$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa File: 132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json) Hash identifier: f+dnQZqAsqy1dPMD3MO/SK9QBK4fdqJi5YpM5FPKJB0= Subject key identifier: 47:E8:1F:78:29:F1:D3:BB:AF:0D:D3:5E:A0:6D:C3:6E:89:D5:A3:FA Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285848C6E62DFFCDC7932B83BA1F00 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 16433 IP address blocks: 161.38.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:2d:ff:cd:c7:93:2b:83:ba:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=376ff10e-cea8-4688-b51a-55f5e015f99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:64:08:12:d2:c9:97:26:5c:ad:2c:85:17: 74:d3:1b:5d:bc:79:06:36:97:fb:0c:80:c4:ae:4b: de:c8:d2:3c:a4:21:af:a9:ae:96:7a:0a:e5:74:0e: 50:b0:59:3a:6f:ac:b7:ac:15:5b:ec:0f:64:c3:3e: c9:9f:17:7a:44:e5:49:13:96:23:1e:12:02:68:62: f9:9b:88:49:35:10:c9:e2:70:58:0a:b6:c8:49:02: 09:93:de:91:01:ab:4a:05:aa:c1:70:6c:90:ca:a4: 7d:2f:28:0d:53:10:02:20:30:cb:01:46:06:43:14: 87:77:05:87:26:81:7c:e3:89:72:18:75:95:23:b1: 95:e8:cc:63:3d:c9:24:d5:63:e3:00:8e:96:01:58: 38:3f:33:40:a6:67:52:cb:83:63:14:91:83:fd:c2: 24:98:47:ed:78:42:e5:fb:75:9f:69:88:44:47:5c: a8:88:c5:1c:6f:da:f8:7e:e9:85:71:c4:d2:02:78: 2f:99:ec:83:c4:18:5d:bf:f6:22:f0:03:33:69:e7: b9:6d:ab:35:26:ec:d0:0d:b8:d6:a7:7e:d0:7f:d6: 8a:ff:43:61:10:fa:47:98:ec:ca:c3:f5:34:fe:b5: 2f:1e:54:10:37:6c:f4:f4:3d:21:23:63:88:18:d0: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E8:1F:78:29:F1:D3:BB:AF:0D:D3:5E:A0:6D:C3:6E:89:D5:A3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 161.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7d:24:df:df:e5:e8:7e:d6:a7:c0:fc:42:00:c1:10:84:5a: 08:0e:81:7a:df:30:2b:0c:87:ad:ae:ba:13:41:3c:e9:ae:92: 87:fc:da:84:11:4d:4e:f2:6f:1a:ec:cd:c0:8c:45:20:37:01: c1:e3:32:70:f9:77:37:16:87:2e:10:dc:42:6e:b6:3e:15:ba: e8:05:37:4b:8a:f4:74:7f:6c:1d:fb:2d:8f:57:8d:a9:6b:70: 84:a1:d2:bd:07:22:90:80:a5:75:12:4c:94:8a:89:d0:7b:50: db:cb:39:9b:cf:1d:c3:0f:f6:6c:80:db:0f:e8:60:be:44:b7: 14:2d:f6:da:b7:d2:46:43:54:27:db:59:10:67:7f:bc:43:90: 7e:5f:91:14:41:c1:86:50:4e:68:fb:48:7c:74:fc:1d:b8:ae: 2b:5a:67:17:6d:46:25:e7:f1:5b:82:bf:57:c4:b6:d5:fa:09: 3d:ac:a1:38:ab:62:58:de:27:03:97:a7:bd:90:35:c5:ce:f7: df:75:c5:1e:3b:94:4a:55:f7:41:bd:67:48:56:9e:07:8f:e3: d3:a2:3c:5e:80:3a:7a:61:90:90:5f:d7:f7:4e:12:75:4a:b6: c2:90:16:3c:9a:9f:4d:b3:3a:57:dd:33:22:8e:fb:03:34:6d: 9b:64:81:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5i3/zceTK4O6HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk Mzc2ZmYxMGUtY2VhOC00Njg4LWI1MWEtNTVmNWUwMTVmOTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBpkCBLSyZcmXK0shRd00xtdvHkGNpf7DIDE rkveyNI8pCGvqa6WegrldA5QsFk6b6y3rBVb7A9kwz7Jnxd6ROVJE5YjHhICaGL5 m4hJNRDJ4nBYCrbISQIJk96RAatKBarBcGyQyqR9LygNUxACIDDLAUYGQxSHdwWH JoF844lyGHWVI7GV6MxjPckk1WPjAI6WAVg4PzNApmdSy4NjFJGD/cIkmEfteELl +3WfaYhER1yoiMUcb9r4fumFccTSAngvmeyDxBhdv/Yi8AMzaee5bas1JuzQDbjW p37Qf9aK/0NhEPpHmOzKw/U0/rUvHlQQN2z09D0hI2OIGNDKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfoH3gp8dO7rw3TXqBtw26J1aP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMTMyYmQzNjEtMGNkZS0z ZmRlLThiNmItNjRiM2JjZGY1MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl9JN/f5eh+1qfA/EIAwRCEWggOgXrfMCsMh62uuhNBPOmukof82oQR TU7ybxrszcCMRSA3AcHjMnD5dzcWhy4Q3EJutj4VuugFN0uK9HR/bB37LY9Xjalr cISh0r0HIpCApXUSTJSKidB7UNvLOZvPHcMP9myA2w/oYL5EtxQt9tq30kZDVCfb WRBnf7xDkH5fkRRBwYZQTmj7SHx0/B24ritaZxdtRiXn8VuCv1fEttX6CT2soTir YljeJwOXp72QNcXO9991xR47lEpV90G9Z0hWngeP49OiPF6AOnphkJBf1/dOEnVK tsKQFjyan02zOlfdMyKO+wM0bZtkgb4= -----END CERTIFICATE-----Generated at Fri Apr 11 21:24:24 2025 by rpki-client