$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c925072e-c530-3be9-8d73-90cdb2238584.roa File: c925072e-c530-3be9-8d73-90cdb2238584.roa (raw, json) Hash identifier: UCHWyerOC6pHSlrW4xAT4Wn2csIBEJSe7wl34CY8pa4= Subject key identifier: 1C:DD:DC:43:DF:09:67:0C:9C:06:38:FF:73:15:10:82:0F:04:70:02 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F432858498769B802C3EA5AE2CC3F8850 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c925072e-c530-3be9-8d73-90cdb2238584.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 203724 IP address blocks: 161.69.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b8:02:c3:ea:5a:e2:cc:3f:88:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=8c9ad237-c90a-4c03-bd3b-b018665b392b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:c9:31:88:9d:23:d3:e0:a4:61:77:6f:0d: 25:cc:c5:a2:d7:a1:88:6a:c8:7f:47:f1:24:d0:6e: 10:49:e6:41:dc:36:bd:5d:20:f7:e3:d0:96:e9:34: 09:a7:96:02:36:42:67:6c:4a:84:fa:6c:b9:3a:e7: e1:2d:98:0b:18:7b:d7:b3:15:eb:fe:82:9d:1f:e4: 6d:21:81:d2:80:96:a9:96:89:b4:05:a1:cb:e4:8c: b4:c7:f7:b7:b8:33:c3:55:93:66:84:cf:27:2d:95: ec:24:f7:f6:b6:36:1a:89:4a:13:54:fd:f7:d3:75: 15:93:4d:fe:f2:bc:7f:13:14:d3:38:d6:7a:fc:13: 04:78:8b:c5:0f:17:36:13:21:11:45:ea:33:9d:d7: a2:6a:96:61:e1:b4:ca:10:a8:1f:45:22:d6:9b:e7: 97:ec:c0:03:6f:e0:96:e8:41:5a:6e:1a:58:54:4a: 99:88:2f:14:36:1e:20:22:48:64:1b:ee:cf:34:3c: f5:b4:be:da:dd:cf:0b:4c:1e:c1:a9:64:f9:62:ed: df:45:f5:41:ba:61:ca:8d:f3:2d:eb:0b:17:bd:4d: e0:80:4c:d1:0c:f3:0e:66:db:f7:f6:f4:ef:7f:07: 7a:9f:88:62:2d:83:6b:ba:88:db:ce:6c:ef:68:d3: 69:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DD:DC:43:DF:09:67:0C:9C:06:38:FF:73:15:10:82:0F:04:70:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/c925072e-c530-3be9-8d73-90cdb2238584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:98:26:08:a2:59:60:55:c0:d4:a8:1e:e5:b9:0f:bc:bf:84: d8:08:a7:57:37:7f:52:ef:65:3f:52:a1:4d:94:0d:45:54:6d: 01:e0:66:d2:89:60:45:ca:2d:79:36:d6:de:9f:40:4f:51:53: 38:c1:2a:c6:88:ec:5f:ac:75:5f:69:66:bf:6b:fc:f9:32:36: 07:d2:12:bf:54:65:07:f9:7f:89:2b:97:9d:b3:21:97:75:82: e9:b8:62:cb:92:3a:df:7d:00:15:f7:55:24:25:d5:39:f4:92: 54:9e:de:5b:63:03:8f:30:61:93:2d:d3:a4:b6:8a:cc:2b:c7: 35:d3:17:db:39:95:81:2b:93:7e:79:7a:6d:11:b8:36:5d:7b: ec:1b:de:fa:19:04:c8:0b:d8:e4:de:2d:77:ee:9c:89:8a:51: 0d:97:09:62:9b:bd:12:49:69:55:54:a2:11:3e:d7:52:c6:55: ac:cb:2a:40:2d:96:a8:55:96:04:9e:65:de:87:3a:03:98:9a: e1:27:5a:d1:15:8a:09:92:e3:8a:04:3c:81:de:36:a6:9d:74: 07:e9:0b:a2:bc:e2:05:da:83:0b:6b:1f:97:b9:13:ba:f8:2d: f5:50:d1:0f:4a:46:77:5a:40:57:c7:d1:c1:83:9d:73:d8:5a: 1d:bb:9e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabgCw+pa4sw/iFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OGM5YWQyMzctYzkwYS00YzAzLWJkM2ItYjAxODY2NWIzOTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIPJMYidI9PgpGF3bw0lzMWi16GIash/R/Ek 0G4QSeZB3Da9XSD349CW6TQJp5YCNkJnbEqE+my5OufhLZgLGHvXsxXr/oKdH+Rt IYHSgJaplom0BaHL5Iy0x/e3uDPDVZNmhM8nLZXsJPf2tjYaiUoTVP3303UVk03+ 8rx/ExTTONZ6/BMEeIvFDxc2EyERReozndeiapZh4bTKEKgfRSLWm+eX7MADb+CW 6EFabhpYVEqZiC8UNh4gIkhkG+7PNDz1tL7a3c8LTB7BqWT5Yu3fRfVBumHKjfMt 6wsXvU3ggEzRDPMOZtv39vTvfwd6n4hiLYNruojbzmzvaNNpnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzd3EPfCWcMnAY4/3MVEIIPBHACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYzkyNTA3MmUtYzUzMC0z YmU5LThkNzMtOTBjZGIyMjM4NTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGYJgiiWWBVwNSoHuW5D7y/hNgIp1c3f1LvZT9SoU2UDUVUbQHgZtKJ YEXKLXk21t6fQE9RUzjBKsaI7F+sdV9pZr9r/PkyNgfSEr9UZQf5f4krl52zIZd1 gum4YsuSOt99ABX3VSQl1Tn0klSe3ltjA48wYZMt06S2iswrxzXTF9s5lYErk355 em0RuDZde+wb3voZBMgL2OTeLXfunImKUQ2XCWKbvRJJaVVUohE+11LGVazLKkAt lqhVlgSeZd6HOgOYmuEnWtEVigmS44oEPIHeNqaddAfpC6K84gXagwtrH5e5E7r4 LfVQ0Q9KRndaQFfH0cGDnXPYWh27nvE= -----END CERTIFICATE-----Generated at Mon Apr 28 08:36:17 2025 by rpki-client