$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa File: cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa (raw, json) Hash identifier: hds1rS4wzVFVlNvuPKxL4SJCXBiybQnwrImbN5r8B08= Subject key identifier: 79:91:24:A5:4B:8B:76:C9:E9:06:63:0D:57:55:EB:F2:0E:EC:D1:5A Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F432858498769B8811B1924F0969B6180 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 203724 IP address blocks: 161.69.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b8:81:1b:19:24:f0:96:9b:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=7aabc2ca-6107-46d0-ad93-ecc916a8b094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:73:6c:d8:f9:a6:dd:1a:71:3b:83:7a:8b:d1: b7:97:f0:23:85:99:aa:0c:f9:f0:00:9e:1b:4f:b4: 55:00:ab:eb:40:0b:9d:f7:be:1e:91:90:b9:23:5b: c7:1d:e3:c5:77:0b:18:40:7e:8a:ea:35:32:c6:41: e5:c7:42:27:85:cb:af:75:71:25:e5:9c:be:37:67: ea:f0:0f:8d:f3:3a:20:66:4c:61:33:2b:ec:49:30: 95:f2:37:06:71:c6:e4:3c:b8:0c:d8:d8:dd:34:20: c6:65:7a:dd:05:6a:b2:bb:bb:b4:ec:c4:80:d2:8f: f7:8a:45:5f:f7:a5:99:55:f7:8e:a4:9c:ec:df:ed: cb:c3:b3:17:05:1d:04:17:d2:43:97:1a:98:2e:e3: 5b:9c:9c:1d:ae:8c:c8:0a:8b:54:f2:60:14:8a:1a: b6:59:3f:d9:0d:db:c4:12:e4:16:07:4a:ab:b9:bc: 03:ef:85:46:5c:6d:2f:3d:df:b1:da:be:3a:39:ae: d9:d7:f7:1e:e7:a0:5b:b5:a1:92:ce:ae:ab:11:93: af:28:e9:f4:35:2b:34:8d:91:53:72:c8:7f:ac:d0: 77:07:a2:63:8c:90:f3:69:f6:ac:af:5c:5e:dc:24: 6f:07:79:6e:58:a5:f5:6d:cd:2f:5f:49:3a:49:aa: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:91:24:A5:4B:8B:76:C9:E9:06:63:0D:57:55:EB:F2:0E:EC:D1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:66:b3:f5:0e:71:1b:7c:1d:12:40:64:f3:06:1b:ee:f7:1f: c5:81:93:3d:d8:2d:e4:6c:92:a9:8c:a4:66:bf:23:74:3b:43: ce:dc:4a:8e:52:7e:1e:9f:81:8a:e2:4a:87:66:66:86:35:82: f0:3d:c9:52:2e:ac:2b:59:05:41:44:24:48:5e:0e:80:a4:3b: 1b:b6:a3:28:77:7d:ff:f6:3e:9f:ee:84:69:14:b0:f3:e7:a8: 54:2d:77:f8:a3:47:9f:ea:67:d9:df:8e:0e:45:9f:38:e5:04: f7:1d:6a:30:b1:17:23:0e:a8:e1:ab:c9:35:e0:10:3d:75:23: ac:27:e4:35:dc:6f:4b:8a:d0:28:9f:0e:ac:e8:a9:7e:46:e4: 0b:e3:0f:93:ae:70:56:f1:22:78:34:3f:65:24:9e:ba:c0:3a: 01:19:be:d9:48:d8:5d:21:6c:9b:1e:56:3b:bd:14:ab:63:d1: e3:a4:b0:61:f7:88:ad:e4:d0:64:70:36:5f:6a:56:99:aa:28: 4b:30:eb:a2:b2:94:c3:87:3e:0b:0f:91:0c:5e:6e:b5:9e:65: 85:4b:1d:22:9d:f2:06:e6:d1:73:e6:67:20:6c:64:5a:f1:a8: 9a:f7:e2:d7:b8:06:e1:82:5c:bd:c1:62:32:49:d3:da:0a:d0: 48:f4:47:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabiBGxkk8JabYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk N2FhYmMyY2EtNjEwNy00NmQwLWFkOTMtZWNjOTE2YThiMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXNs2Pmm3RpxO4N6i9G3l/AjhZmqDPnwAJ4b T7RVAKvrQAud974ekZC5I1vHHePFdwsYQH6K6jUyxkHlx0InhcuvdXEl5Zy+N2fq 8A+N8zogZkxhMyvsSTCV8jcGccbkPLgM2NjdNCDGZXrdBWqyu7u07MSA0o/3ikVf 96WZVfeOpJzs3+3Lw7MXBR0EF9JDlxqYLuNbnJwdrozICotU8mAUihq2WT/ZDdvE EuQWB0qrubwD74VGXG0vPd+x2r46Oa7Z1/ce56BbtaGSzq6rEZOvKOn0NSs0jZFT csh/rNB3B6JjjJDzafasr1xe3CRvB3luWKX1bc0vX0k6SaoHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmRJKVLi3bJ6QZjDVdV6/IO7NFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2ZjNzBhZjMtMmU5NC0z OWI0LTk3MTMtMjlhMGJlYmNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVms/UOcRt8HRJAZPMGG+73H8WBkz3YLeRskqmMpGa/I3Q7Q87cSo5S fh6fgYriSodmZoY1gvA9yVIurCtZBUFEJEheDoCkOxu2oyh3ff/2Pp/uhGkUsPPn qFQtd/ijR5/qZ9nfjg5FnzjlBPcdajCxFyMOqOGryTXgED11I6wn5DXcb0uK0Cif DqzoqX5G5AvjD5OucFbxIng0P2UknrrAOgEZvtlI2F0hbJseVju9FKtj0eOksGH3 iK3k0GRwNl9qVpmqKEsw66KylMOHPgsPkQxebrWeZYVLHSKd8gbm0XPmZyBsZFrx qJr34te4BuGCXL3BYjJJ09oK0Ej0R9A= -----END CERTIFICATE-----Generated at Mon Apr 28 10:01:13 2025 by rpki-client