$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa File: f585be5d-4b82-3039-bcb5-12d932832a7c.roa (raw, json) Hash identifier: PzCp+7w7i+JjeCG3BTTDwY5JfKdZO7+qftnaBgxcYYs= Subject key identifier: 62:A5:36:FC:04:DD:40:03:14:75:7B:2B:77:7D:7F:D8:40:34:2E:0A Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56BCECC705A0F4ED6A1580 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 161.38.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bc:ec:c7:05:a0:f4:ed:6a:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=6641b0bb-036c-47ad-a93e-23d37700e704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:db:18:ff:a5:b1:14:21:e0:27:48:cd:d9:c6: 1f:45:2f:94:15:e1:2a:7a:49:8c:79:96:93:6d:a8: 18:6f:96:a4:98:80:eb:9e:0b:57:1a:b5:3c:61:fa: 88:d8:73:97:e4:1f:c0:0b:f3:5a:9d:cb:d4:b7:99: 7a:8a:bb:74:a4:9d:b7:7a:29:6b:a5:6a:73:87:ee: db:ec:6e:75:c7:ba:eb:0b:a6:8e:3e:75:b1:f3:81: c2:91:3a:5f:b1:ee:68:af:31:94:1f:d5:8c:66:e7: 21:66:e3:5d:e3:11:36:1b:7f:0d:08:10:cf:66:ce: 24:4d:ca:2b:4b:cb:5a:21:4b:4e:cf:36:b1:cb:28: 06:6f:81:24:96:be:d2:72:62:bc:fd:5f:7e:2b:cd: 71:d9:63:21:b4:71:73:55:3e:6c:3c:66:10:e2:d7: 87:32:41:ea:76:64:05:c2:8f:94:d6:cf:24:5a:ff: 7b:ff:0f:0d:3b:72:fb:b8:79:78:0d:7a:28:3b:62: f5:80:bd:7c:c7:ba:a5:71:fd:09:a8:16:da:3f:b9: da:b3:b0:cc:22:19:a3:c6:d4:cd:28:72:d0:7b:d3: 31:18:1d:4d:13:ba:67:86:40:03:da:77:c1:88:01: dd:1d:b8:8f:53:7c:75:91:6d:00:54:6d:85:88:76: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A5:36:FC:04:DD:40:03:14:75:7B:2B:77:7D:7F:D8:40:34:2E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:92:77:a6:4e:c4:c1:c7:c9:c1:70:f6:13:6b:60:4a:86:04: 3e:cf:7c:d7:b3:31:e5:a1:4c:40:e2:7a:db:9c:aa:6d:e0:91: 62:70:8e:5b:64:e2:f4:66:a7:d6:fa:cc:2a:7c:da:fa:ba:e9: f7:5d:ef:b8:dd:a8:80:9d:64:93:88:e9:a1:6c:ee:a8:f3:a9: 8b:e2:1a:fe:ba:d6:e6:5e:56:07:b5:34:8f:40:91:61:e1:a9: 48:65:5f:89:62:35:a6:93:7d:3b:c2:d0:80:0a:62:1c:c6:c8: 45:70:2e:53:65:e9:05:ec:10:cb:6e:92:11:71:66:83:68:d8: 2e:2d:3e:a1:18:4a:3d:52:2f:9e:6b:12:2b:d7:0e:a6:e9:9b: 72:58:9d:aa:0e:fe:53:49:94:30:67:f1:bf:b3:e5:ba:69:86: 12:f5:55:fb:c4:04:bd:43:2a:c9:43:e6:cc:70:2e:f7:bc:af: f6:c9:48:24:d3:80:94:c1:52:ce:00:6c:a4:26:14:36:d5:bf: bf:0d:0e:2d:e4:48:80:dc:63:8c:85:ea:0b:d1:b2:22:fb:d7: 0e:9d:42:f9:6e:f5:9d:51:a8:7d:b9:e3:07:2a:2f:f0:78:a4: 2b:56:92:c1:2d:c9:89:73:e9:a6:86:b9:39:d1:33:05:88:4a: 63:d4:b6:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrzsxwWg9O1qFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjY0MWIwYmItMDM2Yy00N2FkLWE5M2UtMjNkMzc3MDBlNzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdsY/6WxFCHgJ0jN2cYfRS+UFeEqekmMeZaT bagYb5akmIDrngtXGrU8YfqI2HOX5B/AC/NancvUt5l6irt0pJ23eilrpWpzh+7b 7G51x7rrC6aOPnWx84HCkTpfse5orzGUH9WMZuchZuNd4xE2G38NCBDPZs4kTcor S8taIUtOzzaxyygGb4Eklr7ScmK8/V9+K81x2WMhtHFzVT5sPGYQ4teHMkHqdmQF wo+U1s8kWv97/w8NO3L7uHl4DXooO2L1gL18x7qlcf0JqBbaP7nas7DMIhmjxtTN KHLQe9MxGB1NE7pnhkAD2nfBiAHdHbiPU3x1kW0AVG2FiHaM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKlNvwE3UADFHV7K3d9f9hANC4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZjU4NWJlNWQtNGI4Mi0z MDM5LWJjYjUtMTJkOTMyODMyYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoSYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGySd6ZOxMHHycFw9hNrYEqGBD7PfNezMeWhTEDietucqm3gkWJwjltk 4vRmp9b6zCp82vq66fdd77jdqICdZJOI6aFs7qjzqYviGv661uZeVge1NI9AkWHh qUhlX4liNaaTfTvC0IAKYhzGyEVwLlNl6QXsEMtukhFxZoNo2C4tPqEYSj1SL55r EivXDqbpm3JYnaoO/lNJlDBn8b+z5bpphhL1VfvEBL1DKslD5sxwLve8r/bJSCTT gJTBUs4AbKQmFDbVv78NDi3kSIDcY4yF6gvRsiL71w6dQvlu9Z1RqH254wcqL/B4 pCtWksEtyYlz6aaGuTnRMwWISmPUtm8= -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:49 2025 by rpki-client