$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa File: 32df2551-b0bc-351f-bb8d-07bd37404e7d.roa (raw, json) Hash identifier: 9A8bSY7BhU38vnVlrzPNO8Sw9zOHeDAySrfeiAun/eA= Subject key identifier: 60:EE:47:62:09:47:7F:C0:54:AD:ED:D7:D2:E3:11:7F:AA:F3:75:B4 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F43285849B2AF61D575EA467018A7F180 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 203724 IP address blocks: 161.69.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:61:d5:75:ea:46:70:18:a7:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=32b8bf16-71f2-4c5b-82e8-89fa1407abd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:74:ef:4f:5c:28:0f:ad:8e:22:f5:1b:2f: 60:05:3a:de:28:ac:7f:4c:94:d4:62:89:d8:41:8b: 48:5d:85:01:4c:b9:72:a6:a8:f9:70:18:0e:16:6b: 17:1a:7c:cf:0a:49:1b:1b:3d:e6:13:79:d4:63:90: 3c:a1:55:7d:6b:4a:41:dd:8c:8a:8b:48:a7:91:9a: b2:3b:06:79:dc:6a:03:0a:ae:11:e3:73:30:2d:22: cd:63:5d:74:e4:5b:1c:24:21:4b:d4:ee:49:de:83: 57:18:b5:55:ed:4a:1b:0e:19:c8:6c:b0:6c:c7:80: 0a:1f:ff:77:6f:d6:fe:10:d7:6e:8c:03:fb:f5:fb: 6e:0b:a9:54:89:ab:fc:08:b2:52:bb:d3:9c:e2:d7: 18:11:33:37:38:4b:06:bc:1a:51:18:ee:4b:3c:f7: 7d:72:35:42:31:83:2d:9e:2d:8b:8f:26:d8:34:16: 03:98:7d:2f:06:f9:37:d7:ea:4d:2f:56:dc:25:4a: 09:56:aa:77:d0:05:a5:26:7e:07:0f:df:03:52:52: 45:25:13:ab:b6:1f:ea:e9:64:25:a6:1a:90:54:5b: d4:b8:c4:0e:92:9c:f8:c9:30:89:15:ac:2f:d2:8f: e8:43:95:2a:85:40:93:15:3e:e7:57:2f:2d:35:28: 19:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:47:62:09:47:7F:C0:54:AD:ED:D7:D2:E3:11:7F:AA:F3:75:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/32df2551-b0bc-351f-bb8d-07bd37404e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e8:8b:7c:3d:82:b0:7a:ae:39:48:f1:87:4e:69:e5:c5:f2: 58:55:2d:e1:25:55:67:33:7f:9c:f2:34:ba:d0:e5:9d:84:09: 2c:c7:dd:29:0c:07:2d:92:52:27:8a:9e:84:3f:79:48:d6:cd: e7:c0:40:69:8c:b2:05:ee:1d:d9:6a:9a:e6:c5:9c:b1:59:01: bf:e4:1a:ee:04:66:fb:38:b2:36:bb:1b:89:3a:49:88:c6:e9: 79:16:c6:b4:9e:65:38:3a:92:21:be:92:39:2b:92:dc:fe:97: 9f:e9:e7:9a:a5:03:a7:85:05:37:90:cd:e8:a4:88:5d:c5:b0: e4:0d:94:aa:8a:62:30:1d:a9:47:dc:1c:83:9e:18:67:ff:b1: 76:98:d5:6b:13:c8:c5:55:de:5c:08:93:d4:9f:81:92:98:e4: 45:d7:bb:05:32:9b:df:d3:6d:08:d7:b8:ee:de:3e:1b:be:d5: b2:0e:59:83:36:52:64:12:a5:8a:95:43:3b:48:6e:44:67:d7: 88:86:a0:44:de:85:6d:56:40:c9:0e:01:fa:19:9a:e4:b7:02: e5:0d:a7:80:f0:2d:d8:b5:18:d4:56:d3:37:08:68:d4:5d:37: 3d:37:02:ed:fe:a0:61:9b:bd:78:81:9c:b2:7c:fb:39:10:6f: 15:b1:5d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2HVdepGcBin8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk MzJiOGJmMTYtNzFmMi00YzViLTgyZTgtODlmYTE0MDdhYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySJ0709cKA+tjiL1Gy9gBTreKKx/TJTUYonY QYtIXYUBTLlypqj5cBgOFmsXGnzPCkkbGz3mE3nUY5A8oVV9a0pB3YyKi0inkZqy OwZ53GoDCq4R43MwLSLNY1105FscJCFL1O5J3oNXGLVV7UobDhnIbLBsx4AKH/93 b9b+ENdujAP79ftuC6lUiav8CLJSu9Oc4tcYETM3OEsGvBpRGO5LPPd9cjVCMYMt ni2LjybYNBYDmH0vBvk31+pNL1bcJUoJVqp30AWlJn4HD98DUlJFJROrth/q6WQl phqQVFvUuMQOkpz4yTCJFawv0o/oQ5UqhUCTFT7nVy8tNSgZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDuR2IJR3/AVK3t19LjEX+q83W0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMzJkZjI1NTEtYjBiYy0z NTFmLWJiOGQtMDdiZDM3NDA0ZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7oi3w9grB6rjlI8YdOaeXF8lhVLeElVWczf5zyNLrQ5Z2ECSzH3SkM By2SUieKnoQ/eUjWzefAQGmMsgXuHdlqmubFnLFZAb/kGu4EZvs4sja7G4k6SYjG 6XkWxrSeZTg6kiG+kjkrktz+l5/p55qlA6eFBTeQzeikiF3FsOQNlKqKYjAdqUfc HIOeGGf/sXaY1WsTyMVV3lwIk9SfgZKY5EXXuwUym9/TbQjXuO7ePhu+1bIOWYM2 UmQSpYqVQztIbkRn14iGoETehW1WQMkOAfoZmuS3AuUNp4DwLdi1GNRW0zcIaNRd Nz03Au3+oGGbvXiBnLJ8+zkQbxWxXfc= -----END CERTIFICATE-----Generated at Sat May 10 20:44:11 2025 by rpki-client