$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa File: 536a1a59-e74e-326e-909f-14a772e3d7fe.roa (raw, json) Hash identifier: z/PF6jRfegu6wUyc4sz48iPJTUeSbLxuBp4C+QQhkVM= Subject key identifier: 1D:DB:0B:1D:36:C3:1A:53:04:73:FB:D3:FC:74:76:B0:83:49:98:C5 Certificate issuer: /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8 Certificate serial: 010D0C9F43285849DF5A5C541E578A6B1B9688D0 Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 16509 IP address blocks: 161.199.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5c:54:1e:57:8a:6b:1b:96:88:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=9937908c-3f86-4556-a318-6e46b24d4f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:8d:e2:fc:0c:fe:1c:e9:c9:b2:de:73:86: 82:96:b6:86:50:67:2d:29:53:5d:e8:f8:81:44:0c: 6e:29:e9:70:c8:0c:e6:7e:3a:38:29:7e:24:1d:c8: ed:c5:24:97:b0:76:37:bf:da:bb:08:1c:4d:61:df: 52:a0:54:0f:41:5f:9a:a5:af:96:3e:c5:ba:63:fe: ab:1e:05:61:60:50:41:ca:03:c2:28:47:24:d2:ba: 92:1a:93:09:2b:57:93:1a:92:c4:5e:d1:3e:bb:7a: a9:02:54:bc:ad:58:2e:ff:d5:17:30:97:55:ad:54: 55:d4:f2:ae:01:5c:c2:d1:f1:5a:61:65:d6:4e:c0: c9:cf:63:a9:3b:d3:94:b0:0d:db:da:b1:26:be:bb: e6:b6:06:2d:0d:09:e1:f1:6e:f5:63:1e:b7:4d:ad: 33:02:26:30:47:31:dd:8f:47:ab:b3:a0:78:26:a3: c6:89:af:c9:c3:1c:62:55:ae:2b:76:35:5d:b1:eb: 7e:cf:9a:8a:b3:62:bf:99:20:b8:8d:b3:e2:e9:2c: b6:5e:6d:ef:0c:5c:d3:63:d4:14:37:17:68:cb:bc: d4:27:8a:27:a7:73:c2:96:23:f2:ff:55:dc:6e:f6: 1d:55:0e:65:b9:d2:2a:68:98:73:3e:d2:81:10:73: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DB:0B:1D:36:C3:1A:53:04:73:FB:D3:FC:74:76:B0:83:49:98:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl X509v3 Authority Key Identifier: keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer sbgp-ipAddrBlock: critical IPv4: 161.199.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:66:c2:0c:99:94:35:f7:b6:b5:8b:9a:55:0a:da:a8:8a:26: 2a:33:11:9e:c6:1f:9d:62:8a:d9:75:4f:11:cb:5e:47:6a:b2: 0a:11:43:f6:ea:e6:e0:47:90:a3:19:f4:86:f6:85:bf:93:cb: 25:2e:a2:8b:b8:af:a6:f9:41:bf:1d:88:23:65:0c:c6:84:36: 6a:f0:45:45:f9:be:6d:44:6a:04:c6:a3:cd:6a:ce:19:4a:7f: 82:63:04:84:ed:33:75:6b:0a:1a:2e:aa:de:da:58:72:ca:96: 9d:cd:ce:34:8e:c2:50:b5:59:37:38:b9:2f:d9:d7:77:f9:50: 87:fa:f1:90:6c:a9:4f:17:1f:15:6d:c5:3a:ce:39:da:69:aa: f7:47:d5:d1:07:c6:bb:22:3a:ec:42:e2:6b:cc:64:6f:5d:ac: d3:b5:0b:60:4e:7b:35:b1:4a:f2:08:42:bc:3e:72:c7:84:e6: a0:a2:7b:6d:37:0e:9a:1d:81:44:b5:30:35:aa:27:39:74:64: 12:44:4a:2d:18:5a:47:50:c8:35:8f:b8:7d:51:a6:40:6c:8b: b5:07:3f:df:78:06:3e:22:c5:41:c1:96:46:23:66:55:f9:3c: a8:d6:11:dc:60:4d:b1:d8:a9:36:ec:12:84:42:cf:f2:4b:bf: 9a:ba:0c:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWlxUHleKaxuWiNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliNzk0NDctZGE4OC00NTI4LThmZjctMGQzNjdkMmQ3 NmU4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk OTkzNzkwOGMtM2Y4Ni00NTU2LWEzMTgtNmU0NmIyNGQ0ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8GN4vwM/hzpybLec4aClraGUGctKVNd6PiB RAxuKelwyAzmfjo4KX4kHcjtxSSXsHY3v9q7CBxNYd9SoFQPQV+apa+WPsW6Y/6r HgVhYFBBygPCKEck0rqSGpMJK1eTGpLEXtE+u3qpAlS8rVgu/9UXMJdVrVRV1PKu AVzC0fFaYWXWTsDJz2OpO9OUsA3b2rEmvrvmtgYtDQnh8W71Yx63Ta0zAiYwRzHd j0ers6B4JqPGia/JwxxiVa4rdjVdset+z5qKs2K/mSC4jbPi6Sy2Xm3vDFzTY9QU Nxdoy7zUJ4onp3PCliPy/1XcbvYdVQ5ludIqaJhzPtKBEHN6TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3bCx02wxpTBHP70/x0drCDSZjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3 OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2QyZDc2ZTgvNTM2YTFhNTktZTc0ZS0z MjZlLTkwOWYtMTRhNzcyZTNkN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjliNzk0NDctZGE4OC00NTI4LThm ZjctMGQzNjdkMmQ3NmU4L2I5Yjc5NDQ3LWRhODgtNDUyOC04ZmY3LTBkMzY3ZDJk NzZlOC5jcmwwHwYDVR0jBBgwFoAUHiwkM9lMpkRaA/NOR07DQO2LIoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2 N2QyZDc2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoceAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlmwgyZlDX3trWLmlUK2qiKJiozEZ7GH51iitl1TxHLXkdqsgoRQ/bq 5uBHkKMZ9Ib2hb+TyyUuoou4r6b5Qb8diCNlDMaENmrwRUX5vm1EagTGo81qzhlK f4JjBITtM3VrChouqt7aWHLKlp3NzjSOwlC1WTc4uS/Z13f5UIf68ZBsqU8XHxVt xTrOOdppqvdH1dEHxrsiOuxC4mvMZG9drNO1C2BOezWxSvIIQrw+cseE5qCie203 DpodgUS1MDWqJzl0ZBJESi0YWkdQyDWPuH1RpkBsi7UHP994Bj4ixUHBlkYjZlX5 PKjWEdxgTbHYqTbsEoRCz/JLv5q6DDk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:35:14 2025 by rpki-client