$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa File: 38d95139-c9aa-35c6-98f7-0599639ee4a3.roa (raw, json) Hash identifier: cgOHcPC07Pk8CF+rtKnoEW6pLyGO8VIame56YbeOvKY= Subject key identifier: F0:3F:2D:95:2D:11:9A:82:FF:49:BB:70:EB:C9:F9:7A:5B:71:C1:4D Certificate issuer: /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Certificate serial: 010D0C9F432858493BD88A541265D6B1CB41BB80 Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa Signing time: Tue 18 Mar 2025 23:22:49 +0000 ROA not before: Tue 18 Mar 2025 23:22:49 +0000 ROA not after: Mon 16 Jun 2025 23:22:49 +0000 asID: 14618 IP address blocks: 162.120.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:d8:8a:54:12:65:d6:b1:cb:41:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9 Validity Not Before: Mar 18 23:22:49 2025 GMT Not After : Jun 16 23:22:49 2025 GMT Subject: CN=31317c04-1f53-4617-b92e-e8f9caca3e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:f6:f5:85:32:96:1e:39:0c:7d:ac:6c:58: 83:8d:d3:42:78:dd:13:5f:17:85:1b:3a:ac:45:04: b4:3c:4a:b6:7f:dd:d2:d7:de:f8:05:5b:ca:cf:18: ca:5c:81:94:94:91:5c:24:fc:8c:ba:4c:46:bc:f3: 85:8d:79:71:75:b4:12:32:3a:bf:e6:86:4c:fa:6d: 6b:b7:69:ac:3b:c8:5e:1b:a3:51:9e:bd:f6:c5:55: 55:c6:95:0f:9d:de:8a:d4:49:b5:fc:5d:e7:62:3c: 51:d2:16:5d:82:29:4a:20:0d:3a:6f:e6:4e:83:c9: 91:af:11:0b:48:b6:7e:08:dd:09:a9:28:38:cf:8c: 37:33:79:f9:fe:c1:c6:c4:c5:d7:06:3e:36:41:ae: 59:4a:bd:38:02:b9:a2:6b:9b:9f:af:02:30:47:82: fe:98:22:21:b0:f0:18:79:66:03:d6:7b:05:bd:ac: 36:e2:4b:fa:e3:3f:77:80:eb:29:f0:fd:62:73:ad: 52:e8:b4:cb:a7:de:7b:a0:19:c3:ed:a0:a8:1b:69: b0:6d:9c:bb:d3:ac:82:ce:c0:fd:f4:5f:57:e3:e4: 92:47:6d:06:80:b9:fe:6e:8f:8c:b0:a2:18:54:2c: 48:a4:b0:20:75:16:a9:44:3f:24:22:52:45:74:ab: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3F:2D:95:2D:11:9A:82:FF:49:BB:70:EB:C9:F9:7A:5B:71:C1:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/38d95139-c9aa-35c6-98f7-0599639ee4a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl X509v3 Authority Key Identifier: keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer sbgp-ipAddrBlock: critical IPv4: 162.120.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ea:1b:4c:c4:65:67:4a:50:8c:48:76:f3:f5:9b:58:31:1e: b6:75:7b:1d:ac:41:fa:f5:76:45:f4:66:f7:41:b8:62:f5:ed: af:8f:f3:2f:78:11:32:21:42:e2:65:86:84:b1:a4:58:e0:be: 31:d6:3c:2d:8c:e4:30:4e:2a:a7:5b:5c:70:b0:36:0a:82:59: ad:b0:73:8e:18:96:e5:54:09:c7:3e:a0:10:80:bd:17:98:5e: 43:13:0b:de:7e:e2:60:ca:db:33:aa:ee:6c:7e:1c:16:c6:27: d9:d4:9a:f7:e7:41:ba:70:28:fc:e7:94:fb:68:a7:c8:e6:e6: d0:24:7b:75:8e:6b:ca:59:ea:c9:b4:62:13:0b:65:69:35:95: 12:f4:59:e2:53:e0:c7:10:fb:7d:6b:dc:94:2d:42:9d:4c:e1: 37:cd:07:35:f6:17:aa:b0:23:df:d6:8f:d8:75:d7:6f:6f:a5: d7:1d:3f:25:42:c9:4a:26:ae:7c:65:f7:f3:93:e0:aa:51:f5: 21:d8:49:09:e3:a4:53:74:6d:9a:10:a5:c9:71:6e:4e:c7:e6: 46:38:af:ba:5f:39:e3:48:56:c0:c8:41:10:60:3c:82:d6:b7: ae:1c:91:1e:e0:cc:66:a6:27:9b:2e:1d:18:b2:04:d0:80:a4: f6:19:ab:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk72IpUEmXWsctBu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlOTM2NzMtNWQxOS00ZmYyLTgyNTAtZjEwOTRmNGUx MmM5MB4XDTI1MDMxODIzMjI0OVoXDTI1MDYxNjIzMjI0OVowLzEtMCsGA1UEAxMk MzEzMTdjMDQtMWY1My00NjE3LWI5MmUtZThmOWNhY2EzZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudf29YUylh45DH2sbFiDjdNCeN0TXxeFGzqs RQS0PEq2f93S1974BVvKzxjKXIGUlJFcJPyMukxGvPOFjXlxdbQSMjq/5oZM+m1r t2msO8heG6NRnr32xVVVxpUPnd6K1Em1/F3nYjxR0hZdgilKIA06b+ZOg8mRrxEL SLZ+CN0JqSg4z4w3M3n5/sHGxMXXBj42Qa5ZSr04Armia5ufrwIwR4L+mCIhsPAY eWYD1nsFvaw24kv64z93gOsp8P1ic61S6LTLp957oBnD7aCoG2mwbZy706yCzsD9 9F9X4+SSR20GgLn+bo+MsKIYVCxIpLAgdRapRD8kIlJFdKtutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA/LZUtEZqC/0m7cOvJ+XpbccFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85N2U5 MzY3My01ZDE5LTRmZjItODI1MC1mMTA5NGY0ZTEyYzkvMzhkOTUxMzktYzlhYS0z NWM2LTk4ZjctMDU5OTYzOWVlNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTdlOTM2NzMtNWQxOS00ZmYyLTgy NTAtZjEwOTRmNGUxMmM5Lzk3ZTkzNjczLTVkMTktNGZmMi04MjUwLWYxMDk0ZjRl MTJjOS5jcmwwHwYDVR0jBBgwFoAUWadl+i0+WSa9aBzBzIa9bovmt/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85N2U5MzY3My01ZDE5LTRmZjItODI1MC1mMTA5 NGY0ZTEyYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQConhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADqG0zEZWdKUIxIdvP1m1gxHrZ1ex2sQfr1dkX0ZvdBuGL17a+P8y94 ETIhQuJlhoSxpFjgvjHWPC2M5DBOKqdbXHCwNgqCWa2wc44YluVUCcc+oBCAvReY XkMTC95+4mDK2zOq7mx+HBbGJ9nUmvfnQbpwKPznlPtop8jm5tAke3WOa8pZ6sm0 YhMLZWk1lRL0WeJT4McQ+31r3JQtQp1M4TfNBzX2F6qwI9/Wj9h1129vpdcdPyVC yUomrnxl9/OT4KpR9SHYSQnjpFN0bZoQpclxbk7H5kY4r7pfOeNIVsDIQRBgPILW t64ckR7gzGamJ5suHRiyBNCApPYZq5Y= -----END CERTIFICATE-----Generated at Fri Apr 4 23:42:10 2025 by rpki-client