$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json) Hash identifier: LtxgnEedXl8KRZJXdkdvxIUn4rSf7kD8syh5uL4s2Ww= Subject key identifier: B0:5E:7A:3A:58:7B:C2:14:6F:67:C8:53:31:03:EE:C2:C3:73:8D:F7 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FBFDF49436398108C2000 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 161.38.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bf:df:49:43:63:98:10:8c:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=d4ada5b4-532c-43d6-88ab-caed92cf49e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:6c:32:18:96:6b:2f:e0:8d:fb:48:16:cf: ae:22:47:a0:94:da:3e:fc:06:fe:59:04:7b:b2:2a: 2f:0e:13:52:57:ff:9b:23:6a:9d:64:6e:c6:2a:f0: d9:c3:ca:fd:25:df:19:8b:33:50:b3:f3:29:f4:ce: de:5c:5d:a6:9b:52:e5:8c:03:1a:f7:78:66:8d:49: 67:ff:cf:96:6f:b4:89:6c:38:ce:f6:47:03:fa:07: c2:08:8d:14:01:84:9c:09:35:d5:57:6b:f5:9a:03: 08:0e:9b:49:db:99:36:c3:d0:a6:d3:74:2e:54:4e: dd:88:b6:e8:13:5d:b8:74:2c:a8:02:a5:2f:7c:3e: da:39:92:13:37:5f:30:57:a0:97:71:c9:0c:84:94: ec:bd:11:c4:b5:db:22:36:16:eb:0a:3e:c2:da:5e: 21:33:f0:a1:3f:55:2e:c6:76:96:90:46:d1:a6:fd: 27:72:20:38:c3:b9:33:13:7b:ad:81:d9:c0:76:1c: d0:37:a0:87:c4:62:7f:2f:df:fb:77:47:8f:5d:2a: 0f:a4:f5:95:85:d3:40:b6:6d:2f:57:48:b6:0e:45: 13:43:e5:d8:97:62:aa:68:36:8b:15:76:e0:0b:16: cc:4a:9a:85:1d:33:ef:99:bb:ef:05:cb:69:b3:02: 2f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5E:7A:3A:58:7B:C2:14:6F:67:C8:53:31:03:EE:C2:C3:73:8D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:33:7b:32:d1:ac:17:54:e5:52:97:93:e9:93:06:58:4a:de: 70:0c:ce:c4:75:5a:5c:55:c6:ae:29:61:3f:11:15:14:eb:1e: 6c:51:ac:92:29:0e:2b:13:34:86:0f:7e:52:e0:4d:78:0d:ca: 9d:3a:ca:8e:da:ca:78:2b:8b:54:42:88:ff:7a:16:53:60:20: 93:53:d8:f6:a2:6a:3a:c7:e8:c0:c5:e3:f7:a3:5e:a9:bd:da: 0a:d3:5d:80:cf:e5:2f:04:0c:f7:10:f3:fc:f6:a7:6b:28:24: 08:c0:3d:7b:89:fb:b1:12:66:6c:15:71:e6:a8:2a:a1:39:9b: ce:ce:3b:13:1b:b2:6a:fc:a2:24:8f:5a:8e:fa:6d:0a:f5:2f: 85:63:74:e5:29:35:fc:e8:71:e5:f8:1a:88:db:cb:be:c6:e5: 5d:05:c8:7c:83:9f:12:89:53:8e:8a:b1:2f:02:c2:c8:c2:6a: c6:31:a4:95:a0:26:96:5f:fa:99:66:56:35:ff:f6:78:46:46: db:f0:74:70:c2:06:4e:6a:e1:34:f9:6b:4e:5f:37:4f:e8:eb: 73:2b:c5:6e:1c:6c:27:a3:9f:2b:c7:0e:92:5f:14:b3:d6:71: 73:6e:4b:aa:bc:2d:1a:27:12:a5:98:aa:92:de:8b:ca:50:f5: f7:5f:db:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7/fSUNjmBCMIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDRhZGE1YjQtNTMyYy00M2Q2LTg4YWItY2FlZDkyY2Y0OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbFsMhiWay/gjftIFs+uIkeglNo+/Ab+WQR7 siovDhNSV/+bI2qdZG7GKvDZw8r9Jd8ZizNQs/Mp9M7eXF2mm1LljAMa93hmjUln /8+Wb7SJbDjO9kcD+gfCCI0UAYScCTXVV2v1mgMIDptJ25k2w9Cm03QuVE7diLbo E124dCyoAqUvfD7aOZITN18wV6CXcckMhJTsvRHEtdsiNhbrCj7C2l4hM/ChP1Uu xnaWkEbRpv0nciA4w7kzE3utgdnAdhzQN6CHxGJ/L9/7d0ePXSoPpPWVhdNAtm0v V0i2DkUTQ+XYl2KqaDaLFXbgCxbMSpqFHTPvmbvvBctpswIvtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBeejpYe8IUb2fIUzED7sLDc433MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MWY4ZDItNmRhMC0z MjkwLWI4NjQtYzZkNmU2MzQ0MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQzezLRrBdU5VKXk+mTBlhK3nAMzsR1WlxVxq4pYT8RFRTrHmxRrJIp DisTNIYPflLgTXgNyp06yo7ayngri1RCiP96FlNgIJNT2PaiajrH6MDF4/ejXqm9 2grTXYDP5S8EDPcQ8/z2p2soJAjAPXuJ+7ESZmwVceaoKqE5m87OOxMbsmr8oiSP Wo76bQr1L4VjdOUpNfzoceX4Gojby77G5V0FyHyDnxKJU46KsS8CwsjCasYxpJWg JpZf+plmVjX/9nhGRtvwdHDCBk5q4TT5a05fN0/o63MrxW4cbCejnyvHDpJfFLPW cXNuS6q8LRonEqWYqpLei8pQ9fdf20Y= -----END CERTIFICATE-----Generated at Sun Jun 15 15:31:21 2025 by rpki-client