$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa File: 61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa (raw, json) Hash identifier: ItlOHKdB82dZb3yP1tUSO9mhCPKqQOf8ZZePNTulxW8= Subject key identifier: 4B:63:2B:A6:D2:4D:FA:51:B7:F4:C0:C8:6F:48:08:52:4A:77:05:23 Certificate issuer: /CN=e91007f4-8b69-443f-87b7-248480814a0d Certificate serial: 010D0C9F432858491246ADABD755DDAEFFD97600 Authority key identifier: A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 11039 IP address blocks: 128.164.0.0/16 maxlen: 16 161.253.0.0/16 maxlen: 16 161.253.0.0/17 maxlen: 17 161.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ad:ab:d7:55:dd:ae:ff:d9:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e91007f4-8b69-443f-87b7-248480814a0d Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=a7a1b917-c2ba-4603-8497-2e1e92ac0aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:04:55:0d:3c:8f:5b:23:08:9e:3b:bd:ff: 97:38:d6:3e:b4:ab:34:5c:44:20:b5:10:1a:a0:0b: 65:b0:5f:c8:94:61:8e:83:61:ca:2c:c1:16:96:33: 7a:54:85:71:7a:4a:ff:34:2d:11:e8:28:7d:ee:93: 72:73:04:0e:c8:71:17:71:e3:2a:8b:b5:48:d6:ba: 20:90:a2:54:d7:d1:f3:5f:3a:30:7e:b3:a3:5a:50: 36:2b:c5:db:7e:19:3d:47:90:da:c6:f1:cb:a8:b1: 03:a9:df:20:ca:02:6a:af:af:8c:70:b5:1e:04:ca: 77:2b:dc:f6:6d:d9:f6:8a:d3:79:fb:e6:89:75:cd: b5:68:fa:76:b6:94:3f:0e:66:39:91:2a:e1:b4:58: e1:7f:a0:ba:c1:68:f4:91:ef:30:e3:be:00:39:ff: 62:b0:50:92:5b:d9:63:5b:be:e6:c1:97:20:0d:49: 93:1f:03:21:ca:92:26:f5:7a:a7:73:1b:bc:ec:de: 36:2b:69:56:58:dc:16:67:c0:df:9e:3f:7b:79:4f: a1:50:85:75:b8:9b:da:8a:bc:fb:2c:2a:3b:20:c3: da:40:26:dc:6b:dd:52:eb:12:49:fb:aa:50:11:7c: 63:61:be:94:7f:cc:a0:2f:ea:a7:44:7d:f6:7e:3c: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:2B:A6:D2:4D:FA:51:B7:F4:C0:C8:6F:48:08:52:4A:77:05:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/61de8a11-9f5d-3e76-a72d-6f30aa494d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d/e91007f4-8b69-443f-87b7-248480814a0d.crl X509v3 Authority Key Identifier: keyid:A7:95:A3:A8:E1:31:73:8C:3A:4C:DC:61:E8:20:AF:8E:4F:70:E0:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e91007f4-8b69-443f-87b7-248480814a0d.cer sbgp-ipAddrBlock: critical IPv4: 128.164.0.0/16 161.253.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:93:07:60:5e:31:42:e2:c9:1d:3f:ac:52:b9:02:1f:63:fc: 1d:a7:7c:b5:aa:36:44:44:d6:d0:b7:4f:2d:64:1e:c6:a9:2b: f2:08:fb:98:18:ac:f3:cd:30:e3:b0:7a:e9:be:e8:95:f1:8f: 36:8a:ac:38:4e:b2:97:5f:02:c2:34:9a:67:d1:35:ec:6a:1e: 0e:72:78:b2:6a:ea:06:73:11:ea:67:39:c2:87:17:62:d7:77: 0f:f6:bc:d8:98:c6:af:16:40:7e:e4:b2:71:b9:4e:b9:5c:e0: 32:f1:70:a9:5c:57:7c:08:31:05:c4:29:ef:b7:b5:5a:8e:33: a3:66:92:a1:27:7b:62:ba:a0:1b:92:98:dd:bd:7b:67:a2:65: ea:a1:52:4f:ff:90:b0:a2:75:cf:09:4d:e0:db:07:29:21:a5: d5:57:9e:ab:c5:54:00:65:25:ea:04:52:a7:08:ec:77:a0:f3: cc:c3:95:ea:5c:34:03:06:45:bf:a4:10:4d:51:57:f5:f7:00: 0c:fc:fb:43:d2:8b:9a:c7:43:26:4a:2f:67:44:02:49:3c:67: 00:ff:f4:e0:90:d8:18:8c:e4:fa:8f:31:31:2a:d5:9f:3d:7b: b4:e7:bb:cc:02:19:7a:4e:e4:b3:d9:da:81:67:cf:de:26:2f: df:2d:f4:7d -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEkSRq2r11Xdrv/ZdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkxMDA3ZjQtOGI2OS00NDNmLTg3YjctMjQ4NDgwODE0 YTBkMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YTdhMWI5MTctYzJiYS00NjAzLTg0OTctMmUxZTkyYWMwYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9kEVQ08j1sjCJ47vf+XONY+tKs0XEQgtRAa oAtlsF/IlGGOg2HKLMEWljN6VIVxekr/NC0R6Ch97pNycwQOyHEXceMqi7VI1rog kKJU19HzXzowfrOjWlA2K8Xbfhk9R5DaxvHLqLEDqd8gygJqr6+McLUeBMp3K9z2 bdn2itN5++aJdc21aPp2tpQ/DmY5kSrhtFjhf6C6wWj0ke8w474AOf9isFCSW9lj W77mwZcgDUmTHwMhypIm9Xqncxu87N42K2lWWNwWZ8Dfnj97eU+hUIV1uJvairz7 LCo7IMPaQCbca91S6xJJ+6pQEXxjYb6Uf8ygL+qnRH32fjxJhwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFEtjK6bSTfpRt/TAyG9ICFJKdwUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lOTEw MDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0ODA4MTRhMGQvNjFkZThhMTEtOWY1ZC0z ZTc2LWE3MmQtNmYzMGFhNDk0ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTkxMDA3ZjQtOGI2OS00NDNmLTg3 YjctMjQ4NDgwODE0YTBkL2U5MTAwN2Y0LThiNjktNDQzZi04N2I3LTI0ODQ4MDgx NGEwZC5jcmwwHwYDVR0jBBgwFoAUp5WjqOExc4w6TNxh6CCvjk9w4I8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lOTEwMDdmNC04YjY5LTQ0M2YtODdiNy0yNDg0 ODA4MTRhMGQuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgKQDAwCh /TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAHkwdgXjFC4skdP6xSuQIfY/wdp3y1qjZERNbQt08tZB7GqSvy CPuYGKzzzTDjsHrpvuiV8Y82iqw4TrKXXwLCNJpn0TXsah4OcniyauoGcxHqZznC hxdi13cP9rzYmMavFkB+5LJxuU65XOAy8XCpXFd8CDEFxCnvt7VajjOjZpKhJ3ti uqAbkpjdvXtnomXqoVJP/5CwonXPCU3g2wcpIaXVV56rxVQAZSXqBFKnCOx3oPPM w5XqXDQDBkW/pBBNUVf19wAM/PtD0ouax0MmSi9nRAJJPGcA//TgkNgYjOT6jzEx KtWfPXu057vMAhl6TuSz2dqBZ8/eJi/fLfR9 -----END CERTIFICATE-----Generated at Mon Apr 28 08:05:59 2025 by rpki-client