$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa File: b44b5711-0436-3c6d-afd4-086e370fe33b.roa (raw, json) Hash identifier: M26WFFBdRdHWWSehVyd2edI7RI+zqjTwnQRP0nIsl2A= Subject key identifier: D2:B7:6F:8D:54:D0:1E:32:BD:25:FF:8F:5E:A6:6C:D5:D8:EA:CE:34 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584900214E9FC73E5B54C675F600 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 36445 IP address blocks: 161.38.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:4e:9f:c7:3e:5b:54:c6:75:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=f52bb4c2-eb5d-4f77-921a-ead227f5dd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:98:7a:60:2e:dd:b3:99:3d:8f:ac:bf:bc:dd: bc:1d:32:3d:12:85:ca:1b:30:86:d0:48:03:1e:39: d6:e8:39:cf:31:e5:20:38:ac:f4:0f:3b:e3:74:5b: fb:20:c1:48:e8:75:d0:27:da:e5:76:c7:d3:ac:61: 2a:20:b3:9a:79:bc:f0:d3:a3:8b:e2:5a:de:e9:57: 21:f3:83:28:be:c5:e0:12:1c:65:27:a6:be:a7:9b: 33:57:da:3f:a3:29:e9:2a:ef:d8:bf:03:b1:46:f0: 33:0c:8b:b6:c3:90:3e:7c:27:29:c8:7f:c5:b9:d4: 55:c8:19:55:51:cb:f7:18:9e:e8:71:43:98:36:a9: b1:39:67:4d:2b:1e:b5:24:70:8a:81:c9:da:75:3a: d6:6e:26:8d:a6:b9:87:93:96:db:25:d1:8a:d9:89: 61:d8:2c:bf:90:78:f1:56:31:59:98:07:9f:b2:43: ba:1f:b9:43:46:0e:39:18:e4:fe:64:06:56:16:e7: 29:f1:02:3a:a3:19:e5:54:fb:7e:74:ed:67:90:98: 22:87:a0:5e:83:b2:eb:7d:bd:ee:b8:76:0b:e1:9c: 5e:fa:6d:f5:41:5b:c5:7e:8e:01:e3:9c:e9:02:13: 92:08:99:31:d8:30:b5:59:f5:14:3e:47:0f:79:75: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B7:6F:8D:54:D0:1E:32:BD:25:FF:8F:5E:A6:6C:D5:D8:EA:CE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 161.38.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:74:c0:37:55:ee:8e:b0:c6:e2:87:f4:e2:29:47:7c:49:f4: 41:a3:37:0e:91:eb:06:6a:0d:9f:b3:d3:de:77:b8:23:f4:66: 4c:ea:3f:d4:b8:60:0b:ae:e3:1b:3d:62:61:a8:45:68:1f:8a: 72:80:c7:e3:5a:62:ad:ba:83:83:dc:42:b5:14:50:79:9b:3a: 01:0c:cf:7c:a3:ba:f1:c2:59:fc:78:9d:dd:f9:89:41:24:5d: 6a:db:b2:be:d4:be:92:26:49:9a:2e:42:d5:cc:e2:83:26:93: 04:0a:b6:3e:f5:cf:d9:d0:09:86:ea:6b:20:75:8d:2d:ed:fd: a1:df:b5:a0:ab:dd:6c:54:4a:d8:6b:2c:54:5e:13:75:71:e3: 21:02:f3:9a:58:0e:b0:9b:20:66:14:ed:0b:14:46:c8:b4:24: ab:00:c3:07:2d:5c:dd:80:5c:ce:e0:f6:95:42:85:27:10:8b: 0e:7a:38:23:96:69:d2:e9:e7:6f:cd:66:1d:9e:80:1b:0e:e7: 7e:16:ed:2d:0b:2a:3b:47:bf:5f:a7:1c:96:70:b2:b4:f7:69: da:4b:ad:53:6f:55:b0:42:87:3c:ac:fa:b2:e8:ef:13:9c:9e: 9e:7e:4d:78:c3:7c:09:a8:c8:79:eb:16:a3:9e:cf:bd:61:55: 96:67:41:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIU6fxz5bVMZ19gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZjUyYmI0YzItZWI1ZC00Zjc3LTkyMWEtZWFkMjI3ZjVkZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgph6YC7ds5k9j6y/vN28HTI9EoXKGzCG0EgD HjnW6DnPMeUgOKz0DzvjdFv7IMFI6HXQJ9rldsfTrGEqILOaebzw06OL4lre6Vch 84MovsXgEhxlJ6a+p5szV9o/oynpKu/YvwOxRvAzDIu2w5A+fCcpyH/FudRVyBlV Ucv3GJ7ocUOYNqmxOWdNKx61JHCKgcnadTrWbiaNprmHk5bbJdGK2Ylh2Cy/kHjx VjFZmAefskO6H7lDRg45GOT+ZAZWFucp8QI6oxnlVPt+dO1nkJgih6Beg7Lrfb3u uHYL4Zxe+m31QVvFfo4B45zpAhOSCJkx2DC1WfUUPkcPeXXWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK3b41U0B4yvSX/j16mbNXY6s40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvYjQ0YjU3MTEtMDQzNi0z YzZkLWFmZDQtMDg2ZTM3MGZlMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE10wDdV7o6wxuKH9OIpR3xJ9EGjNw6R6wZqDZ+z0953uCP0ZkzqP9S4 YAuu4xs9YmGoRWgfinKAx+NaYq26g4PcQrUUUHmbOgEMz3yjuvHCWfx4nd35iUEk XWrbsr7UvpImSZouQtXM4oMmkwQKtj71z9nQCYbqayB1jS3t/aHftaCr3WxUSthr LFReE3Vx4yEC85pYDrCbIGYU7QsURsi0JKsAwwctXN2AXM7g9pVChScQiw56OCOW adLp52/NZh2egBsO534W7S0LKjtHv1+nHJZwsrT3adpLrVNvVbBChzys+rLo7xOc np5+TXjDfAmoyHnrFqOez71hVZZnQXE= -----END CERTIFICATE-----Generated at Sun Apr 13 01:08:03 2025 by rpki-client