$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f8ec5bc2-da45-3ea1-8c1a-385441678d64.roa File: f8ec5bc2-da45-3ea1-8c1a-385441678d64.roa (raw, json) Hash identifier: b6sT4WNm5cqj8dxHz/+IJ8OwYwfbK4GwF9BKIeuBfzs= Subject key identifier: 4B:0D:43:D8:FE:07:5D:A4:BA:07:73:1C:7E:88:32:D9:2B:90:98:4C Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849998F36974E69AA3A181FD940 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f8ec5bc2-da45-3ea1-8c1a-385441678d64.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 161.69.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:36:97:4e:69:aa:3a:18:1f:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=23a5d5f3-816b-43ab-8fbe-3b6fb1853ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:1f:a7:9b:a9:4b:f5:5c:04:82:d4:0a:36: bd:78:4d:26:4a:1d:22:7e:b1:24:d2:58:eb:7d:2d: 56:57:31:37:06:cd:a5:b8:a0:db:39:5c:24:bb:ca: 50:55:c0:46:ad:fc:08:02:d4:f9:e7:61:a6:c3:75: ed:15:df:7e:08:69:46:ca:a0:59:e0:cb:da:7e:1c: 46:7d:9a:36:ad:40:22:66:1c:49:5c:a4:28:e1:80: 44:8a:24:cf:4d:34:d1:14:61:48:e8:a5:68:3a:bc: 6c:23:ab:09:81:49:ff:36:39:bc:84:71:69:64:15: 36:35:ac:07:46:92:bd:3f:b0:de:f5:c3:75:18:d7: 24:c8:c3:d3:db:b3:0b:e8:95:24:0a:fd:f9:d5:59: f0:3a:37:58:98:a4:e9:ea:c7:cb:b2:c8:fc:1e:14: 46:3f:8e:60:01:22:8d:de:89:34:ab:d9:33:ea:97: 2a:bb:43:9b:a7:78:80:a7:b7:90:e1:f1:5d:4d:a5: 50:13:4c:9b:6a:40:4a:95:07:17:83:37:af:f9:4c: 5a:2a:17:b3:7e:d3:ec:0c:ed:01:de:6f:ca:21:62: c8:dc:4e:f5:03:39:b1:81:5d:fa:13:81:e9:c8:30: 25:7c:55:fa:f0:ee:20:04:e9:45:13:31:e4:3f:c0: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0D:43:D8:FE:07:5D:A4:BA:07:73:1C:7E:88:32:D9:2B:90:98:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f8ec5bc2-da45-3ea1-8c1a-385441678d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:08:36:f7:49:71:00:86:3f:4e:76:cf:2b:21:d1:de:b9:c1: 6a:b0:6b:a6:fd:c9:42:c6:fd:dd:8f:a6:5c:09:0b:dd:5d:02: e2:2e:1d:d1:6c:5a:8e:0f:fe:a1:8e:b5:b1:35:b1:83:c2:99: 47:d1:e5:81:c1:66:ec:19:de:ee:2c:75:3d:2c:a7:be:67:a0: e0:e5:fa:02:b0:4b:be:6e:4c:fe:04:0b:46:82:08:29:0e:dc: 18:33:1c:3e:6c:5b:06:d4:0a:e2:5a:7e:86:07:18:65:6a:69: 48:23:8d:80:1b:d6:77:ec:4a:df:d0:c6:7b:0d:fa:a4:30:31: 03:76:ad:0d:ec:32:f2:cb:10:bf:ed:9b:f0:4b:9b:2a:7f:d3: 63:83:e5:e2:07:bf:e8:7f:6b:54:9f:74:e5:56:37:e5:c2:e4: d5:01:25:1c:63:43:e2:09:d8:f9:36:e1:df:f5:9e:77:c8:a3: 27:81:ff:26:be:bf:d5:a7:92:b2:28:7a:95:95:72:44:67:23: 11:76:35:28:ec:4b:c9:7d:9b:2e:6d:2a:c6:6c:55:c8:95:71: 1d:64:26:69:5b:c5:7f:ee:17:50:62:27:51:cd:43:da:0c:81: 1e:2b:c3:43:2a:57:e6:00:2a:8e:a8:01:72:07:55:23:79:7e: 8c:5d:a6:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZjzaXTmmqOhgf2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk MjNhNWQ1ZjMtODE2Yi00M2FiLThmYmUtM2I2ZmIxODUzZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztgfp5upS/VcBILUCja9eE0mSh0ifrEk0ljr fS1WVzE3Bs2luKDbOVwku8pQVcBGrfwIAtT552Gmw3XtFd9+CGlGyqBZ4MvafhxG fZo2rUAiZhxJXKQo4YBEiiTPTTTRFGFI6KVoOrxsI6sJgUn/Njm8hHFpZBU2NawH RpK9P7De9cN1GNckyMPT27ML6JUkCv351VnwOjdYmKTp6sfLssj8HhRGP45gASKN 3ok0q9kz6pcqu0Obp3iAp7eQ4fFdTaVQE0ybakBKlQcXgzev+UxaKhezftPsDO0B 3m/KIWLI3E71AzmxgV36E4HpyDAlfFX68O4gBOlFEzHkP8CaqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsNQ9j+B12kugdzHH6IMtkrkJhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjhlYzViYzItZGE0NS0z ZWExLThjMWEtMzg1NDQxNjc4ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQINvdJcQCGP052zysh0d65wWqwa6b9yULG/d2PplwJC91dAuIuHdFs Wo4P/qGOtbE1sYPCmUfR5YHBZuwZ3u4sdT0sp75noODl+gKwS75uTP4EC0aCCCkO 3BgzHD5sWwbUCuJafoYHGGVqaUgjjYAb1nfsSt/QxnsN+qQwMQN2rQ3sMvLLEL/t m/BLmyp/02OD5eIHv+h/a1SfdOVWN+XC5NUBJRxjQ+IJ2Pk24d/1nnfIoyeB/ya+ v9WnkrIoepWVckRnIxF2NSjsS8l9my5tKsZsVciVcR1kJmlbxX/uF1BiJ1HNQ9oM gR4rw0MqV+YAKo6oAXIHVSN5foxdpik= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:06 2025 by rpki-client