$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa File: fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa (raw, json) Hash identifier: JvrVJluN7wYY4PY5Z7E8UMrsvPVHTrtpVidOjRoOCXY= Subject key identifier: 9F:EB:7D:54:EE:78:B6:34:DA:71:A3:98:8D:05:58:17:82:BA:AC:2C Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Certificate serial: 010D0C9F432858491ED6E597DDCD7A543FCA6E90 Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 31898 IP address blocks: 161.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e5:97:dd:cd:7a:54:3f:ca:6e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=d5a6117a-34b2-4d22-ac2f-207ad017160a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:a7:be:c4:b4:20:d4:d0:fb:99:97:ff:93: 25:ff:95:dc:91:ed:f4:59:70:34:a5:1d:ef:3e:b7: 88:aa:44:75:f6:02:af:f9:4a:5a:fa:7c:e0:4e:ef: b6:47:11:8e:44:68:6a:7f:a2:d6:71:af:22:ab:73: fe:53:6d:a4:0f:49:d3:fb:9f:f7:27:6a:c0:76:62: e0:e4:77:13:76:20:95:5c:72:f3:8e:a1:4c:4c:78: 5b:bc:01:cb:4d:f6:66:3f:4e:0c:fe:6f:f1:92:cc: 04:6e:41:82:b3:b5:89:01:0d:24:cf:8b:cf:4f:4f: 1b:b2:b3:5d:86:08:58:69:fb:8b:84:bf:0c:f3:df: 85:39:6b:32:f2:2a:eb:cc:74:91:dc:4a:89:ab:86: 6f:25:7f:e4:65:d8:48:51:d3:18:88:2d:80:e0:ce: 0a:cd:3a:7f:5c:06:89:97:b0:42:ec:30:ef:5a:63: b5:c3:fd:ac:e9:3b:9f:84:38:21:5f:c4:5e:82:13: 11:92:67:75:41:8f:0f:47:9e:2a:c1:39:14:59:96: 91:80:1c:0e:ab:b0:62:30:c1:59:55:44:36:4f:93: 3d:21:1c:e2:a2:d5:88:95:90:66:43:fe:0c:45:91: 50:15:21:b9:86:ab:f2:ae:ae:b6:ae:8e:94:68:cf: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EB:7D:54:EE:78:B6:34:DA:71:A3:98:8D:05:58:17:82:BA:AC:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl X509v3 Authority Key Identifier: keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer sbgp-ipAddrBlock: critical IPv4: 161.221.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:e3:70:ba:54:ac:42:d2:32:12:22:46:6d:b6:a2:d5:b4:51: 6a:6d:c7:80:e2:ea:c1:d5:69:b4:a6:db:b3:6e:5a:32:f5:9e: 38:e8:e6:c9:38:64:f3:2a:0b:04:ba:38:d0:82:d6:50:16:ff: cc:0a:52:ed:bb:cc:46:98:c8:6d:88:65:8f:a0:9b:10:97:03: 0e:ea:da:33:6d:5e:82:8b:9c:93:ba:78:77:e3:1c:61:d6:e8: 1d:3b:65:80:35:8b:03:ea:92:ec:b9:25:c9:0b:6b:3d:1e:85: 95:62:24:c1:99:d5:d5:cd:5e:47:8e:06:d1:91:db:ab:e5:b0: 1e:55:61:08:4b:5a:8c:a8:5c:1f:89:f5:f4:51:aa:3c:ba:a6: ef:13:35:dc:6c:57:2a:b9:cf:e6:b4:91:ee:ce:d1:47:cc:b3: 63:71:34:6c:c3:d5:cc:fd:1e:fa:03:33:62:cf:9f:b4:10:ce: 37:35:ec:94:18:83:85:a4:cf:dd:21:f4:a3:70:a0:1c:50:04: 85:5a:61:dd:2d:66:95:81:c8:7d:16:69:b8:7e:ac:e8:c6:1b: 3a:fe:69:52:95:7e:fc:02:3c:3d:eb:2e:95:94:52:af:21:7d: a1:f5:54:60:8e:20:72:01:ea:a0:b7:17:82:e9:08:48:64:3c: 98:8d:5f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uWX3c16VD/KbpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3 M2EwMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ZDVhNjExN2EtMzRiMi00ZDIyLWFjMmYtMjA3YWQwMTcxNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE2nvsS0INTQ+5mX/5Ml/5Xcke30WXA0pR3v PreIqkR19gKv+Upa+nzgTu+2RxGORGhqf6LWca8iq3P+U22kD0nT+5/3J2rAdmLg 5HcTdiCVXHLzjqFMTHhbvAHLTfZmP04M/m/xkswEbkGCs7WJAQ0kz4vPT08bsrNd hghYafuLhL8M89+FOWsy8irrzHSR3EqJq4ZvJX/kZdhIUdMYiC2A4M4KzTp/XAaJ l7BC7DDvWmO1w/2s6TufhDghX8ReghMRkmd1QY8PR54qwTkUWZaRgBwOq7BiMMFZ VUQ2T5M9IRziotWIlZBmQ/4MRZFQFSG5hqvyrq62ro6UaM8h4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/rfVTueLY02nGjmI0FWBeCuqwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvZmI5YWE2ZmItZGFkYi0z MmU2LWE2MmMtZmExNzE5Mjk0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5 NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2 NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnjcLpUrELSMhIiRm22otW0UWptx4Di6sHVabSm27NuWjL1njjo5sk4 ZPMqCwS6ONCC1lAW/8wKUu27zEaYyG2IZY+gmxCXAw7q2jNtXoKLnJO6eHfjHGHW 6B07ZYA1iwPqkuy5JckLaz0ehZViJMGZ1dXNXkeOBtGR26vlsB5VYQhLWoyoXB+J 9fRRqjy6pu8TNdxsVyq5z+a0ke7O0UfMs2NxNGzD1cz9HvoDM2LPn7QQzjc17JQY g4Wkz90h9KNwoBxQBIVaYd0tZpWByH0Wabh+rOjGGzr+aVKVfvwCPD3rLpWUUq8h faH1VGCOIHIB6qC3F4LpCEhkPJiNXwk= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:57 2025 by rpki-client