$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa File: 53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json) Hash identifier: PcMHoPWlz2unvXxm1IMkFkJ0k2hhEd6zaK1jQ15TXYw= Subject key identifier: B4:BF:A7:F9:5F:8D:26:C2:C0:42:FD:B4:39:BD:38:BF:51:22:76:97 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848F4F69381AE8139240913D0C0 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 25649 IP address blocks: 161.38.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:93:81:ae:81:39:24:09:13:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=5b83d7a1-7887-4193-bea1-77ae0536dff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1d:c3:3a:8e:fb:a7:e3:a2:89:7b:16:df:d3: ec:69:21:eb:82:8c:4c:14:68:f1:29:72:f8:0d:71: a1:ca:3e:a8:18:84:0d:f8:a1:a8:1f:87:df:38:9b: 99:82:fb:2b:25:c8:8d:9b:a0:b3:ab:f3:da:60:06: 28:ef:2a:c4:82:46:87:ad:e9:c5:19:cd:cb:51:97: c1:31:30:20:16:78:05:1c:03:47:1a:c4:0c:aa:e0: a2:6a:ae:d4:16:e8:f3:27:23:bb:af:f3:e7:84:65: 7e:5a:e8:64:70:7d:68:5d:fe:47:15:80:04:06:e3: 7b:d2:a0:ab:47:56:f1:ab:16:fa:3a:a0:59:99:e2: 1a:9b:3a:e3:cd:1a:06:e0:e2:b2:22:ce:a5:c4:0c: b1:ce:e6:7b:bc:95:51:fe:2f:b7:3b:a8:ae:c0:c8: 00:10:d8:2e:c8:c1:f2:cf:ba:d6:8b:b0:54:9a:c1: 05:5f:cd:ed:3c:86:a1:43:cb:76:96:cc:23:05:67: 64:0e:c0:38:f1:55:b3:6e:68:32:b0:f1:6e:4b:be: a8:38:5f:d9:bb:83:c9:34:5a:8e:3c:22:a0:5f:13: 15:67:90:e3:e2:d0:1c:80:58:7b:0d:01:6e:84:e9: e5:40:d7:3c:a9:54:2c:98:18:5b:a0:11:c2:8f:f0: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BF:A7:F9:5F:8D:26:C2:C0:42:FD:B4:39:BD:38:BF:51:22:76:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0c:ec:6d:4f:33:c5:cf:2d:27:50:90:b6:63:15:fc:27:4a: 76:9b:ef:69:2d:ee:80:aa:d0:9a:2a:62:38:e1:c0:7b:97:56: d4:33:63:bf:08:20:a0:6f:db:f1:84:8d:78:41:03:e2:ab:f2: 19:aa:72:a9:d7:f9:74:61:c8:69:71:a0:78:7e:14:3d:f2:fa: e0:f1:76:b4:27:22:48:b2:cb:6b:81:18:bd:45:86:10:73:88: 63:51:01:0c:01:a4:47:29:ec:89:02:82:32:fa:7a:26:e7:42: 18:cf:4b:a1:84:d2:bb:5b:9b:f8:45:dc:c5:ae:37:69:e6:5d: 3a:3a:0d:9e:bd:7d:cb:70:e3:c3:a0:3e:e1:27:53:e7:34:3c: f5:dd:69:f0:89:d4:c3:38:69:27:30:b1:f9:78:db:56:d3:67: c2:1b:f5:2c:61:cd:21:24:9d:11:bd:c3:7d:87:25:46:6d:44: 03:73:0d:26:6a:2f:7d:7c:88:e7:74:0b:35:91:ad:d6:35:6b: 1e:1c:a3:f2:84:a2:a7:ea:96:46:f2:a0:65:8b:38:ee:0d:f5: a5:ff:21:97:2f:c4:53:0b:f7:c4:d7:8a:60:58:60:a0:e5:0f: 52:9f:4e:cf:75:b1:be:bf:23:df:9c:c9:d7:0e:96:5f:03:54: ab:e6:ae:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pOBroE5JAkT0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NWI4M2Q3YTEtNzg4Ny00MTkzLWJlYTEtNzdhZTA1MzZkZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB3DOo77p+OiiXsW39PsaSHrgoxMFGjxKXL4 DXGhyj6oGIQN+KGoH4ffOJuZgvsrJciNm6Czq/PaYAYo7yrEgkaHrenFGc3LUZfB MTAgFngFHANHGsQMquCiaq7UFujzJyO7r/PnhGV+WuhkcH1oXf5HFYAEBuN70qCr R1bxqxb6OqBZmeIamzrjzRoG4OKyIs6lxAyxzuZ7vJVR/i+3O6iuwMgAENguyMHy z7rWi7BUmsEFX83tPIahQ8t2lswjBWdkDsA48VWzbmgysPFuS76oOF/Zu4PJNFqO PCKgXxMVZ5Dj4tAcgFh7DQFuhOnlQNc8qVQsmBhboBHCj/DnrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLS/p/lfjSbCwEL9tDm9OL9RInaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAM7G1PM8XPLSdQkLZjFfwnSnab72kt7oCq0JoqYjjhwHuXVtQzY78I IKBv2/GEjXhBA+Kr8hmqcqnX+XRhyGlxoHh+FD3y+uDxdrQnIkiyy2uBGL1FhhBz iGNRAQwBpEcp7IkCgjL6eibnQhjPS6GE0rtbm/hF3MWuN2nmXTo6DZ69fctw48Og PuEnU+c0PPXdafCJ1MM4aScwsfl421bTZ8Ib9SxhzSEknRG9w32HJUZtRANzDSZq L318iOd0CzWRrdY1ax4co/KEoqfqlkbyoGWLOO4N9aX/IZcvxFML98TXimBYYKDl D1KfTs91sb6/I9+cydcOll8DVKvmrtA= -----END CERTIFICATE-----Generated at Sat Apr 12 10:11:27 2025 by rpki-client