$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/f41a9853-e483-3c30-a3de-9689461adaf4.roa File: f41a9853-e483-3c30-a3de-9689461adaf4.roa (raw, json) Hash identifier: 20Gmkr7BqCYkX1hXn6EqRLMMqiw4vHEjajBqe1DY8MA= Subject key identifier: D2:AD:D6:95:DD:4B:C3:F5:80:C4:8F:23:F8:CB:9C:69:F2:2A:CA:B4 Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F43285849067C07D19FB27580B3A99E80 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/f41a9853-e483-3c30-a3de-9689461adaf4.roa Signing time: Thu 27 Feb 2025 20:38:35 +0000 ROA not before: Thu 27 Feb 2025 20:38:35 +0000 ROA not after: Wed 28 May 2025 19:38:35 +0000 asID: 16823 IP address blocks: 161.115.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:7c:07:d1:9f:b2:75:80:b3:a9:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Feb 27 20:38:35 2025 GMT Not After : May 28 19:38:35 2025 GMT Subject: CN=413fb460-547e-42b7-9017-08864969f159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:f6:8f:fe:55:ed:ef:e9:1c:bb:78:95:30: 53:e1:fc:45:c1:b9:52:1d:32:49:2e:d2:80:09:06: fd:11:f9:50:01:d9:46:7c:39:39:cd:87:3f:3c:b1: ab:36:56:bc:8a:fe:e6:0f:c0:f4:79:28:aa:9e:f9: da:f9:e8:66:d1:af:cc:1c:8e:6c:f4:33:3f:15:60: c8:bc:78:9d:6a:05:e0:9a:5b:0f:48:d2:9f:61:30: f2:e7:c6:f3:96:61:f7:00:8a:3c:a4:4c:19:4e:a5: 24:cf:7f:68:2e:85:5b:f3:9d:a5:91:90:4a:d2:33: 2f:db:c1:42:5e:8b:59:19:be:a0:ff:da:fd:9e:ca: 29:f6:e9:bb:50:bc:ea:21:1c:2b:05:77:af:a7:bf: 63:45:97:fa:a5:2d:27:6d:fa:12:ac:5e:31:82:7a: f0:5d:7a:89:c9:a6:d8:ae:d7:12:26:9b:a7:54:9e: 5d:1d:8e:03:7b:60:03:c9:a0:d6:96:a5:a6:9a:4f: a0:e8:79:73:88:c3:fc:35:bd:90:59:24:d4:53:d5: 90:c6:a8:73:1b:61:d9:b2:40:7b:58:9e:85:d8:64: 2d:b4:ca:b0:5d:8d:2f:7c:4f:0c:4c:76:35:d2:f7: df:c3:d6:bc:3d:5b:08:bd:63:b7:d2:c7:c9:aa:14: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AD:D6:95:DD:4B:C3:F5:80:C4:8F:23:F8:CB:9C:69:F2:2A:CA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/f41a9853-e483-3c30-a3de-9689461adaf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 161.115.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2a:8d:06:ba:46:87:31:a9:68:dd:40:cd:0f:8c:09:ca:c7: d4:8e:b2:ce:ec:2e:9e:6d:67:26:3a:8c:ee:3e:3b:c1:18:bb: 80:75:38:5e:58:54:09:9a:ba:f8:18:8d:35:4c:3f:b9:b1:86: 13:05:27:2d:e0:c4:b0:da:fd:de:1e:e6:a0:a7:cb:c6:fa:84: 05:d7:b3:4c:ad:78:5c:88:49:08:0b:d4:55:dd:e4:9a:6c:22: c0:d2:b9:84:82:cc:70:b0:1b:c2:be:da:58:55:e6:62:3a:6e: 4b:de:33:2c:35:12:54:f0:2d:ce:50:7e:80:79:f3:96:69:e3: b8:2c:68:23:4d:5a:62:07:3f:f9:5c:e5:c5:b0:a5:41:04:e2: 57:4a:99:54:c0:29:fc:14:4a:fc:d1:75:56:d6:e5:8e:8f:70: ce:2d:e0:58:3b:86:df:fe:76:74:81:eb:9d:60:1c:be:13:35: 2b:61:5b:e8:c0:70:95:7f:3a:54:e7:03:19:b1:a1:ce:be:8d: 46:c0:1f:50:69:68:8e:1a:ec:60:d3:8a:31:5a:39:01:35:17: 0a:25:cb:d7:44:9a:dc:f8:29:f1:4d:55:d9:86:70:d5:0c:39: 5b:ff:fe:94:ed:72:24:03:7a:86:39:d0:85:8a:d6:cf:c4:82: bd:53:8d:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGfAfRn7J1gLOpnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI1MDIyNzIwMzgzNVoXDTI1MDUyODE5MzgzNVowLzEtMCsGA1UEAxMk NDEzZmI0NjAtNTQ3ZS00MmI3LTkwMTctMDg4NjQ5NjlmMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEf2j/5V7e/pHLt4lTBT4fxFwblSHTJJLtKA CQb9EflQAdlGfDk5zYc/PLGrNla8iv7mD8D0eSiqnvna+ehm0a/MHI5s9DM/FWDI vHidagXgmlsPSNKfYTDy58bzlmH3AIo8pEwZTqUkz39oLoVb852lkZBK0jMv28FC XotZGb6g/9r9nsop9um7ULzqIRwrBXevp79jRZf6pS0nbfoSrF4xgnrwXXqJyabY rtcSJpunVJ5dHY4De2ADyaDWlqWmmk+g6HlziMP8Nb2QWSTUU9WQxqhzG2HZskB7 WJ6F2GQttMqwXY0vfE8MTHY10vffw9a8PVsIvWO30sfJqhTepwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKt1pXdS8P1gMSPI/jLnGnyKsq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvZjQxYTk4NTMtZTQ4My0z YzMwLWEzZGUtOTY4OTQ2MWFkYWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoXMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUqjQa6RocxqWjdQM0PjAnKx9SOss7sLp5tZyY6jO4+O8EYu4B1OF5Y VAmauvgYjTVMP7mxhhMFJy3gxLDa/d4e5qCny8b6hAXXs0yteFyISQgL1FXd5Jps IsDSuYSCzHCwG8K+2lhV5mI6bkveMyw1ElTwLc5QfoB585Zp47gsaCNNWmIHP/lc 5cWwpUEE4ldKmVTAKfwUSvzRdVbW5Y6PcM4t4Fg7ht/+dnSB651gHL4TNSthW+jA cJV/OlTnAxmxoc6+jUbAH1BpaI4a7GDTijFaOQE1Fwoly9dEmtz4KfFNVdmGcNUM OVv//pTtciQDeoY50IWK1s/Egr1TjdE= -----END CERTIFICATE-----Generated at Sat Apr 12 15:32:02 2025 by rpki-client