$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa File: a08f2739-bc57-3f01-8de6-25e8506410f0.roa (raw, json) Hash identifier: VxV+U4mibSecS0TmxdVqzJh/DD8OmdFQaBqpOknOOnU= Subject key identifier: EA:5C:A7:D5:12:21:E4:A8:9B:D4:8E:4A:23:B3:40:8B:3D:CF:AF:84 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584A1E2AA3378FFFF74A9FFF2300 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 15092 IP address blocks: 161.199.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a3:37:8f:ff:f7:4a:9f:ff:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=b9e79732-f72b-4e38-9c33-a02ed3b90cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e4:30:22:bd:fd:db:7a:e3:b3:45:6a:6f:6f: 99:bd:45:e5:e5:88:1b:ec:2b:11:5b:d5:f9:30:4d: 25:f0:c9:4f:57:f2:24:8c:79:a5:ab:56:4f:0f:0f: 33:44:40:ac:e5:4b:f1:f7:71:fc:36:eb:65:d0:ba: 51:85:51:d3:f7:ab:29:94:8c:9e:55:b6:bb:38:30: 9c:cd:eb:ee:03:d8:07:91:7c:ca:0e:5b:42:b7:9c: c7:02:e8:8e:c4:04:40:68:b8:78:4d:d2:bc:7f:f0: 99:6b:2b:5c:05:d2:cd:02:4d:72:68:c3:7f:ef:a0: bc:9b:92:fe:02:3c:05:8c:cf:4a:02:8c:0b:89:dc: fa:49:d1:e4:a8:8e:80:e3:40:a6:2f:5b:8d:9f:a6: 4f:d1:10:99:56:a2:32:fe:e3:f9:f0:61:46:98:32: 5d:b1:da:72:a1:58:65:b3:ae:5a:38:f4:c5:2f:10: 20:9d:d4:47:d3:9e:3e:e8:15:fe:fd:f0:2e:55:8c: f9:48:5a:ac:01:ad:0f:f9:ec:4e:f4:2c:5c:cf:64: 0d:1f:81:da:4f:5b:3b:64:f4:c7:52:6e:4e:e7:4e: 6e:6b:48:a1:ca:62:fd:52:6a:04:c3:42:b7:71:cd: f8:ac:39:96:72:68:78:38:b1:42:62:aa:83:84:c7: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:5C:A7:D5:12:21:E4:A8:9B:D4:8E:4A:23:B3:40:8B:3D:CF:AF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 161.199.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3b:05:d4:55:6b:70:d9:15:93:23:29:ae:8a:b7:d1:ca:b0: 3a:3c:70:12:7c:93:85:0f:94:9a:c4:a7:14:a2:dd:59:c0:fa: 1e:0f:27:25:29:68:27:02:90:31:20:b7:61:53:44:20:b3:4f: 42:8f:64:b3:0f:ea:4b:5f:d3:b4:86:ef:95:90:cf:de:ca:18: 78:73:6b:e2:ae:41:3b:72:65:cd:5d:92:97:8c:45:fd:cf:bc: 1a:50:1c:a3:9f:42:85:5f:65:01:38:2e:cd:08:a4:f1:fa:36: a2:48:64:05:0e:d7:51:81:0f:5b:5d:68:6b:12:43:cf:28:7a: ab:64:28:0c:95:fa:c6:44:f5:a5:a4:fd:b6:64:f3:f4:bf:d1: 28:bd:64:cb:fa:dc:28:48:23:d1:0c:ad:ca:10:1e:cc:94:2f: 29:f3:93:da:77:4c:f0:85:58:bf:ad:70:a8:85:10:f5:77:3a: 4b:fb:77:77:34:32:1c:ea:0a:4a:2a:67:68:a3:52:60:47:35: d2:5f:04:eb:e8:86:3c:e8:b6:15:db:1c:f6:94:fe:a2:67:92: 0f:d0:04:ca:82:e2:4d:d2:b5:b6:60:a4:4c:07:a4:27:64:4f: a0:7b:f9:16:33:5e:b6:56:a1:e9:f4:f3:6a:8e:72:82:86:78: b7:2a:fb:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqM3j//3Sp//IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk YjllNzk3MzItZjcyYi00ZTM4LTljMzMtYTAyZWQzYjkwY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+QwIr3923rjs0Vqb2+ZvUXl5Ygb7CsRW9X5 ME0l8MlPV/IkjHmlq1ZPDw8zRECs5Uvx93H8Nutl0LpRhVHT96splIyeVba7ODCc zevuA9gHkXzKDltCt5zHAuiOxARAaLh4TdK8f/CZaytcBdLNAk1yaMN/76C8m5L+ AjwFjM9KAowLidz6SdHkqI6A40CmL1uNn6ZP0RCZVqIy/uP58GFGmDJdsdpyoVhl s65aOPTFLxAgndRH054+6BX+/fAuVYz5SFqsAa0P+exO9Cxcz2QNH4HaT1s7ZPTH Um5O505ua0ihymL9UmoEw0K3cc34rDmWcmh4OLFCYqqDhMe6GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpcp9USIeSom9SOSiOzQIs9z6+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvYTA4ZjI3MzktYmM1Ny0z ZjAxLThkZTYtMjVlODUwNjQxMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCocd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA7BdRVa3DZFZMjKa6Kt9HKsDo8cBJ8k4UPlJrEpxSi3VnA+h4PJyUp aCcCkDEgt2FTRCCzT0KPZLMP6ktf07SG75WQz97KGHhza+KuQTtyZc1dkpeMRf3P vBpQHKOfQoVfZQE4Ls0IpPH6NqJIZAUO11GBD1tdaGsSQ88oeqtkKAyV+sZE9aWk /bZk8/S/0Si9ZMv63ChII9EMrcoQHsyULynzk9p3TPCFWL+tcKiFEPV3Okv7d3c0 MhzqCkoqZ2ijUmBHNdJfBOvohjzothXbHPaU/qJnkg/QBMqC4k3StbZgpEwHpCdk T6B7+RYzXrZWoen082qOcoKGeLcq+78= -----END CERTIFICATE-----Generated at Sun Jun 8 18:30:28 2025 by rpki-client