$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ffb6b9d-c604-3543-b317-9d4cf699e6f9.roa File: 8ffb6b9d-c604-3543-b317-9d4cf699e6f9.roa (raw, json) Hash identifier: FpA42eNjKTcPKB3sv+sTvO7xBG/zXOtc9rcw33TCT5s= Subject key identifier: 64:29:74:03:AD:26:84:19:10:EB:00:3F:0C:E3:D7:3E:CB:FD:70:20 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849403949363AD66E2D4A79B550 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ffb6b9d-c604-3543-b317-9d4cf699e6f9.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 852 IP address blocks: 161.184.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:49:36:3a:d6:6e:2d:4a:79:b5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=a1e416aa-a83c-449d-9597-6221dacc2bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:c4:a0:cd:20:0d:f0:d8:fe:e8:71:03:cc: c3:e7:2a:47:a7:22:b7:93:d7:3f:3c:bd:c6:bf:12: d0:d4:1e:b2:e3:35:85:d2:ae:a0:87:57:da:3b:42: 47:1e:51:cf:f9:cc:ac:e4:be:9f:73:7f:c8:6a:49: c9:7c:18:41:36:86:ca:f4:f9:ed:82:b1:4e:b0:53: 24:0a:7b:95:0c:d6:05:1a:aa:96:52:3f:e2:36:87: 36:7e:95:32:cc:4f:e0:72:08:42:50:e6:7a:bb:89: ba:8f:4d:94:02:05:5b:05:12:49:bf:d8:b6:79:0b: 83:18:76:8d:7e:4f:1a:1f:61:78:65:4c:ff:f1:bb: 48:02:0e:9f:73:48:9c:88:25:18:cf:17:52:05:89: dc:d0:83:87:f8:79:80:a0:8e:30:10:1b:48:92:1c: 3e:b8:13:df:17:b7:58:08:03:80:41:24:52:ec:59: 82:74:51:9d:b8:b1:1a:94:a0:6c:76:a2:ba:f3:90: 33:4d:b7:67:a8:c5:50:09:ca:5d:88:da:87:e1:a7: 5d:81:79:04:8f:bb:ce:32:44:b5:72:87:08:e5:21: 2b:76:63:a2:83:c5:a7:45:4d:d4:85:8c:92:4e:32: 2f:a4:bb:17:b6:77:61:e0:bd:1d:d1:59:9b:a4:c6: a1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:29:74:03:AD:26:84:19:10:EB:00:3F:0C:E3:D7:3E:CB:FD:70:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ffb6b9d-c604-3543-b317-9d4cf699e6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 161.184.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption f4:fc:00:2a:e2:6e:73:cd:cb:61:4f:d8:f6:d6:37:a8:b6:74: 8e:26:db:7c:16:7c:be:84:da:f3:21:2d:27:14:43:de:f7:ee: 22:0b:3c:b2:26:00:98:0b:fc:34:ab:5b:15:62:a3:fd:03:a5: 30:91:8b:20:55:d4:a2:2a:e8:0b:4b:c6:63:af:65:6d:65:09: 35:22:c1:da:d9:30:5f:31:f7:cd:43:f8:39:41:63:aa:8f:a2: 99:59:3d:ba:69:47:f7:0e:e7:4d:2f:8f:84:0a:e9:db:1c:f4: e0:4a:51:ab:a1:73:a9:73:3a:1e:15:72:5e:d3:11:2d:5a:e1: ab:16:a3:ff:19:1d:f5:5f:31:df:fc:82:f1:c7:57:45:fd:fe: 52:8c:1b:be:c5:f8:a7:ce:51:7a:48:66:01:59:fd:5d:18:6c: 48:3f:db:7d:39:19:ee:11:3a:99:cf:53:27:d7:9f:0a:f2:dc: fe:b4:ee:a9:3e:c7:bb:fb:01:70:10:19:6e:91:7b:f2:82:2e: d5:6c:fb:68:fd:f0:b1:8e:0c:21:82:06:3f:a5:94:c4:01:91: cb:c8:8f:4e:2c:9f:0a:0e:b8:45:77:94:f4:b0:02:0b:f7:f1: 26:f6:fb:da:b4:a9:2b:4b:08:c6:f4:fb:f8:00:0d:8b:69:4d: 23:78:d1:22 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElAOUk2OtZuLUp5tVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YTFlNDE2YWEtYTgzYy00NDlkLTk1OTctNjIyMWRhY2MyYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4LEoM0gDfDY/uhxA8zD5ypHpyK3k9c/PL3G vxLQ1B6y4zWF0q6gh1faO0JHHlHP+cys5L6fc3/IaknJfBhBNobK9PntgrFOsFMk CnuVDNYFGqqWUj/iNoc2fpUyzE/gcghCUOZ6u4m6j02UAgVbBRJJv9i2eQuDGHaN fk8aH2F4ZUz/8btIAg6fc0iciCUYzxdSBYnc0IOH+HmAoI4wEBtIkhw+uBPfF7dY CAOAQSRS7FmCdFGduLEalKBsdqK685AzTbdnqMVQCcpdiNqH4addgXkEj7vOMkS1 cocI5SErdmOig8WnRU3UhYySTjIvpLsXtndh4L0d0VmbpMahlwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGQpdAOtJoQZEOsAPwzj1z7L/XAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGZmYjZiOWQtYzYwNC0z NTQzLWIzMTctOWQ0Y2Y2OTllNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAobgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA9PwAKuJuc83LYU/Y9tY3qLZ0jibbfBZ8voTa8yEtJxRD3vfuIgs8siYA mAv8NKtbFWKj/QOlMJGLIFXUoiroC0vGY69lbWUJNSLB2tkwXzH3zUP4OUFjqo+i mVk9umlH9w7nTS+PhArp2xz04EpRq6FzqXM6HhVyXtMRLVrhqxaj/xkd9V8x3/yC 8cdXRf3+UowbvsX4p85RekhmAVn9XRhsSD/bfTkZ7hE6mc9TJ9efCvLc/rTuqT7H u/sBcBAZbpF78oIu1Wz7aP3wsY4MIYIGP6WUxAGRy8iPTiyfCg64RXeU9LACC/fx Jvb72rSpK0sIxvT7+AANi2lNI3jRIg== -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:06 2025 by rpki-client