$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa File: 450c0d21-5700-3ed5-8c33-216c663999de.roa (raw, json) Hash identifier: I8aYRNBpU7N+Wi0Ib0Z14XovRWFNa39H6aNxnW7vhNw= Subject key identifier: C3:20:E4:F9:EC:A6:C5:39:98:01:53:44:A8:D2:8D:FC:03:F6:72:A2 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584A374AD49005B4A6C992636F60 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 203724 IP address blocks: 161.69.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:d4:90:05:b4:a6:c9:92:63:6f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=ec17d160-5088-4590-adde-5a9a03044380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:39:1c:c6:8a:a9:eb:a7:9b:01:4f:60:72: 66:58:9d:06:bb:f6:eb:4a:b5:b8:8b:ef:cf:37:75: 23:db:43:a7:60:4e:cf:ae:00:fa:f1:95:dd:e6:9d: fb:a3:5e:75:72:e7:a0:2e:3a:76:39:de:55:a6:7a: a6:9b:29:24:fa:9a:c4:cd:de:5b:0f:49:6d:ce:d0: f4:83:3b:25:7b:ba:a4:a6:7f:dc:b1:73:c8:c8:ee: fd:fe:03:bf:b3:fa:75:c6:7a:e9:06:b9:e4:ac:37: 86:df:ea:b7:5a:86:61:2e:9e:ad:2b:04:28:f2:f5: 9b:b6:8e:f0:e4:fe:8b:39:7c:77:0d:96:1b:64:2c: 6f:e1:25:b6:5a:f8:c7:e1:5d:09:8b:f9:35:61:46: 43:c0:35:23:a8:e8:fc:7f:3a:9d:4a:6b:e5:08:48: 00:4b:0d:33:dd:3d:70:fa:e8:a3:28:de:fe:37:e9: ab:eb:cb:cc:74:f2:fd:78:71:60:64:7a:fa:75:c0: a1:d9:c0:ce:e7:37:78:7a:30:98:ab:21:c5:9a:6d: 4c:5e:76:34:16:9f:79:f6:92:d6:74:33:7e:76:07: c8:dc:85:9c:bc:28:a8:fc:46:29:10:95:80:36:6b: f7:78:f8:f9:c2:78:75:12:b4:e8:88:9b:77:8a:6f: b8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:20:E4:F9:EC:A6:C5:39:98:01:53:44:A8:D2:8D:FC:03:F6:72:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/450c0d21-5700-3ed5-8c33-216c663999de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d3:ad:36:90:d7:4d:f3:10:54:1b:56:04:94:c5:16:05:cf: 86:f5:f4:9e:1e:c2:b9:ad:fe:0d:03:22:2d:1c:4b:9c:c4:97: 17:59:a0:c1:ce:10:e2:c0:4e:d3:a3:4b:94:e8:5c:01:8c:5d: 53:0e:54:7e:f8:33:ee:cc:fd:19:85:f5:eb:b3:b2:5c:26:00: 27:fa:76:76:ff:8e:92:c0:45:3c:b9:a7:1f:bd:fb:89:b1:49: c2:7a:5d:62:c8:9b:8b:58:05:23:f2:aa:6d:d9:2c:bc:87:8d: ae:68:85:eb:15:d0:45:87:f7:60:1d:b7:a6:fb:48:35:a6:37: 12:05:9e:0f:29:b5:69:9e:57:6d:9e:f5:6a:d2:00:d0:1b:78: ae:33:b8:be:58:2f:ef:20:a4:e4:69:81:87:c2:4a:4c:40:ba: 25:20:3e:74:4c:b4:60:20:ef:46:a9:7d:d5:69:4f:9e:6e:60: 72:97:2e:f5:d6:60:9f:e6:48:19:db:6a:50:ed:ce:59:5e:4d: 0a:0b:71:9c:ec:6f:5f:e4:09:b8:47:34:3a:b7:3f:21:9f:2f: 5b:81:51:40:0b:2c:b5:6a:0d:73:c2:6d:be:bb:59:45:8f:33: c1:2f:2a:41:f4:24:5f:d0:3b:fb:e6:88:6d:19:12:e9:29:02: df:84:ab:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StSQBbSmyZJjb2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZWMxN2QxNjAtNTA4OC00NTkwLWFkZGUtNWE5YTAzMDQ0MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCA5HMaKqeunmwFPYHJmWJ0Gu/brSrW4i+/P N3Uj20OnYE7PrgD68ZXd5p37o151cuegLjp2Od5Vpnqmmykk+prEzd5bD0ltztD0 gzsle7qkpn/csXPIyO79/gO/s/p1xnrpBrnkrDeG3+q3WoZhLp6tKwQo8vWbto7w 5P6LOXx3DZYbZCxv4SW2WvjH4V0Ji/k1YUZDwDUjqOj8fzqdSmvlCEgASw0z3T1w +uijKN7+N+mr68vMdPL9eHFgZHr6dcCh2cDO5zd4ejCYqyHFmm1MXnY0Fp959pLW dDN+dgfI3IWcvCio/EYpEJWANmv3ePj5wnh1ErToiJt3im+4ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMg5PnspsU5mAFTRKjSjfwD9nKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNDUwYzBkMjEtNTcwMC0z ZWQ1LThjMzMtMjE2YzY2Mzk5OWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjTrTaQ103zEFQbVgSUxRYFz4b19J4ewrmt/g0DIi0cS5zElxdZoMHO EOLATtOjS5ToXAGMXVMOVH74M+7M/RmF9euzslwmACf6dnb/jpLARTy5px+9+4mx ScJ6XWLIm4tYBSPyqm3ZLLyHja5ohesV0EWH92Adt6b7SDWmNxIFng8ptWmeV22e 9WrSANAbeK4zuL5YL+8gpORpgYfCSkxAuiUgPnRMtGAg70apfdVpT55uYHKXLvXW YJ/mSBnbalDtzlleTQoLcZzsb1/kCbhHNDq3PyGfL1uBUUALLLVqDXPCbb67WUWP M8EvKkH0JF/QO/vmiG0ZEukpAt+Eq/I= -----END CERTIFICATE-----Generated at Tue Jul 1 00:50:06 2025 by rpki-client