$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa File: 16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa (raw, json) Hash identifier: xqDYSHAdWPa7wMfPmvbGcHB8NbisOu9LD/qwY+Zt5sY= Subject key identifier: 9B:2E:BD:6E:D1:99:4E:9B:A6:74:47:39:57:82:2E:87:01:59:E2:59 Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928 Certificate serial: 010D0C9F43285848ADC61E8634866089D6DED900 Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 396479 IP address blocks: 161.38.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:1e:86:34:86:60:89:d6:de:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590b174f-a815-4e24-9512-3236e7727928 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=bc917029-18e9-45ca-b0a6-3135fbbe811d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:12:f4:f1:e2:c6:68:75:06:bd:d2:f6:a3: 21:38:81:75:98:0a:de:3c:38:6f:df:1a:40:a1:41: 14:ad:71:42:23:fa:79:b0:06:ba:0c:08:ee:fe:95: cf:82:20:89:e1:36:57:d4:f1:57:f9:fe:9a:83:59: 60:39:f5:c5:46:16:ce:bd:f8:34:7f:ea:f3:42:b9: b6:bf:ef:37:4e:61:b7:07:e0:e9:8c:78:be:dc:01: b6:b4:49:68:13:62:c2:30:ed:1c:6d:dc:43:09:13: df:5a:3e:6e:26:93:f9:96:a5:69:17:45:e8:38:14: 5a:8d:59:1a:d1:85:21:b4:77:bb:a9:ac:37:d0:44: 5b:6f:74:c8:9d:a6:ae:ed:2c:35:52:e7:26:75:3d: 40:f9:41:ae:09:f8:7b:df:dc:e2:65:f9:8c:fd:f7: 57:05:aa:0b:b8:83:09:26:ad:86:83:1f:ea:ef:36: c3:46:78:87:8c:b4:49:c7:a7:4f:d7:21:b8:67:98: c8:14:27:74:77:46:b7:7c:b6:10:83:5c:a7:60:c8: 7d:26:f9:49:f7:58:7a:b1:ab:e5:2a:a6:cd:18:28: 87:c4:73:b2:c9:4a:2e:be:d0:66:76:83:09:4e:dd: 52:58:d2:61:6e:db:6e:28:7e:d4:06:34:0e:04:ea: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:BD:6E:D1:99:4E:9B:A6:74:47:39:57:82:2E:87:01:59:E2:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl X509v3 Authority Key Identifier: keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer sbgp-ipAddrBlock: critical IPv4: 161.38.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e5:03:6d:bf:7f:27:90:ff:d1:7e:ea:3c:6e:25:e8:67:2e: 63:c5:dc:11:ac:37:3d:3d:2c:3d:04:c8:ef:49:4b:34:a1:bf: 49:f8:5c:55:6b:b3:bf:17:a3:8b:9e:62:40:ae:92:dc:d4:17: ce:4d:99:3b:b7:db:4a:cf:bb:d5:fb:16:2b:91:af:55:2b:e4: 83:61:10:b1:13:b1:af:e1:f9:16:32:cb:f6:e3:57:f1:8d:09: ac:7d:8a:51:8d:20:37:3a:d0:15:fb:3c:cc:3e:ff:68:02:84: 2f:c0:13:c3:e0:6c:4a:3e:38:af:33:c2:7c:40:ca:9e:b4:64: cd:9e:da:70:c8:b0:2d:da:4a:9a:b0:36:06:90:5a:dd:9d:40: 37:c6:cf:5c:97:ff:ea:12:96:1f:b6:f0:fb:1e:f6:c3:de:0f: 0d:4d:c9:1f:91:7e:f0:56:69:3f:26:9f:27:10:ff:71:3f:1c: 36:62:85:28:9d:97:61:f4:a3:bd:77:ca:5c:57:b6:96:23:68: 19:79:9a:33:4a:72:dc:be:b5:f9:11:75:41:f4:d5:a9:e6:6f: 94:6c:d3:8a:bb:29:d1:6b:91:d6:10:af:b3:04:d8:c6:e5:94: cd:1e:97:45:77:05:52:7c:41:5d:53:5a:9e:c4:4c:16:30:15: d0:b1:83:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxh6GNIZgidbe2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3 OTI4MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk YmM5MTcwMjktMThlOS00NWNhLWIwYTYtMzEzNWZiYmU4MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0gS9PHixmh1Br3S9qMhOIF1mArePDhv3xpA oUEUrXFCI/p5sAa6DAju/pXPgiCJ4TZX1PFX+f6ag1lgOfXFRhbOvfg0f+rzQrm2 v+83TmG3B+DpjHi+3AG2tEloE2LCMO0cbdxDCRPfWj5uJpP5lqVpF0XoOBRajVka 0YUhtHe7qaw30ERbb3TInaau7Sw1UucmdT1A+UGuCfh739ziZfmM/fdXBaoLuIMJ Jq2Ggx/q7zbDRniHjLRJx6dP1yG4Z5jIFCd0d0a3fLYQg1ynYMh9JvlJ91h6savl KqbNGCiHxHOyyUouvtBmdoMJTt1SWNJhbttuKH7UBjQOBOrlswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsuvW7RmU6bpnRHOVeCLocBWeJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvMTZjOWFhNGUtYjViNS0z YTE4LTg4YTQtMWZjNGQ3YWU2MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1 MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2 ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHlA22/fyeQ/9F+6jxuJehnLmPF3BGsNz09LD0EyO9JSzShv0n4XFVr s78Xo4ueYkCuktzUF85NmTu320rPu9X7FiuRr1Ur5INhELETsa/h+RYyy/bjV/GN Cax9ilGNIDc60BX7PMw+/2gChC/AE8PgbEo+OK8zwnxAyp60ZM2e2nDIsC3aSpqw NgaQWt2dQDfGz1yX/+oSlh+28Pse9sPeDw1NyR+RfvBWaT8mnycQ/3E/HDZihSid l2H0o713ylxXtpYjaBl5mjNKcty+tfkRdUH01anmb5Rs04q7KdFrkdYQr7ME2Mbl lM0el0V3BVJ8QV1TWp7ETBYwFdCxg8Q= -----END CERTIFICATE-----Generated at Sat Apr 5 12:37:10 2025 by rpki-client