$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bf26670f-2970-335f-b4f4-6a4dd4e0a40b.roa File: bf26670f-2970-335f-b4f4-6a4dd4e0a40b.roa (raw, json) Hash identifier: daWM14MqQIxriS/f6+/K1OyZaANLF87iE8fFvZvrZGA= Subject key identifier: 98:E9:3F:8F:7F:9D:C4:64:65:BB:6C:AF:77:46:0E:28:9B:CA:3C:36 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F43285849D1650D9904E9781B5BADB980 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bf26670f-2970-335f-b4f4-6a4dd4e0a40b.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 215081 IP address blocks: 161.129.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:0d:99:04:e9:78:1b:5b:ad:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=f4ff078b-af61-44a3-8181-b4ba9f6f6f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:dc:62:00:ac:24:9c:79:8f:59:42:41:6f: 4a:85:db:50:4e:30:cf:bd:d1:d5:96:9e:cd:d9:c5: f0:f8:68:6b:ec:d7:27:b4:f7:78:e8:1c:c1:1e:68: 74:28:d2:e2:b8:55:e9:0d:a9:a3:50:74:79:e8:ca: a0:7c:34:93:73:38:a2:1a:ab:5e:f1:b0:0d:4e:04: c3:70:b9:8c:29:be:d5:39:5f:ef:bc:b4:e9:04:67: b5:ca:55:37:52:e7:37:10:ce:53:67:50:70:04:c7: 8e:a0:b0:de:4c:eb:0f:fe:1a:8f:71:20:96:ae:d9: c8:79:26:52:e6:e1:53:61:5d:12:ac:18:c9:29:f1: 65:ed:a3:21:a3:7d:b7:61:18:ca:ab:f4:66:7d:3a: 1e:3c:e7:65:5b:0d:35:2f:5b:13:79:f8:0e:42:fe: 4b:43:c9:15:26:b0:5f:2c:2d:8b:30:ec:fc:45:9f: 75:7c:5f:40:8d:22:84:61:49:48:59:82:c5:78:18: f4:b0:5f:94:fd:25:19:f9:24:7d:dc:22:f3:7c:03: e9:6d:08:91:82:83:7a:13:16:ef:29:a4:87:8b:79: 56:58:98:ae:00:44:ac:1a:ba:d1:85:df:0d:9a:b5: 2a:48:79:2d:e7:1e:2b:99:4c:0b:4e:45:7b:33:d3: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E9:3F:8F:7F:9D:C4:64:65:BB:6C:AF:77:46:0E:28:9B:CA:3C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bf26670f-2970-335f-b4f4-6a4dd4e0a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ec:29:cd:63:7e:4d:ac:12:6c:85:3e:d5:7a:fa:b1:16:42: 1f:81:49:14:8e:4b:55:0a:0c:42:16:3c:69:a5:6e:44:78:3d: ea:a5:78:9b:b6:ff:49:72:e0:96:ed:39:96:f9:94:73:e6:85: 92:02:bd:b4:01:ef:bc:f9:82:36:23:dd:2d:67:69:a5:a9:26: a1:54:1f:4e:4e:ba:97:5e:cc:0d:32:4c:a8:fd:06:b0:87:e5: 81:eb:a0:c3:88:af:1d:0a:32:65:d8:07:b7:c6:e2:c3:b3:66: 7f:08:ed:30:dd:f5:79:78:ff:49:17:d0:17:9f:cd:1b:bc:83: 66:00:b2:dd:49:7b:54:2d:56:f8:d4:64:23:4f:cf:d0:0e:5d: 1a:38:c3:a7:19:8b:4b:18:5e:7d:e0:c6:3a:81:d6:17:f5:ab: 93:9e:02:e0:eb:8e:7a:75:c0:64:a5:b2:08:b7:1f:b1:e9:ef: 8c:6e:2f:35:0d:88:60:4d:ab:52:da:15:fe:50:dc:52:d4:cd: 6a:a8:39:d9:bd:1e:41:3c:5d:5e:a2:f4:82:6e:3d:47:48:04: 74:6e:62:6d:c0:a8:d4:f1:de:e9:0a:2e:b7:8f:d6:a9:14:59: 86:66:08:05:f0:89:95:33:03:7b:f9:25:13:3e:b4:79:8a:ec: e6:45:eb:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQ2ZBOl4G1utuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjRmZjA3OGItYWY2MS00NGEzLTgxODEtYjRiYTlmNmY2ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoibcYgCsJJx5j1lCQW9KhdtQTjDPvdHVlp7N 2cXw+Ghr7NcntPd46BzBHmh0KNLiuFXpDamjUHR56MqgfDSTcziiGqte8bANTgTD cLmMKb7VOV/vvLTpBGe1ylU3Uuc3EM5TZ1BwBMeOoLDeTOsP/hqPcSCWrtnIeSZS 5uFTYV0SrBjJKfFl7aMho323YRjKq/RmfToePOdlWw01L1sTefgOQv5LQ8kVJrBf LC2LMOz8RZ91fF9AjSKEYUlIWYLFeBj0sF+U/SUZ+SR93CLzfAPpbQiRgoN6Exbv KaSHi3lWWJiuAESsGrrRhd8NmrUqSHkt5x4rmUwLTkV7M9Pk6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjpP49/ncRkZbtsr3dGDiibyjw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYmYyNjY3MGYtMjk3MC0z MzVmLWI0ZjQtNmE0ZGQ0ZTBhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADsKc1jfk2sEmyFPtV6+rEWQh+BSRSOS1UKDEIWPGmlbkR4PeqleJu2 /0ly4JbtOZb5lHPmhZICvbQB77z5gjYj3S1naaWpJqFUH05OupdezA0yTKj9BrCH 5YHroMOIrx0KMmXYB7fG4sOzZn8I7TDd9Xl4/0kX0BefzRu8g2YAst1Je1QtVvjU ZCNPz9AOXRo4w6cZi0sYXn3gxjqB1hf1q5OeAuDrjnp1wGSlsgi3H7Hp74xuLzUN iGBNq1LaFf5Q3FLUzWqoOdm9HkE8XV6i9IJuPUdIBHRuYm3AqNTx3ukKLreP1qkU WYZmCAXwiZUzA3v5JRM+tHmK7OZF61U= -----END CERTIFICATE-----Generated at Mon Jun 16 14:49:13 2025 by rpki-client