3a:90:53:d5:1b:75:7f:1d: 33:b9:a1:e2:a0:df:3c:a5:8b:9f:be:a7:50:2a:09: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:27:2E:05:66:87:82:A3:92:59:AD:69:67:0E:B3:1B:F5:4E:1E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ae68850d-9a1f-346d-a4ae-4b3eaca97662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:14:93:41:0c:2a:bb:a4:da:26:db:19:fa:5f:2c:8d:c3:16: c5:db:e1:d6:f2:99:e0:91:18:2f:e9:9b:63:95:02:7a:58:16: 06:b0:99:c3:86:01:a0:32:e5:18:4e:39:19:17:d0:8e:40:80: 39:50:c9:96:e8:6f:72:aa:91:6b:0a:20:3b:23:74:34:67:51: 76:46:97:97:6f:66:d2:b0:37:c1:a0:d6:44:2e:c7:52:5b:1e: 05:f5:7d:5d:35:50:46:2b:d1:c9:5a:16:13:cf:42:e1:fe:cd: a4:7e:6e:21:00:57:d6:69:59:ff:97:c1:0a:9e:1d:21:10:79: 75:49:df:92:0b:66:2c:3e:6c:ec:3b:5a:db:80:cb:f0:92:2f: 8f:d3:a6:2a:e5:30:50:81:67:76:8d:e5:23:65:43:79:8e:ea: c2:64:29:dc:4a:84:ef:20:1e:65:f4:30:a5:d2:01:3b:52:46: 78:04:6e:7e:56:d0:d8:f8:d5:da:8b:d9:da:66:38:db:30:d7: 94:87:ad:88:a3:4d:6c:c7:70:7d:93:7f:1a:ec:54:37:7d:e7: 2b:e2:62:f7:11:0d:12:75:8c:6d:0b:e9:d4:f2:be:c3:29:1e: 35:76:aa:62:19:90:61:03:62:31:1f:58:cd:8e:0a:a7:1c:09: 59:22:31:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dw2ifAK+siiATIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk OGE2ODkwMDQtNjZkMi00NTNkLWE0MjktOTI2OWU1NmU5NmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq46j52OuBZCl5YkGqouE/8KmTHhoBkJX0C57 YWvzjGdfelo1aFuc/1zLb3Bsy8Oc+cADW6o5sITGwuuWz8ZSFzbh3QX94sWvmFBb O/uK4rQiqgv7Dw7yBvZzKlSbf/EpETrWD3qJx7FAv4jbzkztYcQSmJKrvgVIffCE cdrY9YnuxqRpL8x4wT0yb4vtBGvlcwMCNtMXZfYktzlM4hUoqz4r4sqo2dk6Yv86 hm8iAldwNUDYt7qLE3cPaJ/CYQQDidFLhY6eDAl/g2k5wnzG4KK2Zk29K94jvLu5 fH/zTuTCSjFP5dmkOpBT1Rt1fx0zuaHioN88pYufvqdQKgnSfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAnLgVmh4KjklmtaWcOsxv1Th56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYWU2ODg1MGQtOWExZi0z NDZkLWE0YWUtNGIzZWFjYTk3NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkUk0EMKruk2ibbGfpfLI3DFsXb4dbymeCRGC/pm2OVAnpYFgawmcOG AaAy5RhOORkX0I5AgDlQyZbob3KqkWsKIDsjdDRnUXZGl5dvZtKwN8Gg1kQux1Jb HgX1fV01UEYr0claFhPPQuH+zaR+biEAV9ZpWf+XwQqeHSEQeXVJ35ILZiw+bOw7 WtuAy/CSL4/TpirlMFCBZ3aN5SNlQ3mO6sJkKdxKhO8gHmX0MKXSATtSRngEbn5W 0Nj41dqL2dpmONsw15SHrYijTWzHcH2TfxrsVDd95yviYvcRDRJ1jG0L6dTyvsMp HjV2qmIZkGEDYjEfWM2OCqccCVkiMeA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:00 2025 by rpki-client