$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/f5f5e110-4b30-3e39-b8c1-6eef5b01b218.roa File: f5f5e110-4b30-3e39-b8c1-6eef5b01b218.roa (raw, json) Hash identifier: IJTOQd2+JkaTcUhDdcD1nZXAcSI7z32T5DDC9NpBHU4= Subject key identifier: F8:C7:A3:A2:9B:61:05:F8:48:F6:2E:E2:CB:0D:9D:75:61:02:D1:99 Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928 Certificate serial: 010D0C9F4328584902EBF553556B11AB95014900 Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/f5f5e110-4b30-3e39-b8c1-6eef5b01b218.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14618 IP address blocks: 161.38.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:f5:53:55:6b:11:ab:95:01:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590b174f-a815-4e24-9512-3236e7727928 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=2a069480-ddd4-42a7-ac71-1dcd4fdfcb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:73:8f:db:2b:39:86:cf:4f:bb:a7:5a:66: 5e:8a:7d:3e:45:28:4b:fc:92:3d:94:af:08:2e:0b: 07:7e:6f:45:4d:76:89:0d:cc:4e:96:11:51:d5:f1: e0:5f:73:b8:80:9a:22:df:07:21:36:db:f5:91:f6: ce:b7:cd:bc:c5:30:1b:94:86:09:86:a9:5f:41:30: 09:85:67:bd:bd:6a:fd:eb:53:52:cc:5c:37:22:10: ad:e2:96:b6:d6:32:dd:00:b1:a7:87:0a:c7:a5:04: b2:b6:a4:dc:12:aa:71:f2:d2:21:cc:30:46:e3:92: e4:f6:66:be:6d:d7:55:ee:50:9a:61:fd:d4:2f:44: 73:ca:cc:90:9f:e8:7b:63:b8:2b:f1:5d:a7:83:aa: 19:77:7a:91:aa:48:de:cf:41:17:05:81:10:70:de: a2:43:b8:d7:b8:78:3f:c6:df:0a:00:80:1f:5e:6b: 46:a0:d6:51:47:2c:a3:7c:bf:8f:a1:e3:bf:db:76: 66:dc:e3:e8:70:f3:b1:15:b5:1d:36:5d:6b:e2:2b: b3:9b:a6:c8:99:ac:f6:26:51:31:dc:cb:ed:44:51: 8e:36:2b:29:d2:c3:22:86:52:80:e4:ed:06:f3:3e: d1:40:ca:0e:89:d9:52:88:f0:94:92:21:11:87:c2: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:A3:A2:9B:61:05:F8:48:F6:2E:E2:CB:0D:9D:75:61:02:D1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/f5f5e110-4b30-3e39-b8c1-6eef5b01b218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl X509v3 Authority Key Identifier: keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer sbgp-ipAddrBlock: critical IPv4: 161.38.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c7:eb:21:75:dd:f4:20:38:fe:43:2f:2b:34:21:83:57:70: e5:78:5e:48:18:89:67:d2:69:58:91:7f:3a:e0:fe:44:91:a5: fc:4a:47:46:11:08:ac:6b:b7:32:4a:4b:f3:6a:c9:47:62:d6: d2:b9:4a:b0:fc:2d:16:9b:b1:2c:9a:60:29:e8:52:82:57:7c: 87:c6:eb:19:03:cc:24:ac:91:b8:56:3b:81:14:13:83:be:56: 58:1a:00:c9:69:97:d2:5d:92:51:d7:af:c5:f2:08:3a:06:5d: 96:04:ca:82:d3:9a:75:6e:10:42:43:1d:a2:7e:cb:b1:33:c7: 0c:3d:f0:fc:be:57:4c:4d:76:50:f8:71:9e:77:aa:9a:c8:4c: 96:82:4d:ca:84:33:c3:65:33:fa:98:b8:86:ab:df:fb:88:11: 24:61:07:b0:c2:5b:2f:bf:4b:be:cb:cb:c3:bd:f2:64:81:68: 7c:fb:7a:23:48:d0:98:28:89:f0:9f:19:d1:ab:81:63:24:94: 0e:6e:e7:bc:8a:e4:be:61:f4:27:19:cb:ae:b4:5c:07:36:bd: 04:7d:81:aa:e9:76:8f:cb:31:e6:04:a0:64:41:47:5d:02:22: 50:60:16:07:be:a5:40:3e:b1:09:61:80:85:81:d1:85:f3:35: 24:a9:86:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/VTVWsRq5UBSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3 OTI4MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MmEwNjk0ODAtZGRkNC00MmE3LWFjNzEtMWRjZDRmZGZjYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuZzj9srOYbPT7unWmZein0+RShL/JI9lK8I LgsHfm9FTXaJDcxOlhFR1fHgX3O4gJoi3wchNtv1kfbOt828xTAblIYJhqlfQTAJ hWe9vWr961NSzFw3IhCt4pa21jLdALGnhwrHpQSytqTcEqpx8tIhzDBG45Lk9ma+ bddV7lCaYf3UL0RzysyQn+h7Y7gr8V2ng6oZd3qRqkjez0EXBYEQcN6iQ7jXuHg/ xt8KAIAfXmtGoNZRRyyjfL+PoeO/23Zm3OPocPOxFbUdNl1r4iuzm6bImaz2JlEx 3MvtRFGONisp0sMihlKA5O0G8z7RQMoOidlSiPCUkiERh8IKIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjHo6KbYQX4SPYu4ssNnXVhAtGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvZjVmNWUxMTAtNGIzMC0z ZTM5LWI4YzEtNmVlZjViMDFiMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1 MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2 ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrH6yF13fQgOP5DLys0IYNXcOV4XkgYiWfSaViRfzrg/kSRpfxKR0YR CKxrtzJKS/NqyUdi1tK5SrD8LRabsSyaYCnoUoJXfIfG6xkDzCSskbhWO4EUE4O+ VlgaAMlpl9JdklHXr8XyCDoGXZYEyoLTmnVuEEJDHaJ+y7Ezxww98Py+V0xNdlD4 cZ53qprITJaCTcqEM8NlM/qYuIar3/uIESRhB7DCWy+/S77Ly8O98mSBaHz7eiNI 0JgoifCfGdGrgWMklA5u57yK5L5h9CcZy660XAc2vQR9garpdo/LMeYEoGRBR10C IlBgFge+pUA+sQlhgIWB0YXzNSSphgE= -----END CERTIFICATE-----Generated at Fri Apr 4 23:42:12 2025 by rpki-client