$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/0f8160e0-01e0-31ad-90be-5091706c2105.roa File: 0f8160e0-01e0-31ad-90be-5091706c2105.roa (raw, json) Hash identifier: HfxtdBZUEKN78xlHjLFl1LpT3QpR8iXcyq8W67EurfY= Subject key identifier: FC:D1:AD:50:43:CC:03:13:C8:28:E4:22:B1:64:98:F0:4A:B7:F9:60 Certificate issuer: /CN=112c6636-0b34-4e47-95cc-29a6b53a3388 Certificate serial: 010D0C9F43285849A4BA4C22C31DF5580A9B8480 Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/0f8160e0-01e0-31ad-90be-5091706c2105.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 3549 IP address blocks: 161.195.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4c:22:c3:1d:f5:58:0a:9b:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c580b6bc-3e03-49a3-9c84-259d2d2891a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:fc:30:fc:b3:ba:5c:94:fe:eb:c1:69:3b: 9a:bd:62:bd:bb:29:7c:40:1e:7c:40:92:01:f4:9c: 6b:35:8c:a0:0a:f4:c2:b3:0b:c5:65:92:0b:f4:f5: 3f:40:35:b3:82:3b:c1:4d:86:1b:b9:be:05:15:21: 55:e2:ba:2d:5c:e0:a0:99:0f:31:96:d2:02:38:77: c4:e1:4c:10:44:20:42:0b:aa:82:46:85:0d:32:71: 52:15:a0:67:97:6e:d3:50:bf:98:2a:ff:a8:ce:3a: 5c:65:22:54:09:7f:70:7d:16:47:27:57:9a:00:3d: 7b:10:a5:65:4e:8f:cb:5b:d0:eb:cb:67:3e:06:1a: 23:26:e4:a0:39:f1:12:cf:36:80:87:25:37:c0:a2: a2:f9:d1:dd:e0:b3:46:d5:81:6b:55:af:bb:2a:26: aa:1b:ff:f6:80:94:f9:49:64:bf:46:65:4e:b2:07: 43:ce:fd:4a:d6:63:82:32:af:4e:18:b7:fc:40:39: c5:dc:92:08:71:ee:a1:26:35:95:ec:85:d8:4d:01: ab:f6:11:dd:16:6b:81:6f:9d:02:1a:1a:a0:1c:1b: ac:6e:4a:21:34:80:80:38:77:d1:28:10:60:e6:28: 0d:b1:bc:f6:61:5d:32:32:5c:e5:8e:c4:9b:59:42: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D1:AD:50:43:CC:03:13:C8:28:E4:22:B1:64:98:F0:4A:B7:F9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/0f8160e0-01e0-31ad-90be-5091706c2105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl X509v3 Authority Key Identifier: keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer sbgp-ipAddrBlock: critical IPv4: 161.195.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7f:a4:7f:cb:f4:f4:bb:88:70:c7:e8:3f:5f:ad:23:b9:bf: d3:da:ac:bb:3d:3c:6f:61:49:89:c2:cc:a3:8f:c7:89:7d:89: f8:e6:31:42:5c:07:ed:85:f4:4f:c2:bf:4a:12:5e:bf:34:0a: c7:ee:7c:d2:9f:80:79:e8:fc:60:2a:ba:fc:f8:ce:85:a7:c0: be:4f:05:77:0e:20:b5:a1:e7:75:e0:7f:f4:d8:7e:65:ed:26: 65:e6:07:9e:2b:bb:e8:76:ed:ad:fc:a5:2b:3f:2a:fd:98:f7: 77:06:c9:1b:0c:49:61:8c:47:34:9b:24:f1:c2:0a:da:88:3e: fe:3b:06:c2:cb:d3:00:05:12:02:cd:41:cb:27:a1:3c:90:ab: 1d:5b:58:be:65:7e:c8:76:1d:0c:40:3b:5f:dc:bc:ea:83:64: dd:31:de:c4:9b:4a:88:80:8f:e4:1d:c5:7a:a9:ef:29:b6:34: e7:39:9d:2c:1f:c9:e1:ff:eb:21:ac:fc:99:1c:a4:c2:63:f0: 15:7e:e8:26:3c:b8:d2:8f:1e:0c:9a:6e:ec:ba:d1:99:e8:c3: cb:a4:c6:08:81:51:e4:22:cf:e1:a7:33:a0:5d:2c:2f:2d:a5: 3f:6c:24:19:36:cb:c5:b5:a4:3f:8b:d5:78:be:db:34:d1:48: 3f:73:2c:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukwiwx31WAqbhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTEyYzY2MzYtMGIzNC00ZTQ3LTk1Y2MtMjlhNmI1M2Ez Mzg4MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzU4MGI2YmMtM2UwMy00OWEzLTljODQtMjU5ZDJkMjg5MWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5P8MPyzulyU/uvBaTuavWK9uyl8QB58QJIB 9JxrNYygCvTCswvFZZIL9PU/QDWzgjvBTYYbub4FFSFV4rotXOCgmQ8xltICOHfE 4UwQRCBCC6qCRoUNMnFSFaBnl27TUL+YKv+ozjpcZSJUCX9wfRZHJ1eaAD17EKVl To/LW9Dry2c+BhojJuSgOfESzzaAhyU3wKKi+dHd4LNG1YFrVa+7KiaqG//2gJT5 SWS/RmVOsgdDzv1K1mOCMq9OGLf8QDnF3JIIce6hJjWV7IXYTQGr9hHdFmuBb50C GhqgHBusbkohNICAOHfRKBBg5igNsbz2YV0yMlzljsSbWULMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzRrVBDzAMTyCjkIrFkmPBKt/lgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJj NjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2YjUzYTMzODgvMGY4MTYwZTAtMDFlMC0z MWFkLTkwYmUtNTA5MTcwNmMyMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTEyYzY2MzYtMGIzNC00ZTQ3LTk1 Y2MtMjlhNmI1M2EzMzg4LzExMmM2NjM2LTBiMzQtNGU0Ny05NWNjLTI5YTZiNTNh MzM4OC5jcmwwHwYDVR0jBBgwFoAU5SZko3dDzL1J1R4WQ4IVj9eHuuwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJjNjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2 YjUzYTMzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1/pH/L9PS7iHDH6D9frSO5v9ParLs9PG9hSYnCzKOPx4l9ifjmMUJc B+2F9E/Cv0oSXr80CsfufNKfgHno/GAquvz4zoWnwL5PBXcOILWh53Xgf/TYfmXt JmXmB54ru+h27a38pSs/Kv2Y93cGyRsMSWGMRzSbJPHCCtqIPv47BsLL0wAFEgLN QcsnoTyQqx1bWL5lfsh2HQxAO1/cvOqDZN0x3sSbSoiAj+QdxXqp7ym2NOc5nSwf yeH/6yGs/JkcpMJj8BV+6CY8uNKPHgyabuy60Znow8ukxgiBUeQiz+GnM6BdLC8t pT9sJBk2y8W1pD+L1Xi+2zTRSD9zLKI= -----END CERTIFICATE-----Generated at Sat Apr 26 23:02:21 2025 by rpki-client