$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa File: a08f2739-bc57-3f01-8de6-25e8506410f0.roa (raw, json) Hash identifier: GZptkhE9LJziILDvr/PqUOxNtFRbyomiKs5wHzHYAvY= Subject key identifier: B2:1F:73:FD:B2:88:00:5C:7D:A1:68:C7:A2:D9:04:E4:D5:5C:0B:80 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F432858493ED3CEBCA41A71DBDA6E5B80 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 15092 IP address blocks: 161.199.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:ce:bc:a4:1a:71:db:da:6e:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=dc01d5d6-e17b-46aa-982e-414758279771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:66:62:e6:0a:bb:5a:d7:5f:b9:13:35:e0: ed:cf:8f:08:f2:de:1e:4f:98:d2:b7:30:d1:f6:f3: e0:9e:33:bc:3f:50:9f:a3:f2:09:ce:35:69:b0:a5: b0:21:64:e9:ca:49:be:2c:5d:cf:f5:60:1c:de:62: 42:2c:ea:0b:34:75:5f:c8:6e:da:1e:07:82:fc:49: 23:24:8e:ef:44:55:4d:86:2c:e1:4f:e2:74:47:fc: 95:fb:e0:6a:fd:32:ea:7e:70:47:06:dc:bb:c9:e0: 47:5f:88:32:f5:b1:59:ba:84:ff:4a:d9:92:29:92: 5d:ab:cc:34:0f:36:6c:ac:14:d4:ee:1f:a0:cd:3c: c1:47:1b:c5:f0:08:ce:8e:2a:e6:e9:02:85:08:83: 31:9b:c6:2b:09:57:9e:c3:27:19:a9:f3:d3:fc:ff: 5e:04:93:fd:94:30:b3:6a:91:06:11:0c:ad:b9:03: a2:88:7c:59:4c:84:5e:66:69:40:fc:b5:0e:9b:58: b2:c7:f3:93:57:15:01:bc:6f:7b:8f:21:07:2e:a5: 4b:05:da:1a:39:d2:0d:51:ea:c5:7b:94:45:f6:db: 01:3b:25:2e:54:11:7a:f6:2c:2e:28:f1:3b:ed:a6: ed:36:21:ed:cc:9d:33:a8:84:9d:50:24:f9:5d:a6: d0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1F:73:FD:B2:88:00:5C:7D:A1:68:C7:A2:D9:04:E4:D5:5C:0B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 161.199.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:12:d8:0d:29:e5:d0:95:e2:95:2f:0c:ac:43:19:d0:d4:eb: 09:e6:06:47:d5:e0:ce:44:3a:74:c4:b6:2f:1c:a2:e4:5a:fa: f0:f2:5c:ee:90:11:e0:b9:75:07:f4:77:98:e3:c5:e2:51:7c: 73:38:54:95:03:50:35:76:98:9c:66:32:0a:65:ad:8a:e5:db: 7a:cd:a1:70:8d:9f:2d:c5:7a:2b:e2:57:0b:49:e8:5d:11:ff: 30:28:4a:07:df:87:e5:8e:b3:f5:99:51:a8:24:9d:cc:d6:55: 73:4f:15:29:08:c1:09:8a:1a:b8:c3:4b:84:6b:24:5a:b1:82: e2:2c:eb:72:05:c5:3c:bc:54:7d:24:1d:d7:47:fc:aa:56:e3: 1f:43:62:f7:51:7b:1d:67:e2:20:2c:ee:b5:5e:20:77:9c:0a: 99:3d:3a:ce:f8:44:0a:ce:20:94:44:4f:24:ee:ea:c0:60:89: 4c:22:b2:46:dd:6c:99:4f:39:3f:4c:7c:ed:22:70:f4:ac:f4: 99:cc:a2:6c:39:8a:ad:81:33:94:ee:74:4a:b0:49:11:f9:1a: 7b:1c:6b:de:08:61:d3:08:8b:9a:be:32:e9:ff:5e:4e:9c:33: f9:86:79:11:55:2d:d8:47:91:df:7b:ad:6c:8e:4d:3e:d8:59: cf:53:e1:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+0868pBpx29puW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk ZGMwMWQ1ZDYtZTE3Yi00NmFhLTk4MmUtNDE0NzU4Mjc5NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz9mYuYKu1rXX7kTNeDtz48I8t4eT5jStzDR 9vPgnjO8P1Cfo/IJzjVpsKWwIWTpykm+LF3P9WAc3mJCLOoLNHVfyG7aHgeC/Ekj JI7vRFVNhizhT+J0R/yV++Bq/TLqfnBHBty7yeBHX4gy9bFZuoT/StmSKZJdq8w0 DzZsrBTU7h+gzTzBRxvF8AjOjirm6QKFCIMxm8YrCVeewycZqfPT/P9eBJP9lDCz apEGEQytuQOiiHxZTIReZmlA/LUOm1iyx/OTVxUBvG97jyEHLqVLBdoaOdINUerF e5RF9tsBOyUuVBF69iwuKPE77abtNiHtzJ0zqISdUCT5XabQwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIfc/2yiABcfaFox6LZBOTVXAuAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvYTA4ZjI3MzktYmM1Ny0z ZjAxLThkZTYtMjVlODUwNjQxMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCocd8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMS2A0p5dCV4pUvDKxDGdDU6wnmBkfV4M5EOnTEti8couRa+vDyXO6Q EeC5dQf0d5jjxeJRfHM4VJUDUDV2mJxmMgplrYrl23rNoXCNny3FeiviVwtJ6F0R /zAoSgffh+WOs/WZUagknczWVXNPFSkIwQmKGrjDS4RrJFqxguIs63IFxTy8VH0k HddH/KpW4x9DYvdRex1n4iAs7rVeIHecCpk9Os74RArOIJRETyTu6sBgiUwiskbd bJlPOT9MfO0icPSs9JnMomw5iq2BM5TudEqwSRH5Gnsca94IYdMIi5q+Mun/Xk6c M/mGeRFVLdhHkd97rWyOTT7YWc9T4dQ= -----END CERTIFICATE-----Generated at Sun Apr 27 12:54:32 2025 by rpki-client