$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa File: 576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa (raw, json) Hash identifier: ToxuENA47NmT+n6mGgSKTNtix6CrwcOfKsKL43P9EFc= Subject key identifier: 36:49:F6:46:74:C8:8B:14:F3:BC:51:FC:08:CF:61:16:22:2A:C1:E9 Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F432858491246AEBF41D2B3EBEFB24980 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 8075 IP address blocks: 161.221.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ae:bf:41:d2:b3:eb:ef:b2:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=023748c6-c959-4cb0-9641-66e3191f7c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:91:a9:7e:42:73:a5:66:63:bf:f6:89:53: 65:e9:48:3d:86:84:9d:74:76:18:db:f1:13:2b:ed: 18:23:88:25:97:30:92:4f:da:8a:c5:10:89:72:96: 49:35:c1:0e:5b:ae:a0:bf:da:99:89:20:b7:67:13: c0:3f:f0:0e:8f:f0:2d:19:69:f0:8b:53:69:a2:41: 46:5b:1a:fa:a7:6d:10:11:fd:49:62:52:0f:18:e1: 9e:14:5b:d9:ad:55:7a:1b:e1:5e:df:9e:51:e8:eb: 7a:9a:ce:82:f2:8d:54:55:45:50:63:d0:61:b2:99: 9e:fb:b8:4d:a9:a5:2f:2c:87:9e:47:8a:4b:7a:ba: 8b:da:04:58:ee:de:9a:c7:5a:c6:6a:6f:31:e1:9d: db:5d:d8:cd:6e:13:73:89:4c:44:bf:04:a8:85:3a: db:ce:9e:05:76:47:6a:f5:68:e4:cd:07:f2:09:2e: f3:ad:76:c3:d3:73:95:11:ab:f9:21:b6:1b:4e:46: 7e:99:eb:2e:b8:4c:c9:3e:94:10:07:1f:aa:a0:71: b9:45:3a:83:bb:ce:af:4f:55:fd:f0:67:ad:dd:5f: 4d:60:2f:c3:14:46:01:95:02:3a:08:ea:85:43:cb: 95:e1:50:60:53:3a:f0:78:ac:b5:ba:aa:72:f8:70: df:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:49:F6:46:74:C8:8B:14:F3:BC:51:FC:08:CF:61:16:22:2A:C1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3a:5e:8a:4b:03:0c:40:6e:17:1a:92:44:9b:d6:16:6b:1c: d0:49:3c:b7:3b:e1:20:be:f4:13:b2:8e:07:bb:a6:50:e1:a1: 72:c8:b9:6d:e9:92:08:e8:31:9b:8b:02:64:75:d6:ee:ac:0c: d2:2c:04:aa:4e:3f:c0:bb:e2:75:b1:ec:22:c9:35:a1:0d:3c: 7d:79:8a:35:2e:ce:3f:7c:86:b6:b1:a2:57:51:fe:44:c8:db: 02:52:15:e4:d0:ae:10:17:c1:e9:a9:04:e7:7a:3a:9c:e9:fa: b5:a7:35:4f:b3:85:03:13:54:fa:03:c7:06:93:9a:b7:9b:7f: 3c:6f:41:57:13:e4:36:23:ec:a2:78:65:d0:fb:79:fc:a8:b0: 3d:62:7b:10:85:47:a7:2a:b5:f7:d8:e9:ce:9e:99:77:ab:1e: 6f:c0:d8:f1:b9:25:ee:6e:1b:f9:7e:4b:5a:78:a8:1e:3b:8e: 70:49:26:e6:57:e7:31:ea:64:b3:66:37:13:97:10:87:85:e7: 6c:2f:fd:80:9a:d4:08:0b:48:01:cb:87:05:1d:a7:9c:40:83: 50:fe:21:bb:0f:31:a5:10:97:b4:53:70:a9:05:06:72:8c:bc: fa:e2:0d:cf:6c:a9:41:55:88:20:00:d6:4e:7b:29:ee:90:e4: 1d:bf:ad:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRq6/QdKz6++ySYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MDIzNzQ4YzYtYzk1OS00Y2IwLTk2NDEtNjZlMzE5MWY3YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPiRqX5Cc6VmY7/2iVNl6Ug9hoSddHYY2/ET K+0YI4gllzCST9qKxRCJcpZJNcEOW66gv9qZiSC3ZxPAP/AOj/AtGWnwi1NpokFG Wxr6p20QEf1JYlIPGOGeFFvZrVV6G+Fe355R6Ot6ms6C8o1UVUVQY9Bhspme+7hN qaUvLIeeR4pLerqL2gRY7t6ax1rGam8x4Z3bXdjNbhNziUxEvwSohTrbzp4Fdkdq 9WjkzQfyCS7zrXbD03OVEav5IbYbTkZ+mesuuEzJPpQQBx+qoHG5RTqDu86vT1X9 8Get3V9NYC/DFEYBlQI6COqFQ8uV4VBgUzrweKy1uqpy+HDffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZJ9kZ0yIsU87xR/AjPYRYiKsHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvNTc2ZWJmZWEtZjdmMi0z NmYyLWIwYzgtMWQ3Mzg5MDc2ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI6XopLAwxAbhcakkSb1hZrHNBJPLc74SC+9BOyjge7plDhoXLIuW3p kgjoMZuLAmR11u6sDNIsBKpOP8C74nWx7CLJNaENPH15ijUuzj98hraxoldR/kTI 2wJSFeTQrhAXwempBOd6Opzp+rWnNU+zhQMTVPoDxwaTmrebfzxvQVcT5DYj7KJ4 ZdD7efyosD1iexCFR6cqtffY6c6emXerHm/A2PG5Je5uG/l+S1p4qB47jnBJJuZX 5zHqZLNmNxOXEIeF52wv/YCa1AgLSAHLhwUdp5xAg1D+IbsPMaUQl7RTcKkFBnKM vPriDc9sqUFViCAA1k57Ke6Q5B2/rZE= -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:32 2025 by rpki-client