$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/51f6750f-c949-3cdc-9b39-1ccb673063b4.roa File: 51f6750f-c949-3cdc-9b39-1ccb673063b4.roa (raw, json) Hash identifier: gRjqHgcRj/thoCQv+kUlzhlvFJZVc+l3xxYfI6kBK5s= Subject key identifier: 58:1E:B2:BF:93:CB:10:C1:1E:0E:97:05:00:57:BF:CE:A1:F8:0C:83 Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F43285848CC7B8C946144D7D592DAE5C0 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/51f6750f-c949-3cdc-9b39-1ccb673063b4.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 16509 IP address blocks: 161.199.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:8c:94:61:44:d7:d5:92:da:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=6db44c22-a9d0-488d-96fe-0284cb464a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:7b:05:d1:ce:33:73:d9:58:a1:df:01:1c: e1:29:e2:2f:93:8c:41:10:87:e3:0c:7b:8e:7b:3b: fa:e7:cb:c3:1d:33:55:94:92:78:8d:c7:2f:24:5d: 33:29:06:82:28:2a:5d:20:0f:95:e2:90:18:54:b1: 6f:20:e7:60:e1:8a:69:8f:f7:9e:4b:ca:e2:34:3f: a7:15:00:24:6c:bd:e3:a1:0e:84:df:54:b4:9c:87: 45:31:70:04:a0:a5:51:79:8b:54:51:65:da:de:83: 1b:91:eb:cd:c2:ef:82:f2:7e:bf:86:84:2f:03:07: a0:0c:89:6e:f3:07:8a:f2:a3:82:78:dd:8a:7b:ad: 40:5b:cf:95:2f:f1:cd:86:1b:45:07:13:f2:06:ef: a6:0f:52:fd:0e:b3:1f:63:b5:71:29:fa:35:4c:23: f6:af:ac:85:f5:d2:ae:6c:e3:8d:f5:74:55:db:34: dd:7c:a1:1b:9b:0c:f4:a4:2d:9f:f2:f5:3b:eb:c3: 56:46:59:05:e1:82:98:32:b0:fc:c0:2d:2c:cd:4a: 3b:9b:b7:98:d4:4a:65:d1:0b:64:2f:c0:cb:83:1e: 4e:4d:95:db:02:91:dc:03:7e:15:19:eb:7e:1b:6b: d3:6c:9b:04:7f:f6:cc:06:66:6c:b6:4f:f1:7f:2c: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1E:B2:BF:93:CB:10:C1:1E:0E:97:05:00:57:BF:CE:A1:F8:0C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/51f6750f-c949-3cdc-9b39-1ccb673063b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 161.199.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e9:b1:5f:87:b3:cc:9d:78:21:f5:c7:97:50:6f:51:2d:a0: b6:7d:9e:d8:05:ee:84:e5:18:74:ef:eb:51:18:cb:7d:94:71: 6e:02:24:f0:d4:4d:84:7d:f7:63:06:c6:bd:4d:af:53:11:26: 78:a7:43:50:d9:53:2b:50:17:26:5d:60:f9:18:20:88:1c:37: 97:e5:20:4e:ab:00:6b:23:f7:6b:9d:c3:fa:04:9f:0b:31:33: 40:99:d5:d1:0e:83:7b:a0:ff:0f:8c:2c:49:a0:30:ff:06:e0: 9b:3b:a5:89:29:d9:b0:95:33:0d:8b:2b:10:86:33:80:94:20: c7:6c:ac:05:f1:46:d5:79:ed:88:d5:ce:c9:89:72:ab:c0:bf: a2:fa:63:e2:ca:f6:2c:05:72:fd:46:65:b9:9d:95:9a:51:1b: 01:04:4d:5d:36:df:dd:f1:c9:53:4f:89:69:d0:6b:7e:fc:3b: 37:0d:f5:d7:dd:b3:b0:0f:41:f4:0b:9f:70:2d:00:4e:30:44: a8:1b:b2:f1:7f:2c:22:52:a7:87:d7:7b:d4:23:0f:f6:ac:bf: f0:f0:9c:db:07:20:83:4f:a6:c1:5c:bf:7a:a9:30:d3:3e:04: 48:39:7f:64:62:ef:aa:a7:6d:57:ec:6d:7d:83:bf:80:fc:c9: 27:89:91:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe4yUYUTX1ZLa5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NmRiNDRjMjItYTlkMC00ODhkLTk2ZmUtMDI4NGNiNDY0YTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc97BdHOM3PZWKHfARzhKeIvk4xBEIfjDHuO ezv658vDHTNVlJJ4jccvJF0zKQaCKCpdIA+V4pAYVLFvIOdg4Yppj/eeS8riND+n FQAkbL3joQ6E31S0nIdFMXAEoKVReYtUUWXa3oMbkevNwu+C8n6/hoQvAwegDIlu 8weK8qOCeN2Ke61AW8+VL/HNhhtFBxPyBu+mD1L9DrMfY7VxKfo1TCP2r6yF9dKu bOON9XRV2zTdfKEbmwz0pC2f8vU768NWRlkF4YKYMrD8wC0szUo7m7eY1Epl0Qtk L8DLgx5OTZXbApHcA34VGet+G2vTbJsEf/bMBmZstk/xfyw5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgesr+TyxDBHg6XBQBXv86h+AyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvNTFmNjc1MGYtYzk0OS0z Y2RjLTliMzktMWNjYjY3MzA2M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBocf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3psV+Hs8ydeCH1x5dQb1EtoLZ9ntgF7oTlGHTv61EYy32UcW4CJPDU TYR992MGxr1Nr1MRJninQ1DZUytQFyZdYPkYIIgcN5flIE6rAGsj92udw/oEnwsx M0CZ1dEOg3ug/w+MLEmgMP8G4Js7pYkp2bCVMw2LKxCGM4CUIMdsrAXxRtV57YjV zsmJcqvAv6L6Y+LK9iwFcv1GZbmdlZpRGwEETV02393xyVNPiWnQa378OzcN9dfd s7APQfQLn3AtAE4wRKgbsvF/LCJSp4fXe9QjD/asv/DwnNsHIINPpsFcv3qpMNM+ BEg5f2Ri76qnbVfsbX2Dv4D8ySeJkZA= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:23 2025 by rpki-client