$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa File: 53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json) Hash identifier: YzWfkXmt8w2V1VyOm0o8kmmNm2p6ZLsi+p3v482L790= Subject key identifier: 06:44:84:85:C8:AB:85:54:93:2C:19:95:68:8A:3C:2F:B4:36:5E:F3 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285849D42FA48BE08581BDA0336A80 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 25649 IP address blocks: 161.38.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a4:8b:e0:85:81:bd:a0:33:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=718db832-3930-436e-900f-efa0bfddeb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:6a:8c:90:a1:fe:80:2b:d9:3f:9b:4a:c8: bf:82:5a:22:fc:57:ba:ca:2b:a5:04:d7:11:32:a8: 8c:e1:9c:2c:b6:fb:29:6a:ba:7f:cf:d4:06:52:74: 99:e0:11:1a:2d:3f:83:9e:fa:27:d7:90:f3:70:e5: 05:a1:87:01:88:86:2e:49:ca:38:a2:0b:36:62:75: eb:38:f3:f2:f4:ed:6b:6a:de:71:f7:ee:0e:a7:2f: 66:da:1c:8c:6d:a1:d9:7f:4f:39:8a:32:6a:3c:0c: 2c:5e:7c:d8:1b:96:79:91:b8:72:16:86:21:13:2d: 14:b9:46:a9:34:63:32:11:2f:46:93:8b:a7:ff:27: 7d:91:c6:81:cd:d2:0c:02:ee:a6:a1:b5:d5:42:1b: 30:bf:33:8e:0b:32:12:0a:4a:ae:6b:5a:e5:1b:34: 9b:cc:cd:0f:37:0a:9e:22:46:35:c8:82:e1:d1:a9: 34:a5:d5:e1:55:e1:e2:c5:cd:97:d6:4a:47:29:fe: 18:3e:0e:26:59:09:d1:7f:74:33:37:73:cb:59:f1: a3:f4:df:42:d6:23:af:75:b2:9a:19:62:1b:0a:6a: 64:cb:05:40:b0:6c:c9:48:96:c6:91:5d:e4:cd:ed: 37:77:91:b5:57:e3:58:aa:dc:06:d7:a4:22:3b:27: 23:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:84:85:C8:AB:85:54:93:2C:19:95:68:8A:3C:2F:B4:36:5E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:45:c1:cd:d3:cc:fd:d6:01:97:9c:0f:7f:ac:b4:2a:47:60: 33:80:95:d4:aa:ac:ae:44:3a:ab:9d:14:65:2a:d6:86:75:bc: 4a:45:26:26:37:fb:8c:87:83:91:de:02:46:51:61:3b:b6:65: 3c:c8:02:b7:f5:d0:4d:06:92:40:e8:e0:fa:0d:1f:e1:6f:bc: e6:c6:42:96:c5:8f:c6:33:e6:ed:2c:22:9c:81:0f:88:75:94: 67:d8:7d:79:e6:3b:e2:f9:26:db:ec:29:9f:de:d6:87:9c:5c: 58:d6:e9:24:7a:ac:86:55:61:43:5b:72:58:a5:28:47:f6:4d: ca:d5:8f:ad:b3:3a:c9:55:1e:f6:21:ac:d8:af:41:22:aa:ae: 46:b5:ed:68:5f:3d:25:97:5a:97:bb:9a:1a:2a:83:26:e1:57: 2d:4b:1d:98:ea:0f:41:9e:e8:8b:8b:8c:23:6a:e1:4d:0c:08: e9:d2:1f:c6:1a:6c:0b:df:79:bd:ed:49:33:52:8f:ae:0d:11: 2b:ca:92:36:16:ce:28:a6:32:87:1f:af:19:61:f3:c6:c4:1a: c1:e7:1f:aa:e8:73:ad:bb:ae:ad:d4:e6:f1:c0:c0:d8:de:b7: 04:07:1a:9d:31:b9:83:33:21:9e:05:a1:28:a6:fb:fc:fe:98: e6:70:26:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6SL4IWBvaAzaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzE4ZGI4MzItMzkzMC00MzZlLTkwMGYtZWZhMGJmZGRlYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ZqjJCh/oAr2T+bSsi/gloi/Fe6yiulBNcR MqiM4Zwstvsparp/z9QGUnSZ4BEaLT+Dnvon15DzcOUFoYcBiIYuSco4ogs2YnXr OPPy9O1rat5x9+4Opy9m2hyMbaHZf085ijJqPAwsXnzYG5Z5kbhyFoYhEy0UuUap NGMyES9Gk4un/yd9kcaBzdIMAu6mobXVQhswvzOOCzISCkqua1rlGzSbzM0PNwqe IkY1yILh0ak0pdXhVeHixc2X1kpHKf4YPg4mWQnRf3QzN3PLWfGj9N9C1iOvdbKa GWIbCmpkywVAsGzJSJbGkV3kze03d5G1V+NYqtwG16QiOycjBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZEhIXIq4VUkywZlWiKPC+0Nl7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFFwc3TzP3WAZecD3+stCpHYDOAldSqrK5EOqudFGUq1oZ1vEpFJiY3 +4yHg5HeAkZRYTu2ZTzIArf10E0GkkDo4PoNH+FvvObGQpbFj8Yz5u0sIpyBD4h1 lGfYfXnmO+L5JtvsKZ/e1oecXFjW6SR6rIZVYUNbclilKEf2TcrVj62zOslVHvYh rNivQSKqrka17WhfPSWXWpe7mhoqgybhVy1LHZjqD0Ge6IuLjCNq4U0MCOnSH8Ya bAvfeb3tSTNSj64NESvKkjYWziimMocfrxlh88bEGsHnH6roc627rq3U5vHAwNje twQHGp0xuYMzIZ4FoSim+/z+mOZwJiM= -----END CERTIFICATE-----Generated at Mon Jun 16 04:35:00 2025 by rpki-client