$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa File: dc656332-f87a-3041-bd27-3d6a301f7e5c.roa (raw, json) Hash identifier: ObLtjpPhTX78sF3Lu29S1o+rj1qDfkwsNDPO+IFff1U= Subject key identifier: 35:D4:A0:4A:D1:4C:62:64:26:2C:EA:54:DC:1C:31:6A:68:80:09:87 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F43285849ACFE1C96B413D3758EF8FF40 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa Signing time: Mon 28 Apr 2025 12:04:52 +0000 ROA not before: Mon 28 Apr 2025 12:04:52 +0000 ROA not after: Sun 27 Jul 2025 12:04:52 +0000 asID: 153371 IP address blocks: 161.129.39.0/24 maxlen: 24 161.129.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ac:fe:1c:96:b4:13:d3:75:8e:f8:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Apr 28 12:04:52 2025 GMT Not After : Jul 27 12:04:52 2025 GMT Subject: CN=774eea2a-7a31-4421-b349-1f3692e6142b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:7f:8f:ac:6c:bd:df:ae:33:ff:f4:b0:e6: c6:7e:7c:1d:bd:49:b0:8d:ea:32:50:c9:fd:b1:cf: 7f:e2:db:aa:ac:3c:b0:48:74:0f:96:c6:4b:b3:12: 7d:5f:44:4e:5a:47:1f:f5:2c:bf:50:9b:04:3a:57: 33:94:ad:b5:f7:dc:15:18:60:c3:4d:ae:37:08:23: ec:c0:5b:ed:bb:17:1f:05:12:60:b8:80:c4:d5:a8: 30:48:c0:26:60:f9:32:10:a3:6d:fe:da:c8:0c:18: 85:b0:0a:1a:a5:8a:21:3d:87:e4:72:66:44:84:60: d4:5b:25:f7:53:33:5b:cc:7c:13:bc:0d:6c:de:b3: c8:b7:13:ae:95:3a:d7:ec:34:e2:c5:d6:be:ed:e1: d3:fa:05:c2:ff:6b:2c:d0:6d:c2:3d:e5:9e:ad:e7: 9b:4e:1a:e0:15:44:02:b7:fa:98:23:7a:1a:25:1e: 6a:c2:e3:ae:5e:6f:54:fc:cd:6d:a3:c9:87:96:02: f4:d0:64:45:52:ed:e4:73:19:b3:9d:51:70:33:7d: a3:ee:2e:f7:c2:56:b2:ce:44:f9:cc:97:58:74:64: b9:8f:51:2b:bc:9b:e0:8c:97:be:57:bc:46:e5:f6: 1d:94:72:42:3a:fd:26:22:65:d9:f4:2e:75:6c:60: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D4:A0:4A:D1:4C:62:64:26:2C:EA:54:DC:1C:31:6A:68:80:09:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.39.0/24 161.129.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:0b:67:99:35:37:c0:fe:0f:76:ab:62:6f:a3:66:5c:38:7c: 1a:2b:74:a6:79:ad:41:03:28:94:cc:99:be:ee:ef:7f:33:d0: 35:1a:20:8d:49:c1:f2:5b:1a:12:e6:ae:9c:69:c1:77:fa:1b: d2:91:f6:d2:03:3c:cd:cc:74:7c:be:5e:c9:3f:57:43:ef:50: 95:2f:e4:74:a2:71:18:dd:c6:f9:be:94:f6:ef:65:de:1c:d7: 41:43:0d:26:57:c7:e6:ec:f6:82:47:7f:04:95:df:ab:a9:14: dc:30:f9:28:79:6a:fa:68:90:72:e8:a7:63:fe:c1:72:b2:5c: bc:6a:8e:db:68:5b:36:9a:fd:8f:5e:f3:35:8b:46:3b:2f:e0: 0d:06:77:14:b4:06:64:82:45:5c:f2:88:7e:f7:04:a4:7e:14: 1c:8f:6e:e2:3b:60:27:b2:5b:7f:40:f1:fb:3d:ed:2f:bb:71: ec:73:0a:dc:c8:27:6a:38:d7:61:0c:18:d4:f2:a2:28:f8:f3: a2:e4:46:14:41:f6:8c:ab:0d:04:c3:0d:d6:92:94:c1:ff:f1: cb:da:9a:be:19:74:19:ab:62:09:d1:a8:de:a8:ca:76:fc:bc: 22:f5:85:6f:b7:36:f8:b5:00:16:b2:53:45:69:fa:4a:c1:ad: b7:95:6a:53 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEms/hyWtBPTdY74/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDQyODEyMDQ1MloXDTI1MDcyNzEyMDQ1MlowLzEtMCsGA1UEAxMk Nzc0ZWVhMmEtN2EzMS00NDIxLWIzNDktMWYzNjkyZTYxNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE9/j6xsvd+uM//0sObGfnwdvUmwjeoyUMn9 sc9/4tuqrDywSHQPlsZLsxJ9X0ROWkcf9Sy/UJsEOlczlK2199wVGGDDTa43CCPs wFvtuxcfBRJguIDE1agwSMAmYPkyEKNt/trIDBiFsAoapYohPYfkcmZEhGDUWyX3 UzNbzHwTvA1s3rPItxOulTrX7DTixda+7eHT+gXC/2ss0G3CPeWereebThrgFUQC t/qYI3oaJR5qwuOuXm9U/M1to8mHlgL00GRFUu3kcxmznVFwM32j7i73wlayzkT5 zJdYdGS5j1ErvJvgjJe+V7xG5fYdlHJCOv0mImXZ9C51bGCLhwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDXUoErRTGJkJizqVNwcMWpogAmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZGM2NTYzMzItZjg3YS0z MDQxLWJkMjctM2Q2YTMwMWY3ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAoYEnAwQA oYEuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD8LZ5k1N8D+D3arYm+jZlw4fBordKZ5rUEDKJTMmb7u738z 0DUaII1JwfJbGhLmrpxpwXf6G9KR9tIDPM3MdHy+Xsk/V0PvUJUv5HSicRjdxvm+ lPbvZd4c10FDDSZXx+bs9oJHfwSV36upFNww+Sh5avpokHLop2P+wXKyXLxqjtto Wzaa/Y9e8zWLRjsv4A0GdxS0BmSCRVzyiH73BKR+FByPbuI7YCeyW39A8fs97S+7 cexzCtzIJ2o412EMGNTyoij486LkRhRB9oyrDQTDDdaSlMH/8cvamr4ZdBmrYgnR qN6oynb8vCL1hW+3Nvi1ABayU0Vp+krBrbeValM= -----END CERTIFICATE-----Generated at Tue Apr 29 08:38:30 2025 by rpki-client