$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa File: b44b5711-0436-3c6d-afd4-086e370fe33b.roa (raw, json) Hash identifier: vaoBr8wdNVn81xNzEcguNo2AcCauOQlE4Ewn0DSiH7Y= Subject key identifier: 0D:30:B5:1A:98:1C:86:4F:A0:6C:57:57:C6:20:15:F9:B5:73:6C:7A Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F43285849DF5A5E51B5C1A020C4EB8340 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 36445 IP address blocks: 161.38.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5e:51:b5:c1:a0:20:c4:eb:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=049cedbf-3c4e-4f4e-ad63-3f09e8ae7013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:8e:69:76:6a:1d:66:07:0f:a2:de:93:a6: 1f:64:56:07:06:37:3a:30:ed:bb:cb:f4:5d:cf:a1: 70:b6:ca:0a:3f:fa:ed:2a:bb:8b:70:b1:a6:6c:53: e0:ae:cd:96:ea:ba:0c:45:47:88:32:fc:66:75:d5: 2d:36:de:41:02:e3:41:bc:40:5c:ac:b7:cf:56:c9: 65:39:3f:d8:a6:02:3f:bd:b7:5e:fb:45:4e:36:26: 62:b6:b2:c1:68:ac:18:ee:d1:88:83:ae:1f:b2:e1: 16:e4:47:ee:c1:82:04:e7:f0:7d:84:5f:42:38:38: 64:89:cb:a3:b2:45:71:db:d7:ca:0a:06:d1:45:7d: 97:b4:4d:7b:96:46:d5:53:3d:b6:5b:ec:8c:b7:6a: da:64:98:e4:42:34:4f:00:5d:a7:d7:5f:26:31:57: c5:ee:bb:52:9d:23:9a:d8:5d:9b:87:2e:47:de:9f: 5f:dd:4a:f0:98:a9:60:74:31:6d:a5:10:ee:1a:70: cd:33:fd:47:88:4b:74:d6:f2:75:62:2c:41:ea:06: 48:40:00:36:8e:b4:09:3f:63:28:34:4f:78:3b:12: 8a:0d:01:22:52:98:8d:2a:d9:ed:c7:3e:8f:08:7e: 69:50:3d:5d:bc:d3:5c:44:83:c9:fd:5d:b1:a6:be: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:30:B5:1A:98:1C:86:4F:A0:6C:57:57:C6:20:15:F9:B5:73:6C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/b44b5711-0436-3c6d-afd4-086e370fe33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 161.38.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ea:30:4c:94:35:6f:3f:db:2d:ec:12:2e:a4:3c:d1:02:95: cc:9a:a2:40:6c:62:52:8a:0f:a2:4c:27:d8:dd:cb:65:ad:d2: 82:a3:68:5a:ca:a5:50:c0:9f:15:02:63:f2:86:75:04:9c:1e: 83:88:3d:20:5f:94:ee:23:8f:8d:01:b6:d0:83:a3:ef:9a:8c: ed:3e:49:bd:77:3a:85:61:6d:76:73:40:c6:a2:86:fa:90:02: f6:53:f4:d6:97:fa:99:07:d6:74:9a:0c:09:99:eb:0c:3b:e3: 4f:13:b1:31:d1:59:35:bf:ac:06:a7:98:a5:68:56:56:25:0b: 9f:7e:03:9b:96:4b:fd:a5:8b:e5:5f:39:86:b3:3d:75:e7:be: e9:e5:59:f0:1c:06:f2:06:e9:bb:70:12:6c:74:b6:82:a2:59: 1b:ab:7a:49:ea:13:f7:9b:cb:78:61:64:54:20:b1:5b:59:42: 0d:b6:b7:a0:62:9f:17:54:69:19:79:3c:46:79:1a:78:3d:22: 6a:6a:87:09:cc:45:f0:d3:1b:19:88:45:be:ed:9e:4c:32:82: 83:f6:1c:ba:5c:69:6d:eb:24:a5:a9:64:83:55:ba:1c:02:b4: ed:aa:0f:2a:8f:ed:12:33:62:bb:29:81:5a:23:c9:18:08:74: e5:2d:57:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWl5RtcGgIMTrg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDQ5Y2VkYmYtM2M0ZS00ZjRlLWFkNjMtM2YwOWU4YWU3MDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuqOaXZqHWYHD6Lek6YfZFYHBjc6MO27y/Rd z6FwtsoKP/rtKruLcLGmbFPgrs2W6roMRUeIMvxmddUtNt5BAuNBvEBcrLfPVsll OT/YpgI/vbde+0VONiZitrLBaKwY7tGIg64fsuEW5EfuwYIE5/B9hF9CODhkicuj skVx29fKCgbRRX2XtE17lkbVUz22W+yMt2raZJjkQjRPAF2n118mMVfF7rtSnSOa 2F2bhy5H3p9f3UrwmKlgdDFtpRDuGnDNM/1HiEt01vJ1YixB6gZIQAA2jrQJP2Mo NE94OxKKDQEiUpiNKtntxz6PCH5pUD1dvNNcRIPJ/V2xpr7ltQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0wtRqYHIZPoGxXV8YgFfm1c2x6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvYjQ0YjU3MTEtMDQzNi0z YzZkLWFmZDQtMDg2ZTM3MGZlMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLqMEyUNW8/2y3sEi6kPNEClcyaokBsYlKKD6JMJ9jdy2Wt0oKjaFrK pVDAnxUCY/KGdQScHoOIPSBflO4jj40BttCDo++ajO0+Sb13OoVhbXZzQMaihvqQ AvZT9NaX+pkH1nSaDAmZ6ww7408TsTHRWTW/rAanmKVoVlYlC59+A5uWS/2li+Vf OYazPXXnvunlWfAcBvIG6btwEmx0toKiWRureknqE/eby3hhZFQgsVtZQg22t6Bi nxdUaRl5PEZ5Gng9ImpqhwnMRfDTGxmIRb7tnkwygoP2HLpcaW3rJKWpZINVuhwC tO2qDyqP7RIzYrspgVojyRgIdOUtV3Y= -----END CERTIFICATE-----Generated at Tue Jun 17 09:50:06 2025 by rpki-client