$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/662d86d5-6ecd-3226-8f59-ed473d2df54c.roa File: 662d86d5-6ecd-3226-8f59-ed473d2df54c.roa (raw, json) Hash identifier: zw0XjM4LC7n9cp/XfkaTvI+kUXdhIOTgABLIjaSTGQ0= Subject key identifier: B7:CA:49:B2:B6:C5:B0:AB:42:0D:EF:4A:50:AA:E0:D8:3B:12:CA:8A Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F43285849067C4E87718E504A31F6E9C0 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/662d86d5-6ecd-3226-8f59-ed473d2df54c.roa Signing time: Thu 27 Feb 2025 20:39:08 +0000 ROA not before: Thu 27 Feb 2025 20:39:08 +0000 ROA not after: Wed 28 May 2025 19:39:08 +0000 asID: 19905 IP address blocks: 161.115.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:7c:4e:87:71:8e:50:4a:31:f6:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Feb 27 20:39:08 2025 GMT Not After : May 28 19:39:08 2025 GMT Subject: CN=1994c4c3-e520-4c5c-90ba-b0cbaa58a6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:eb:47:fb:ff:61:5e:79:60:59:79:4c:84: d6:56:25:d4:57:57:36:14:b1:99:30:bf:24:28:56: 79:3b:a5:45:c0:18:2e:a9:b4:6d:2a:21:14:aa:c8: ce:e5:bb:ab:2f:78:f4:80:82:f6:a0:4c:fd:ee:38: 74:b2:de:74:83:71:ff:c3:f4:60:28:f2:29:8e:3e: a1:cd:1e:02:a5:3a:de:78:cc:5f:ab:ed:c9:3e:a5: 18:53:3e:b2:9d:32:05:11:2d:37:dd:3a:a7:b3:24: 45:77:cb:e9:cc:55:5f:6b:18:19:0a:a9:e8:8a:69: 1d:1b:67:a7:fd:7a:c6:79:76:2c:45:af:93:ec:6d: 5e:44:9f:70:1a:4e:40:7b:ec:89:7d:16:15:d2:3b: f0:2f:d8:fe:1f:37:b8:4d:02:9c:a5:3d:01:8e:af: ba:c3:8b:b8:96:00:05:41:7f:93:7d:77:a6:31:14: 76:75:31:a9:e6:c7:6b:f5:40:4a:90:23:1d:ae:1f: 5c:8e:b4:b8:de:d2:79:2e:32:c0:21:6b:8c:98:5f: 1f:b1:a1:01:cc:76:71:35:1c:5a:6d:ae:2f:99:9d: 65:8a:bc:4a:34:ee:ff:b7:8a:96:c4:78:5c:cf:12: 25:8d:b1:51:a3:e5:ba:0a:67:b5:81:14:97:18:82: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CA:49:B2:B6:C5:B0:AB:42:0D:EF:4A:50:AA:E0:D8:3B:12:CA:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/662d86d5-6ecd-3226-8f59-ed473d2df54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 161.115.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:06:10:3c:15:4f:f1:ca:15:c3:16:f5:bd:f9:bc:17:83:de: 14:3d:25:10:57:86:57:ef:1e:c1:e5:9d:ea:10:6b:30:08:e3: de:9a:77:c5:a7:eb:70:85:63:6e:7c:04:d1:36:89:61:cf:02: 2e:42:fb:a6:d9:d4:78:cd:3c:20:64:da:53:3d:26:57:00:8e: 93:85:0d:6f:32:52:dd:66:46:5f:3b:7f:34:67:c8:2e:71:dd: c4:c5:d1:d6:49:ae:c5:9d:d3:e3:25:bb:2b:9d:9e:55:01:10: 83:26:b7:43:4e:58:a5:59:81:16:d9:e0:a0:eb:9f:7b:2d:5e: 58:b5:8a:7d:2e:51:a2:75:20:b1:a1:33:0b:9b:a7:68:66:c9: 02:57:44:87:35:19:5e:b7:40:04:53:fa:87:f1:a7:82:d7:c6: 8f:6b:07:32:a8:ba:af:1e:7f:01:e9:e3:b9:ff:e9:50:64:5b: 10:c2:ec:a7:5a:99:a4:78:08:65:44:f2:48:89:94:48:fe:25: ec:c7:2a:85:d4:6f:72:2c:f4:ad:39:c8:cc:e3:34:5b:4f:82: 21:52:05:d9:cc:d1:7d:c9:ce:cf:e1:dd:0a:1e:41:42:84:13: 3b:2d:16:1b:62:91:5f:a5:b6:fd:f6:ee:6d:79:81:70:88:f5: bc:31:72:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGfE6HcY5QSjH26cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI1MDIyNzIwMzkwOFoXDTI1MDUyODE5MzkwOFowLzEtMCsGA1UEAxMk MTk5NGM0YzMtZTUyMC00YzVjLTkwYmEtYjBjYmFhNThhNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa/rR/v/YV55YFl5TITWViXUV1c2FLGZML8k KFZ5O6VFwBguqbRtKiEUqsjO5burL3j0gIL2oEz97jh0st50g3H/w/RgKPIpjj6h zR4CpTreeMxfq+3JPqUYUz6ynTIFES033TqnsyRFd8vpzFVfaxgZCqnoimkdG2en /XrGeXYsRa+T7G1eRJ9wGk5Ae+yJfRYV0jvwL9j+Hze4TQKcpT0Bjq+6w4u4lgAF QX+TfXemMRR2dTGp5sdr9UBKkCMdrh9cjrS43tJ5LjLAIWuMmF8fsaEBzHZxNRxa ba4vmZ1lirxKNO7/t4qWxHhczxIljbFRo+W6Cme1gRSXGILwxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfKSbK2xbCrQg3vSlCq4Ng7EsqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvNjYyZDg2ZDUtNmVjZC0z MjI2LThmNTktZWQ0NzNkMmRmNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoXMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQGEDwVT/HKFcMW9b35vBeD3hQ9JRBXhlfvHsHlneoQazAI496ad8Wn 63CFY258BNE2iWHPAi5C+6bZ1HjNPCBk2lM9JlcAjpOFDW8yUt1mRl87fzRnyC5x 3cTF0dZJrsWd0+MluyudnlUBEIMmt0NOWKVZgRbZ4KDrn3stXli1in0uUaJ1ILGh Mwubp2hmyQJXRIc1GV63QART+ofxp4LXxo9rBzKouq8efwHp47n/6VBkWxDC7Kda maR4CGVE8kiJlEj+JezHKoXUb3Is9K05yMzjNFtPgiFSBdnM0X3Jzs/h3QoeQUKE EzstFhtikV+ltv327m15gXCI9bwxcgI= -----END CERTIFICATE-----Generated at Sat Apr 12 15:33:36 2025 by rpki-client