$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa File: 16315bab-49c8-3caf-be0c-7c6a9af964f5.roa (raw, json) Hash identifier: GlnY/AbfdYTdC4NySmXmbLtFe5zq+r2wf22wYyRqvhE= Subject key identifier: 60:73:15:D2:5C:D2:3E:5E:B8:56:A8:92:8D:19:36:FB:CC:68:B3:03 Certificate issuer: /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8 Certificate serial: 010D0C9F4328584900214A8165B823DAD8EEA300 Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 161.199.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:4a:81:65:b8:23:da:d8:ee:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=fd55fd15-9e4a-4b60-8286-d6d1e082fe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:ac:74:3f:12:99:17:b4:3b:35:2d:e1:3a: b8:ae:0f:fb:da:66:40:79:fd:22:b4:38:5a:d7:8c: 9f:43:be:45:e6:c8:7f:48:3c:63:63:74:33:06:46: eb:ca:da:58:f8:99:b1:2f:9a:9c:c4:05:7f:d8:a4: 9a:bf:6b:42:b7:8e:18:8b:54:4d:87:3b:4c:ff:57: 94:31:5d:09:b1:ee:93:01:d3:a4:31:37:e8:43:5a: 7b:1a:8a:e1:33:16:73:b4:24:80:7c:e7:72:77:27: ff:02:a3:9c:46:50:49:2d:55:d7:29:05:db:0e:14: 0f:95:ea:43:f4:a8:b0:8d:4f:99:53:da:79:28:8c: b1:9e:44:06:c3:f2:0e:04:d8:db:02:ce:67:05:ec: 46:b7:c5:ca:fa:94:93:cd:8b:2b:49:86:af:fa:8a: e3:d0:c4:9f:93:56:43:c9:11:98:7b:2b:5e:43:1f: f6:3a:46:fc:98:ae:a8:3b:91:6d:ec:b9:ba:cf:92: 6d:22:ca:ca:b3:80:f1:41:31:6b:0e:61:a9:40:fa: 78:ff:a8:16:1a:9c:85:cf:65:0b:31:96:e2:72:f3: 22:92:48:4e:b5:47:91:d9:45:00:59:a3:52:7b:f6: 58:41:30:9a:10:ee:51:45:ab:2e:ee:4e:c6:9f:2c: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:73:15:D2:5C:D2:3E:5E:B8:56:A8:92:8D:19:36:FB:CC:68:B3:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl X509v3 Authority Key Identifier: keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer sbgp-ipAddrBlock: critical IPv4: 161.199.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0f:ac:58:7b:84:34:65:48:83:d9:b1:52:a2:00:44:35:e1: 1b:98:29:23:93:d9:97:57:1e:60:62:b8:d6:1e:03:3e:89:5b: 46:93:cb:8a:f7:3a:26:be:c6:95:4c:ce:68:7d:3c:6b:09:86: 93:88:b5:b6:c4:a3:0a:0d:53:05:4f:a5:7b:d2:aa:2f:3b:7c: 77:cb:17:d6:d9:06:4f:af:ee:dd:0d:20:98:38:e7:d6:d9:eb: 6a:ee:00:da:93:7e:f8:49:62:cd:03:6a:e2:af:ab:80:81:ab: 4e:36:e0:b2:fc:85:6f:ce:c3:74:e0:15:a1:db:b7:13:18:e2: db:82:71:7d:52:b1:12:03:7f:b3:0a:72:71:6a:eb:dd:d2:17: 87:f7:d9:f6:ef:44:40:fd:dd:e1:eb:a0:ab:5b:88:9a:69:35: 38:a5:af:63:05:51:3f:db:a8:14:8a:7b:5c:57:27:e2:50:32: f7:79:00:1f:11:43:e8:bb:5b:01:5f:01:9f:80:f7:44:10:c9: 11:12:2d:1d:d4:6d:8d:d0:19:f8:db:09:db:ba:b2:09:5a:5c: 3f:42:64:95:a9:44:25:44:f6:e2:b5:22:b7:26:97:ad:c8:d2: 54:70:e8:74:d7:aa:60:19:55:5a:23:98:e2:91:7d:ea:e4:ca: f0:53:34:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIUqBZbgj2tjuowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliNzk0NDctZGE4OC00NTI4LThmZjctMGQzNjdkMmQ3 NmU4MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk ZmQ1NWZkMTUtOWU0YS00YjYwLTgyODYtZDZkMWUwODJmZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntmsdD8SmRe0OzUt4Tq4rg/72mZAef0itDha 14yfQ75F5sh/SDxjY3QzBkbrytpY+JmxL5qcxAV/2KSav2tCt44Yi1RNhztM/1eU MV0Jse6TAdOkMTfoQ1p7GorhMxZztCSAfOdydyf/AqOcRlBJLVXXKQXbDhQPlepD 9KiwjU+ZU9p5KIyxnkQGw/IOBNjbAs5nBexGt8XK+pSTzYsrSYav+orj0MSfk1ZD yRGYeyteQx/2Okb8mK6oO5Ft7Lm6z5JtIsrKs4DxQTFrDmGpQPp4/6gWGpyFz2UL MZbicvMikkhOtUeR2UUAWaNSe/ZYQTCaEO5RRasu7k7GnyyWRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBzFdJc0j5euFaoko0ZNvvMaLMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3 OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2QyZDc2ZTgvMTYzMTViYWItNDljOC0z Y2FmLWJlMGMtN2M2YTlhZjk2NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjliNzk0NDctZGE4OC00NTI4LThm ZjctMGQzNjdkMmQ3NmU4L2I5Yjc5NDQ3LWRhODgtNDUyOC04ZmY3LTBkMzY3ZDJk NzZlOC5jcmwwHwYDVR0jBBgwFoAUHiwkM9lMpkRaA/NOR07DQO2LIoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2 N2QyZDc2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoceAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUPrFh7hDRlSIPZsVKiAEQ14RuYKSOT2ZdXHmBiuNYeAz6JW0aTy4r3 Oia+xpVMzmh9PGsJhpOItbbEowoNUwVPpXvSqi87fHfLF9bZBk+v7t0NIJg459bZ 62ruANqTfvhJYs0DauKvq4CBq0424LL8hW/Ow3TgFaHbtxMY4tuCcX1SsRIDf7MK cnFq693SF4f32fbvRED93eHroKtbiJppNTilr2MFUT/bqBSKe1xXJ+JQMvd5AB8R Q+i7WwFfAZ+A90QQyRESLR3UbY3QGfjbCdu6sglaXD9CZJWpRCVE9uK1Ircml63I 0lRw6HTXqmAZVVojmOKRferkyvBTNPE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:23:56 2025 by rpki-client