$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa File: e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa (raw, json) Hash identifier: G93flu5rRwwkq/EXkAZsgoKdDxV4CS0HfLJu1j7OVW0= Subject key identifier: F3:A4:F4:91:14:3F:50:C2:30:55:9E:5A:5A:0A:1C:6A:2F:8A:4D:C2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848B35B702B216560549BDF4C00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 8075 IP address blocks: 161.58.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:70:2b:21:65:60:54:9b:df:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=9bf1c11a-f213-4232-a2ef-8f38bfdba302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e9:11:89:2e:5e:98:36:52:1b:8d:f7:c1:b4: c8:90:95:ff:b1:5e:3c:bd:4b:bb:a0:f2:13:bf:9a: dc:3d:f5:bb:60:f4:4b:df:23:45:87:60:77:c4:05: 98:ce:0a:e5:10:c4:d4:1e:2a:0f:16:63:2c:db:c4: ee:a7:92:bc:16:1c:41:c9:63:62:fc:b4:e8:23:b0: b5:b2:6a:1c:39:4e:2e:c8:e7:e5:7e:cc:5d:5e:dd: 9c:ec:69:cb:28:74:b1:00:07:1d:ce:f3:4b:22:96: d8:ac:45:fc:a5:dc:25:8c:5a:5c:66:0b:bf:9e:65: 3f:51:ef:08:96:e1:03:3c:26:16:60:bf:8f:55:5e: 04:52:57:82:3b:a8:0c:2a:c5:fc:e9:7c:1a:18:7f: 54:63:a3:57:63:79:8a:5a:9e:1c:fe:24:0d:80:b2: 8c:ae:67:61:cd:d2:6f:ff:49:db:16:3f:75:52:b8: 50:28:f7:e7:04:cd:07:d8:b8:4e:3d:7a:2a:49:64: 37:7c:1f:db:b9:aa:0e:a3:86:73:63:c4:c3:4f:63: 43:de:b4:6b:ed:09:ae:6d:ee:63:61:db:51:11:98: 99:22:c5:72:9b:ca:d7:41:75:1a:14:98:18:92:cd: 8c:d5:a9:95:b1:69:36:65:90:32:93:5e:b0:2c:a8: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A4:F4:91:14:3F:50:C2:30:55:9E:5A:5A:0A:1C:6A:2F:8A:4D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 161.58.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4b:fc:a6:e1:0c:2d:27:74:bc:8f:7f:84:7a:59:32:cd:73: 10:51:9a:4e:7c:6b:3d:57:7e:46:fd:2b:c0:9c:e4:f6:63:8d: 83:83:e3:c1:47:61:4e:66:46:f7:64:22:7e:e7:3e:dc:26:82: 91:45:64:c1:dc:ed:a9:28:29:cf:db:33:43:a0:c9:df:d8:46: af:34:9d:9c:e9:6f:13:60:d1:e9:e8:18:b9:16:b8:44:cf:1d: 1a:17:c4:63:22:f8:02:79:1f:b1:09:20:c7:01:b5:09:e7:d7: d6:05:14:d8:a3:a0:28:b3:ae:2b:f6:4a:10:bd:42:22:49:37: d5:2e:b8:c5:6f:82:90:73:cd:8e:68:c6:2a:d9:36:83:ad:3b: 4b:c8:e2:1b:1f:0f:a0:b8:8e:12:f6:75:a8:9a:11:ae:98:93: 3d:f5:e0:82:7e:d3:cc:ee:b1:2a:f7:6c:3e:88:e0:c0:76:c7: 35:bc:bc:92:01:03:c3:98:35:d1:1d:5f:89:22:f7:3c:05:44: 8b:0e:98:37:a5:48:df:5a:75:5d:83:25:4b:09:7e:13:47:2f: 02:4d:32:9c:9a:6c:da:8b:78:15:ee:5d:79:0c:ca:ce:f3:2b: 15:9f:44:59:37:40:c4:15:c9:f2:8f:87:bf:8b:79:6a:dd:b4: 12:16:3b:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3ArIWVgVJvfTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OWJmMWMxMWEtZjIxMy00MjMyLWEyZWYtOGYzOGJmZGJhMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+kRiS5emDZSG433wbTIkJX/sV48vUu7oPIT v5rcPfW7YPRL3yNFh2B3xAWYzgrlEMTUHioPFmMs28Tup5K8FhxByWNi/LToI7C1 smocOU4uyOflfsxdXt2c7GnLKHSxAAcdzvNLIpbYrEX8pdwljFpcZgu/nmU/Ue8I luEDPCYWYL+PVV4EUleCO6gMKsX86XwaGH9UY6NXY3mKWp4c/iQNgLKMrmdhzdJv /0nbFj91UrhQKPfnBM0H2LhOPXoqSWQ3fB/buaoOo4ZzY8TDT2ND3rRr7Qmube5j YdtREZiZIsVym8rXQXUaFJgYks2M1amVsWk2ZZAyk16wLKg7DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOk9JEUP1DCMFWeWloKHGovik3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTVjNjkxZjQtMjJhYS0z ZDVkLTgxYmQtZTRkOGE5MGQ5YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoTqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJL/KbhDC0ndLyPf4R6WTLNcxBRmk58az1Xfkb9K8Cc5PZjjYOD48FH YU5mRvdkIn7nPtwmgpFFZMHc7akoKc/bM0Ogyd/YRq80nZzpbxNg0enoGLkWuETP HRoXxGMi+AJ5H7EJIMcBtQnn19YFFNijoCizriv2ShC9QiJJN9UuuMVvgpBzzY5o xirZNoOtO0vI4hsfD6C4jhL2daiaEa6Ykz314IJ+08zusSr3bD6I4MB2xzW8vJIB A8OYNdEdX4ki9zwFRIsOmDelSN9adV2DJUsJfhNHLwJNMpyabNqLeBXuXXkMys7z KxWfRFk3QMQVyfKPh7+LeWrdtBIWO7A= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:49 2025 by rpki-client