$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa File: 8b44a220-e7e1-333d-a0ac-469647d3ca30.roa (raw, json) Hash identifier: ILH1ugrNf1Y+otKTnq7LdqXJXMvcYtxVPlJV8EtB+cI= Subject key identifier: D1:FB:BE:00:E0:AE:8D:A7:85:79:C7:C2:11:6C:2D:83:F7:D3:66:BD Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285848BE862FD6BF686B4A6697BF80 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 396253 IP address blocks: 163.120.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2f:d6:bf:68:6b:4a:66:97:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=4d62cdd6-d29a-48e3-b99a-e65bca810b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:33:76:db:d4:47:45:7e:8a:41:dc:42:40: e2:bf:c7:21:d4:a7:3e:b3:83:7d:95:a9:8c:15:aa: c6:6b:92:89:47:96:20:db:f1:6e:81:8b:e6:b1:1a: ca:02:6c:f2:c7:b4:e0:2d:3b:cd:95:10:f7:7f:d7: fa:82:79:36:2d:15:3f:14:73:07:c7:68:45:4b:92: a7:b0:bc:2f:16:9b:d1:fb:a2:07:e4:e1:17:75:83: af:0d:82:6d:8c:1f:ac:0e:03:dd:1f:80:38:d1:6f: 0e:0e:d5:c5:3c:48:af:f1:fe:e8:54:7a:7a:02:16: 37:b4:1e:a3:09:2b:0b:42:8e:ad:15:d1:4d:61:81: 7a:88:5c:63:a9:cb:1a:c7:8a:e6:4d:ae:b0:51:9a: 15:f2:a6:56:79:10:44:18:77:2b:a7:60:c9:69:0e: 37:25:8d:0a:41:6d:ee:11:1d:f2:b6:4b:34:7f:46: 3b:c6:1d:18:76:1a:4a:44:8f:51:96:26:74:f9:24: 41:68:e5:64:c5:93:f7:db:d3:47:e2:90:b9:17:af: 9d:4d:83:4a:8a:35:75:2a:3c:77:43:71:85:e7:48: c2:1e:03:78:cc:e3:18:a3:76:4a:48:ed:73:1b:0a: d3:33:3f:ef:cd:2e:57:e8:f9:29:45:17:fb:50:c3: 69:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FB:BE:00:E0:AE:8D:A7:85:79:C7:C2:11:6C:2D:83:F7:D3:66:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:8b:ad:99:a2:40:31:8e:3b:f8:47:51:3f:90:e2:88:4c:34: 67:69:79:02:2b:bb:26:70:6e:62:8e:10:6f:a5:f7:1b:0f:f7: 38:d7:9d:53:34:66:41:a0:2f:30:65:30:4b:18:c9:75:5e:25: de:fd:32:1e:20:31:2f:5a:ce:1d:81:89:39:af:db:ff:73:52: 46:4e:9d:f9:34:af:da:01:c3:1c:4c:11:6d:6b:b8:c3:9c:8c: 21:48:9b:7c:f1:68:5a:95:d2:ec:ee:df:22:85:c4:b5:3b:c3: a4:4b:38:95:07:27:3a:e4:47:2d:94:5e:e1:a9:49:c1:f5:64: c2:fd:0c:2c:84:2d:fd:0a:e2:b5:68:6f:7b:f7:73:9e:82:af: fe:cd:b6:a3:bc:9a:aa:8c:4c:e2:bb:85:8c:5d:96:7e:33:ac: cd:3d:10:8c:53:1f:77:6f:63:e7:d4:07:e0:94:04:b8:90:2c: 37:c3:5b:81:50:95:ae:16:92:ef:ed:9d:73:30:a4:64:47:09: 5d:cd:87:5c:19:18:35:f5:2e:88:bc:40:0d:c8:ef:fe:4b:7a: d7:e6:2f:bf:10:c6:e1:78:9f:3f:2c:f6:90:2e:fc:ee:14:d4: 4c:f6:2c:53:0a:2e:ba:69:f6:7f:bc:07:99:d4:87:2e:52:c8: 53:90:20:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hi/Wv2hrSmaXv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NGQ2MmNkZDYtZDI5YS00OGUzLWI5OWEtZTY1YmNhODEwYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoykzdtvUR0V+ikHcQkDiv8ch1Kc+s4N9lamM FarGa5KJR5Yg2/FugYvmsRrKAmzyx7TgLTvNlRD3f9f6gnk2LRU/FHMHx2hFS5Kn sLwvFpvR+6IH5OEXdYOvDYJtjB+sDgPdH4A40W8ODtXFPEiv8f7oVHp6AhY3tB6j CSsLQo6tFdFNYYF6iFxjqcsax4rmTa6wUZoV8qZWeRBEGHcrp2DJaQ43JY0KQW3u ER3ytks0f0Y7xh0YdhpKRI9RliZ0+SRBaOVkxZP329NH4pC5F6+dTYNKijV1Kjx3 Q3GF50jCHgN4zOMYo3ZKSO1zGwrTMz/vzS5X6PkpRRf7UMNpXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH7vgDgro2nhXnHwhFsLYP302a9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvOGI0NGEyMjAtZTdlMS0z MzNkLWEwYWMtNDY5NjQ3ZDNjYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyLrZmiQDGOO/hHUT+Q4ohMNGdpeQIruyZwbmKOEG+l9xsP9zjXnVM0 ZkGgLzBlMEsYyXVeJd79Mh4gMS9azh2BiTmv2/9zUkZOnfk0r9oBwxxMEW1ruMOc jCFIm3zxaFqV0uzu3yKFxLU7w6RLOJUHJzrkRy2UXuGpScH1ZML9DCyELf0K4rVo b3v3c56Cr/7NtqO8mqqMTOK7hYxdln4zrM09EIxTH3dvY+fUB+CUBLiQLDfDW4FQ la4Wku/tnXMwpGRHCV3Nh1wZGDX1Loi8QA3I7/5LetfmL78QxuF4nz8s9pAu/O4U 1Ez2LFMKLrpp9n+8B5nUhy5SyFOQIMM= -----END CERTIFICATE-----Generated at Sat Apr 5 20:53:15 2025 by rpki-client