$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cbe9320a-fa0d-3c07-9246-24f8bf33e13d.roa File: cbe9320a-fa0d-3c07-9246-24f8bf33e13d.roa (raw, json) Hash identifier: m+vW8m9Yh6eI7fNtJve40PxtYAJVAfsUNpDAymoJDGU= Subject key identifier: A9:E5:34:D9:BB:A3:1D:2D:48:EC:7A:A0:05:0F:33:9C:6D:1E:F0:F9 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584A03A53DBE8D5A7DB357B7FAA0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cbe9320a-fa0d-3c07-9246-24f8bf33e13d.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14061 IP address blocks: 161.35.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:3d:be:8d:5a:7d:b3:57:b7:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=dc8397c9-a16f-4798-ad02-03a877d21ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b5:45:80:61:22:d1:8c:df:08:9a:cf:f5:bc: 09:33:7a:d9:c2:3f:39:d6:21:3e:3b:98:1b:07:66: 54:83:47:4f:29:80:34:e2:86:b1:7f:17:02:67:04: d8:b5:fa:b8:b9:e9:9e:86:74:b9:e5:98:5c:a2:51: 2f:75:e4:d6:e1:99:88:21:4a:08:ba:d4:a9:28:c4: 83:ea:bb:10:39:4a:7b:71:c7:71:7d:a0:eb:eb:7a: 5a:de:b6:df:a5:74:35:d4:eb:4d:d8:e0:a7:74:80: 81:b9:90:d6:68:69:72:94:14:ea:1a:3b:17:b3:a2: 87:8d:97:bb:a8:2f:49:8c:f3:b7:9c:e3:2e:c9:a3: 88:26:7e:55:a6:1f:d3:56:51:1e:8e:52:93:e0:6b: 03:a2:ae:46:e5:a2:a1:a8:f0:c4:94:09:36:40:95: aa:c8:d9:77:63:73:ab:a9:74:80:83:08:37:38:cf: 67:d0:ac:8a:99:3b:b4:5a:de:e2:9a:13:a3:db:b5: 59:d4:dc:39:e4:7c:68:1f:bb:e3:64:a0:b2:78:1e: f8:ed:42:a6:b6:b1:ee:90:ae:5a:2e:13:cd:55:f4: a7:3b:ce:1a:71:9e:9c:53:9f:24:9a:cc:fe:fc:67: 37:07:16:15:91:76:9b:cd:f6:fd:88:f6:85:d4:36: c4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E5:34:D9:BB:A3:1D:2D:48:EC:7A:A0:05:0F:33:9C:6D:1E:F0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/cbe9320a-fa0d-3c07-9246-24f8bf33e13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 161.35.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:07:91:55:c8:86:be:f5:57:40:2d:b6:3e:fa:b2:5b:8a:15: b8:33:2f:c6:c4:d1:fd:0f:5b:b2:85:55:0c:e6:7e:75:e3:de: 77:db:85:9d:56:f5:9a:11:45:f2:98:38:57:06:55:f2:04:04: 24:38:aa:6d:8a:11:89:2f:8c:61:a2:4b:a5:30:97:3d:e6:ba: b4:97:c8:dd:eb:d0:a0:76:17:4f:38:40:18:f9:c1:3f:1b:36: 64:59:51:e1:a6:08:da:7f:47:43:20:9a:5b:50:97:8b:2b:56: af:14:f6:01:0b:f2:0e:f3:a4:a1:ab:f2:8d:cf:3a:11:e1:19: f9:7c:1c:e1:9f:75:96:40:f5:1f:8b:b2:d9:c5:2a:eb:c4:ba: 43:65:2f:c6:13:59:f6:05:a2:d6:ce:e7:9a:59:66:f1:ec:f2: 0e:0d:e1:8b:a7:fc:83:b9:31:c6:09:2f:8c:1e:85:fe:3c:03: 78:8a:bf:b7:a1:b9:8a:fb:99:50:b0:58:e6:4b:d7:fc:0d:b1: 6a:09:58:a8:d6:df:a3:39:28:06:bc:d1:6a:2a:a2:b3:27:7e: e0:84:9f:d2:b7:95:34:0d:57:22:a5:7c:06:27:a6:ea:cb:81: fb:ec:cb:d0:3a:d7:b9:23:6d:80:ad:14:00:29:e1:40:45:54: 9e:b9:7e:f7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoDpT2+jVp9s1e3+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZGM4Mzk3YzktYTE2Zi00Nzk4LWFkMDItMDNhODc3ZDIxYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbVFgGEi0YzfCJrP9bwJM3rZwj851iE+O5gb B2ZUg0dPKYA04oaxfxcCZwTYtfq4uemehnS55ZhcolEvdeTW4ZmIIUoIutSpKMSD 6rsQOUp7ccdxfaDr63pa3rbfpXQ11OtN2OCndICBuZDWaGlylBTqGjsXs6KHjZe7 qC9JjPO3nOMuyaOIJn5Vph/TVlEejlKT4GsDoq5G5aKhqPDElAk2QJWqyNl3Y3Or qXSAgwg3OM9n0KyKmTu0Wt7imhOj27VZ1Nw55HxoH7vjZKCyeB747UKmtrHukK5a LhPNVfSnO84acZ6cU58kmsz+/Gc3BxYVkXabzfb9iPaF1DbEUwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKnlNNm7ox0tSOx6oAUPM5xtHvD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2JlOTMyMGEtZmEwZC0z YzA3LTkyNDYtMjRmOGJmMzNlMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoSMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVgeRVciGvvVXQC22PvqyW4oVuDMvxsTR/Q9bsoVVDOZ+dePed9uFnVb1 mhFF8pg4VwZV8gQEJDiqbYoRiS+MYaJLpTCXPea6tJfI3evQoHYXTzhAGPnBPxs2 ZFlR4aYI2n9HQyCaW1CXiytWrxT2AQvyDvOkoavyjc86EeEZ+Xwc4Z91lkD1H4uy 2cUq68S6Q2UvxhNZ9gWi1s7nmllm8ezyDg3hi6f8g7kxxgkvjB6F/jwDeIq/t6G5 ivuZULBY5kvX/A2xaglYqNbfozkoBrzRaiqisyd+4ISf0reVNA1XIqV8Biem6suB ++zL0DrXuSNtgK0UACnhQEVUnrl+9w== -----END CERTIFICATE-----Generated at Sat Jun 7 04:08:47 2025 by rpki-client