$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa File: e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa (raw, json) Hash identifier: q6qWsg+Xy3YIgWw6lXLl39Af4XGyMgGFpjSEjQipDxw= Subject key identifier: BB:BB:06:25:6D:7C:11:A1:37:4F:39:50:43:58:04:4D:F4:F9:24:BC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858499294A86684BD3472482D4A80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 8075 IP address blocks: 161.58.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a8:66:84:bd:34:72:48:2d:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=1ca1130c-39ef-4fa1-8507-3af81aef8e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:d3:23:72:b8:85:c1:1b:8e:92:d2:10:7e: f9:20:45:41:59:4c:29:0b:13:d1:17:a4:a8:d5:88: ab:ba:ca:a0:80:10:4c:fd:69:d9:8c:c0:98:34:aa: 47:98:54:04:9d:05:98:5e:2f:10:5d:de:64:3e:b5: c5:e5:39:3d:b6:a0:1e:6f:9c:12:45:d3:f3:6b:7d: dc:43:7d:31:4c:96:1c:de:69:a4:0a:f4:7e:b2:62: 54:51:3b:f2:c1:dc:f3:d3:b2:d5:59:aa:67:d5:e1: 24:f4:ef:34:a6:ce:1e:0e:a2:88:86:6d:32:ed:45: 4c:02:f4:57:a8:a8:e2:e1:3e:29:7c:c4:67:e8:84: 61:f1:8e:24:3e:12:72:71:6c:6c:8d:61:24:22:7c: d9:09:a5:1b:d8:7d:a3:3a:c8:c4:2b:1e:23:88:b5: 0d:fa:37:07:01:28:a9:b2:bf:96:f8:2f:1e:cd:96: 3c:b9:a9:54:fb:d9:4a:b1:d5:71:3c:e7:95:c6:67: 97:71:d7:dd:b4:a8:27:86:f0:8e:ff:bf:42:2c:53: 7f:8b:99:dd:45:ac:a3:c0:d5:f7:93:de:cc:c8:86: 69:41:5a:89:02:a0:7e:6f:df:8b:55:c4:de:47:db: 0d:12:cf:68:dd:f2:e4:7d:eb:72:04:53:d2:e6:e8: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BB:06:25:6D:7C:11:A1:37:4F:39:50:43:58:04:4D:F4:F9:24:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 161.58.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:25:ac:1c:56:60:8b:f9:5e:8f:4d:f4:18:18:15:66:91:90: 29:42:19:5a:fb:81:b4:27:f4:de:18:64:40:20:18:bf:ec:87: 7e:81:a6:68:67:c1:24:6c:38:dd:a4:ec:7c:c8:bd:2a:9f:51: e3:41:6f:e3:5b:89:da:d3:fa:72:80:33:f4:60:8c:c2:ec:6e: 68:6f:a5:56:0d:fb:eb:1f:00:3b:4c:ae:49:1b:b4:de:eb:32: 62:bc:83:6a:a9:d3:b1:24:13:c8:ee:93:91:32:96:94:17:6c: 31:4d:1f:4a:01:15:e7:32:d2:fd:59:cd:2d:e4:1d:f9:7b:53: fe:3f:a6:b3:e0:df:d4:54:48:53:24:37:e9:5d:e7:1f:bb:63: 34:54:45:6b:ce:af:25:63:43:3e:fb:cb:79:e6:2b:8f:c4:eb: b1:ef:8d:70:fc:7e:f2:ce:b1:2d:13:7f:22:be:00:83:f4:af: c4:b4:a5:fa:a8:7b:e5:63:9a:17:db:a7:83:16:15:04:49:b6: 31:b9:09:3d:30:35:08:91:48:1e:38:99:4d:0e:78:72:8f:72: ec:e4:bd:ff:b2:84:bf:1c:db:2c:a4:1a:01:6a:7a:90:00:c5: c1:90:49:ff:3d:85:c5:22:4d:5a:8c:3c:d2:3f:b5:2a:62:7e: b0:04:13:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKhmhL00ckgtSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MWNhMTEzMGMtMzllZi00ZmExLTg1MDctM2FmODFhZWY4ZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIfTI3K4hcEbjpLSEH75IEVBWUwpCxPRF6So 1YirusqggBBM/WnZjMCYNKpHmFQEnQWYXi8QXd5kPrXF5Tk9tqAeb5wSRdPza33c Q30xTJYc3mmkCvR+smJUUTvywdzz07LVWapn1eEk9O80ps4eDqKIhm0y7UVMAvRX qKji4T4pfMRn6IRh8Y4kPhJycWxsjWEkInzZCaUb2H2jOsjEKx4jiLUN+jcHASip sr+W+C8ezZY8ualU+9lKsdVxPOeVxmeXcdfdtKgnhvCO/79CLFN/i5ndRayjwNX3 k97MyIZpQVqJAqB+b9+LVcTeR9sNEs9o3fLkfetyBFPS5uhm0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu7BiVtfBGhN085UENYBE30+SS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTVjNjkxZjQtMjJhYS0z ZDVkLTgxYmQtZTRkOGE5MGQ5YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoTqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALslrBxWYIv5Xo9N9BgYFWaRkClCGVr7gbQn9N4YZEAgGL/sh36Bpmhn wSRsON2k7HzIvSqfUeNBb+NbidrT+nKAM/RgjMLsbmhvpVYN++sfADtMrkkbtN7r MmK8g2qp07EkE8juk5EylpQXbDFNH0oBFecy0v1ZzS3kHfl7U/4/prPg39RUSFMk N+ld5x+7YzRURWvOryVjQz77y3nmK4/E67HvjXD8fvLOsS0TfyK+AIP0r8S0pfqo e+Vjmhfbp4MWFQRJtjG5CT0wNQiRSB44mU0OeHKPcuzkvf+yhL8c2yykGgFqepAA xcGQSf89hcUiTVqMPNI/tSpifrAEE5Q= -----END CERTIFICATE-----Generated at Sun Apr 27 12:46:56 2025 by rpki-client