$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa File: f585be5d-4b82-3039-bcb5-12d932832a7c.roa (raw, json) Hash identifier: uzr61RE9MwEhS8u9aagxzweJMvum0T2OaVDwapr3HB0= Subject key identifier: 4C:B6:16:70:28:93:CB:3E:1B:89:3B:63:A1:F9:D6:61:2B:3F:C4:6C Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FBF8F14EF4EFECF38EA00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 161.38.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bf:8f:14:ef:4e:fe:cf:38:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=3bbc985d-6efb-4fdf-8d8f-da97a56dca06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:15:61:68:4d:c8:7d:68:38:8a:27:1a:77: ba:27:3d:2a:97:75:2e:0d:3e:7b:f1:ca:d4:79:05: eb:d3:11:c2:2c:e4:d5:04:1f:6f:f7:6a:f2:59:8b: 7b:31:3d:ba:7c:27:ed:d1:42:4e:44:9e:0f:6b:54: c1:60:6d:d2:cc:f1:72:71:02:b9:8c:cc:07:c2:08: cf:f6:5e:30:aa:2b:aa:66:fc:89:82:be:72:56:38: 8c:60:55:90:92:ef:36:3c:26:b7:54:92:af:3c:fb: f0:7c:76:83:85:99:50:8f:09:07:19:31:a5:fe:1d: 89:a3:ca:4c:e2:fc:51:7f:0e:af:70:18:80:16:99: fe:27:b1:2f:84:6d:0a:ca:9e:ee:a5:20:ea:c0:25: 19:92:03:30:d5:cc:46:f5:d6:3c:cd:d4:79:e2:a6: 24:ba:61:7e:88:c7:2d:95:ae:9b:44:88:9b:ee:51: b1:33:27:82:39:79:da:3d:e0:46:ab:77:a1:cc:80: fd:14:1c:26:1e:d1:96:af:22:bc:06:54:73:6c:de: eb:48:fe:a5:cc:56:2c:ce:58:9a:db:c8:7b:3c:77: b0:dc:b1:45:f7:91:2c:93:19:2f:a6:35:45:a1:5d: b3:57:cc:c7:c4:43:1b:8f:e4:d4:8e:6f:db:e6:df: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B6:16:70:28:93:CB:3E:1B:89:3B:63:A1:F9:D6:61:2B:3F:C4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:df:41:ef:8c:f8:33:7a:d9:61:52:a4:1b:57:3f:27:48:c1: 55:40:41:ea:a8:ae:4e:10:2a:9b:3d:be:de:08:d7:2b:e9:b9: 92:b9:b7:1b:81:92:b5:a4:b6:e9:a6:9f:71:3f:4e:f2:dd:ec: 64:ee:58:f8:f9:a0:e2:7d:19:b4:19:32:a4:43:43:6d:ad:de: cc:d5:a8:a1:71:c7:d4:f1:9a:37:5f:30:7d:06:ca:4e:ee:37: a6:3d:83:29:31:81:93:95:1a:c1:eb:02:0e:ff:63:17:9f:a0: 8b:52:88:c3:6e:18:60:f4:20:87:7a:69:a6:27:d1:5f:e9:70: dc:ce:4c:28:d5:5b:71:34:ce:ba:17:76:88:8c:76:b9:19:73: 72:fb:3d:49:60:59:52:cc:42:02:79:f1:13:cf:60:d6:29:32: 57:c1:55:6b:fa:25:ab:13:b8:84:f6:9c:75:ab:76:b4:98:1d: e0:19:75:b7:5c:de:1c:78:15:2a:06:f3:af:3a:d6:f4:f0:b3: 68:e8:28:fb:b1:9c:b4:22:a4:0a:6e:50:ee:17:18:bf:f1:8c: 73:cb:2b:1c:df:b6:2b:8a:c8:83:46:02:75:3f:ee:c6:26:ca: 57:56:82:7c:f6:81:71:53:3a:4a:a4:95:a6:cd:45:50:19:24: 72:b1:36:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7+PFO9O/s846gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk M2JiYzk4NWQtNmVmYi00ZmRmLThkOGYtZGE5N2E1NmRjYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdgVYWhNyH1oOIonGne6Jz0ql3UuDT578crU eQXr0xHCLOTVBB9v92ryWYt7MT26fCft0UJORJ4Pa1TBYG3SzPFycQK5jMwHwgjP 9l4wqiuqZvyJgr5yVjiMYFWQku82PCa3VJKvPPvwfHaDhZlQjwkHGTGl/h2Jo8pM 4vxRfw6vcBiAFpn+J7EvhG0Kyp7upSDqwCUZkgMw1cxG9dY8zdR54qYkumF+iMct la6bRIib7lGxMyeCOXnaPeBGq3ehzID9FBwmHtGWryK8BlRzbN7rSP6lzFYszlia 28h7PHew3LFF95EskxkvpjVFoV2zV8zHxEMbj+TUjm/b5t/c+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy2FnAok8s+G4k7Y6H51mErP8RsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZjU4NWJlNWQtNGI4Mi0z MDM5LWJjYjUtMTJkOTMyODMyYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoSYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvfQe+M+DN62WFSpBtXPydIwVVAQeqork4QKps9vt4I1yvpuZK5txuB krWktummn3E/TvLd7GTuWPj5oOJ9GbQZMqRDQ22t3szVqKFxx9TxmjdfMH0Gyk7u N6Y9gykxgZOVGsHrAg7/YxefoItSiMNuGGD0IId6aaYn0V/pcNzOTCjVW3E0zroX doiMdrkZc3L7PUlgWVLMQgJ58RPPYNYpMlfBVWv6JasTuIT2nHWrdrSYHeAZdbdc 3hx4FSoG86861vTws2joKPuxnLQipApuUO4XGL/xjHPLKxzftiuKyINGAnU/7sYm yldWgnz2gXFTOkqklabNRVAZJHKxNjw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:48 2025 by rpki-client