$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json) Hash identifier: ktLq56hGGhfqMwuVBbik7fORMxSVq9Fk+PtgLgM+5NM= Subject key identifier: 9A:7B:04:01:6B:5F:6D:0D:A3:42:34:CF:7E:B5:C3:E1:28:41:27:03 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56BD39349DD15E5F89C0C0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 161.38.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bd:39:34:9d:d1:5e:5f:89:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=f81e57a1-5433-4553-88e8-7ffa9025f3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:25:fe:5c:78:15:60:2d:6e:4d:5c:93:b5:fd: 0f:c5:d3:90:be:11:84:4e:59:05:6d:ea:a3:f1:e6: 7a:12:a3:49:2b:2c:a1:57:e4:fd:3c:46:fd:2b:b9: 35:78:29:83:7c:c3:b1:7b:38:bc:41:1a:b1:49:cc: 99:c0:b7:50:fc:3c:5a:b9:bb:b1:2b:ec:95:6a:ea: 8b:af:34:77:69:f1:de:81:d7:24:ec:f0:eb:d7:d4: b7:94:b9:8d:54:c4:55:5e:03:ae:32:ae:c1:89:8f: ee:07:8d:f6:e6:d6:48:04:91:80:26:f3:48:8d:18: c1:72:14:e8:57:d3:89:0b:59:d4:6c:ad:ff:fa:83: ae:4a:59:95:0c:bb:f4:ed:a5:e3:ac:87:04:1f:4f: fd:9f:29:49:b2:4e:6e:e8:3c:a7:53:dc:a4:6d:0a: fc:4d:e2:76:a6:e1:ac:5f:20:e1:07:b8:e1:da:24: 73:42:c7:43:01:4e:bb:18:f8:cb:84:6d:91:10:51: 5f:50:3c:60:cf:b8:58:78:b2:19:71:ae:5e:bd:c4: a4:b3:34:94:32:82:80:81:df:0b:dc:1d:14:ea:e5: 87:fc:4c:46:3d:46:77:cf:92:f3:26:57:c2:06:03: 0b:2b:4f:fc:ca:91:f7:4f:09:84:03:8a:36:2c:8a: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:04:01:6B:5F:6D:0D:A3:42:34:CF:7E:B5:C3:E1:28:41:27:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7d:30:be:24:02:1e:5e:14:af:84:71:60:f5:3a:36:07:6b: 9b:ab:ea:0a:e7:d2:8c:ae:61:17:5e:96:33:4d:76:f6:a4:56: 8c:b6:1b:7a:a5:a2:90:81:06:8e:34:e9:d5:da:4f:78:df:a9: 69:7f:56:ad:74:6d:11:13:2d:02:b7:4f:89:ef:27:9a:d3:ce: dd:2c:47:ec:87:74:d8:43:57:16:fe:a3:43:74:c9:1e:f3:a9: 7b:84:e0:e2:e1:8d:c3:48:cd:3d:6e:d2:b5:08:4e:18:b4:fb: 4c:92:fe:8b:68:60:4c:80:80:2c:de:d4:fb:95:d2:07:54:0d: 7f:9d:3b:8e:d0:86:a2:76:63:cd:f1:ac:53:dd:89:51:f0:d3: c6:d0:9b:78:a0:3e:ff:74:95:b2:11:52:77:ad:0a:87:f4:e5: be:03:9f:b6:6c:7c:fe:8b:3f:bd:b6:ab:64:34:9e:7f:9b:2a: 3d:53:f6:44:46:e0:75:6a:42:e7:3f:69:90:fb:a3:d6:c8:62: ce:45:38:97:b9:7b:4d:9e:d1:52:85:0b:5d:54:d2:5d:c1:3b: 66:0f:05:e3:83:7a:3b:7e:00:84:ff:b6:86:91:68:02:9a:28: 8c:a5:77:2a:d9:e5:5d:1b:21:e6:da:03:86:b2:94:7d:fd:b1: 5e:30:ec:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vr05NJ3RXl+JwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjgxZTU3YTEtNTQzMy00NTUzLTg4ZTgtN2ZmYTkwMjVmM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiX+XHgVYC1uTVyTtf0PxdOQvhGETlkFbeqj 8eZ6EqNJKyyhV+T9PEb9K7k1eCmDfMOxezi8QRqxScyZwLdQ/DxaubuxK+yVauqL rzR3afHegdck7PDr19S3lLmNVMRVXgOuMq7BiY/uB4325tZIBJGAJvNIjRjBchTo V9OJC1nUbK3/+oOuSlmVDLv07aXjrIcEH0/9nylJsk5u6DynU9ykbQr8TeJ2puGs XyDhB7jh2iRzQsdDAU67GPjLhG2REFFfUDxgz7hYeLIZca5evcSkszSUMoKAgd8L 3B0U6uWH/ExGPUZ3z5LzJlfCBgMLK0/8ypH3TwmEA4o2LIq66wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp7BAFrX20No0I0z361w+EoQScDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MWY4ZDItNmRhMC0z MjkwLWI4NjQtYzZkNmU2MzQ0MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB9ML4kAh5eFK+EcWD1OjYHa5ur6grn0oyuYRdeljNNdvakVoy2G3ql opCBBo406dXaT3jfqWl/Vq10bRETLQK3T4nvJ5rTzt0sR+yHdNhDVxb+o0N0yR7z qXuE4OLhjcNIzT1u0rUIThi0+0yS/otoYEyAgCze1PuV0gdUDX+dO47QhqJ2Y83x rFPdiVHw08bQm3igPv90lbIRUnetCof05b4Dn7ZsfP6LP722q2Q0nn+bKj1T9kRG 4HVqQuc/aZD7o9bIYs5FOJe5e02e0VKFC11U0l3BO2YPBeODejt+AIT/toaRaAKa KIyldyrZ5V0bIebaA4aylH39sV4w7No= -----END CERTIFICATE-----Generated at Mon Apr 28 15:26:19 2025 by rpki-client