$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa File: 16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa (raw, json) Hash identifier: vGxXVExWEZGEm8MXn//rPYmCmKVH8b8jOMzRNN+vz4A= Subject key identifier: 1F:C0:C4:64:E9:EE:96:49:DE:49:2B:BD:49:5D:27:88:01:69:E0:E3 Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928 Certificate serial: 010D0C9F4328584A6C55E03E9661FC7BDADE5F00 Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 396479 IP address blocks: 161.38.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:e0:3e:96:61:fc:7b:da:de:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590b174f-a815-4e24-9512-3236e7727928 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=9e7ee3c8-b44c-4d32-959d-1127e7dadd68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:3c:ce:24:e9:b7:02:e3:79:d8:de:4d:9f: 3e:0a:67:7d:d7:09:3b:9d:f0:af:e8:a2:ac:19:57: 4c:a0:87:2e:f8:89:fe:96:9f:18:3f:de:b9:f5:9c: 13:de:35:08:bb:aa:21:8d:8d:08:a0:a7:4c:0c:49: 29:f2:98:8a:8e:4a:92:43:2e:46:e3:5b:19:11:7a: 9f:4a:f0:8a:af:d7:88:8d:02:3a:95:39:35:39:6e: a1:b2:fd:3b:ad:62:43:e0:da:6f:7a:4e:c6:1e:63: 42:8c:eb:50:22:7b:f1:49:cc:a7:e4:d7:80:2a:78: 0a:5e:06:2d:68:ef:30:59:b4:c2:06:6b:bd:f5:db: 4e:86:b3:25:f7:a8:41:e6:ff:5e:ae:9f:69:28:29: 64:8b:03:97:7e:54:7b:00:31:27:d0:05:39:e6:d4: 49:da:80:6d:2f:b3:2e:51:ce:c6:c3:1e:44:48:67: 0c:25:21:f7:56:98:d2:59:a0:ca:ca:a3:c4:ab:75: 05:f8:50:2f:f3:3a:05:d8:86:8c:ea:8c:56:d1:f1: d2:60:6a:62:cc:39:ac:ed:6a:32:11:e2:6a:19:60: a4:66:28:24:a0:b0:92:5d:23:cf:49:62:e6:1e:e8: 37:2f:e7:1c:71:a7:c7:6e:f2:82:73:ad:61:66:9b: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C0:C4:64:E9:EE:96:49:DE:49:2B:BD:49:5D:27:88:01:69:E0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/16c9aa4e-b5b5-3a18-88a4-1fc4d7ae61ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl X509v3 Authority Key Identifier: keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer sbgp-ipAddrBlock: critical IPv4: 161.38.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c1:ef:8d:4f:b4:dc:eb:ad:53:70:6b:a7:09:5e:c2:d3:51: ac:1f:3c:26:23:a9:02:db:0e:8e:92:b3:f9:d8:3e:f1:95:08: b6:f8:09:f8:ba:d8:e5:32:8a:49:bd:3f:e5:a2:23:da:65:d4: e2:6e:77:de:4a:2d:32:94:a9:81:0d:92:a2:b6:6b:76:8c:26: 52:61:cb:f9:bf:a2:1e:33:ff:b5:91:21:da:94:b0:55:cc:70: 6a:d6:c8:02:e1:27:72:cd:f8:7c:14:a4:73:4f:ee:08:c9:33: 81:82:55:cb:86:8f:46:84:76:4e:f6:66:2f:cc:5a:43:37:e1: 82:30:ff:fb:ec:6e:f6:b8:10:ae:83:07:04:8c:2b:5a:76:7a: 1b:36:28:5e:a1:3d:9d:e1:4f:d1:7d:54:1e:1c:d9:61:f6:08: bd:f3:e8:1d:e1:e7:ef:1e:a0:a3:43:a1:2f:bf:fb:9a:a9:ec: 0c:ee:63:a5:ca:5f:b1:86:eb:de:20:25:5b:08:3d:2d:79:d6: ab:71:b4:99:6a:da:d5:05:9e:d7:8b:48:4d:4a:d7:83:28:fe: f6:d8:9e:00:72:3b:77:a9:d3:08:59:4f:14:f1:ff:2b:78:40: c4:96:7c:27:72:58:20:b2:71:7b:de:4b:31:42:23:a1:52:67: 30:bd:e9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVeA+lmH8e9reXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3 OTI4MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk OWU3ZWUzYzgtYjQ0Yy00ZDMyLTk1OWQtMTEyN2U3ZGFkZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbM8ziTptwLjedjeTZ8+Cmd91wk7nfCv6KKs GVdMoIcu+In+lp8YP9659ZwT3jUIu6ohjY0IoKdMDEkp8piKjkqSQy5G41sZEXqf SvCKr9eIjQI6lTk1OW6hsv07rWJD4Npvek7GHmNCjOtQInvxScyn5NeAKngKXgYt aO8wWbTCBmu99dtOhrMl96hB5v9erp9pKClkiwOXflR7ADEn0AU55tRJ2oBtL7Mu Uc7Gwx5ESGcMJSH3VpjSWaDKyqPEq3UF+FAv8zoF2IaM6oxW0fHSYGpizDms7Woy EeJqGWCkZigkoLCSXSPPSWLmHug3L+cccafHbvKCc61hZptTBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/AxGTp7pZJ3kkrvUldJ4gBaeDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvMTZjOWFhNGUtYjViNS0z YTE4LTg4YTQtMWZjNGQ3YWU2MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1 MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2 ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILB741PtNzrrVNwa6cJXsLTUawfPCYjqQLbDo6Ss/nYPvGVCLb4Cfi6 2OUyikm9P+WiI9pl1OJud95KLTKUqYENkqK2a3aMJlJhy/m/oh4z/7WRIdqUsFXM cGrWyALhJ3LN+HwUpHNP7gjJM4GCVcuGj0aEdk72Zi/MWkM34YIw//vsbva4EK6D BwSMK1p2ehs2KF6hPZ3hT9F9VB4c2WH2CL3z6B3h5+8eoKNDoS+/+5qp7AzuY6XK X7GG694gJVsIPS151qtxtJlq2tUFnteLSE1K14Mo/vbYngByO3ep0whZTxTx/yt4 QMSWfCdyWCCycXveSzFCI6FSZzC96Tk= -----END CERTIFICATE-----Generated at Thu Jul 10 12:34:29 2025 by rpki-client