$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa File: 132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json) Hash identifier: oZbz/X+2cf59Sn80j0VSLhyMxSyFnRvS9MfRUmMHjRs= Subject key identifier: DE:71:0B:81:90:F5:22:A2:51:C9:D4:07:7F:B3:8C:45:23:31:07:F2 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849A61F3D218DDFC5FC16A91B80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16433 IP address blocks: 161.38.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3d:21:8d:df:c5:fc:16:a9:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=472814f6-1d80-4a26-8f05-5c7b017605d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:be:a7:2c:d0:8b:35:88:dd:c5:dc:28:08:eb: 3d:47:ed:4a:e4:89:80:d0:61:9e:ac:ca:92:13:63: 6a:1f:d4:72:25:d7:91:e6:a8:65:14:1a:08:0a:be: 4c:d6:22:c4:f6:53:d7:d0:06:88:4b:e6:1c:50:72: cd:30:3c:c1:d6:84:86:ad:30:9d:eb:3b:f3:5c:1d: 47:1e:91:e3:a2:21:df:eb:8e:88:48:77:4f:f6:ca: 6c:fd:8e:be:a5:9e:da:4f:31:2c:3d:a8:95:e3:56: 36:6d:e0:41:a4:9a:2d:34:3b:b7:5b:3d:be:0f:4e: 78:3c:8b:43:fe:83:e7:cb:f0:82:fe:b1:de:cc:79: 9f:92:0e:24:14:21:31:ef:3a:41:74:27:a8:8a:1d: 73:10:e4:b2:bd:c4:96:7e:cd:b0:25:f2:b6:45:8c: 86:bb:83:69:bd:79:f3:30:80:d6:68:7d:aa:2f:2a: 58:6f:ea:ed:a1:2f:96:94:6e:85:cb:de:26:34:c5: 10:90:d9:23:6f:41:e6:12:0d:fb:4e:9c:63:96:aa: 62:d7:a5:62:fb:bc:e3:20:2b:0f:83:93:c4:51:92: 55:53:40:df:88:60:16:4a:14:9a:4b:1a:83:0b:5c: f5:42:3d:9d:f1:c3:9f:0a:52:42:95:0c:e5:53:8e: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:71:0B:81:90:F5:22:A2:51:C9:D4:07:7F:B3:8C:45:23:31:07:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 161.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b7:2f:1f:55:21:59:c2:b8:91:b1:17:12:4c:41:e0:27:40: 17:8c:38:68:80:72:37:8a:38:8a:83:99:15:32:e7:2c:a2:ae: 25:9c:76:8d:80:58:0b:78:63:35:49:4e:77:28:58:b7:77:fd: bb:96:06:f5:2e:6f:2d:ff:6c:f7:00:22:e2:9f:66:4c:12:9a: 68:cb:25:1e:7d:36:ca:a9:6d:a1:14:4e:54:85:e0:5a:76:b0: 44:0d:31:c8:37:db:7e:04:6e:cb:1d:73:88:e7:b7:5e:7b:37: d5:04:69:05:13:82:1e:71:76:c9:98:df:68:15:3e:4e:b8:6c: 36:f0:f8:f1:3f:f6:71:66:13:1c:d7:18:4d:c4:e6:c8:49:43: 8e:47:d5:af:1d:c4:0a:18:db:4a:63:fc:5b:8a:7c:99:c0:f2: f4:48:8d:5e:be:87:ab:ba:63:a2:ce:6f:d9:83:ff:17:ec:40: 80:49:f6:2e:5d:f5:b8:73:af:37:aa:4e:88:1c:35:e3:4c:f5: 55:f6:d9:cb:a9:8d:53:fc:40:fb:79:67:7b:8a:21:f5:9e:c5: 4a:38:d9:2e:ea:27:9a:ce:6c:f5:e9:7c:72:07:21:ba:2c:97: fa:19:0c:ab:ab:fe:4e:56:1e:51:7b:22:89:18:18:4a:39:da: 53:92:fc:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz0hjd/F/BapG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NDcyODE0ZjYtMWQ4MC00YTI2LThmMDUtNWM3YjAxNzYwNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj76nLNCLNYjdxdwoCOs9R+1K5ImA0GGerMqS E2NqH9RyJdeR5qhlFBoICr5M1iLE9lPX0AaIS+YcUHLNMDzB1oSGrTCd6zvzXB1H HpHjoiHf646ISHdP9sps/Y6+pZ7aTzEsPaiV41Y2beBBpJotNDu3Wz2+D054PItD /oPny/CC/rHezHmfkg4kFCEx7zpBdCeoih1zEOSyvcSWfs2wJfK2RYyGu4NpvXnz MIDWaH2qLypYb+rtoS+WlG6Fy94mNMUQkNkjb0HmEg37Tpxjlqpi16Vi+7zjICsP g5PEUZJVU0DfiGAWShSaSxqDC1z1Qj2d8cOfClJClQzlU47tiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5xC4GQ9SKiUcnUB3+zjEUjMQfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMTMyYmQzNjEtMGNkZS0z ZmRlLThiNmItNjRiM2JjZGY1MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS3Lx9VIVnCuJGxFxJMQeAnQBeMOGiAcjeKOIqDmRUy5yyiriWcdo2A WAt4YzVJTncoWLd3/buWBvUuby3/bPcAIuKfZkwSmmjLJR59NsqpbaEUTlSF4Fp2 sEQNMcg3234Ebssdc4jnt157N9UEaQUTgh5xdsmY32gVPk64bDbw+PE/9nFmExzX GE3E5shJQ45H1a8dxAoY20pj/FuKfJnA8vRIjV6+h6u6Y6LOb9mD/xfsQIBJ9i5d 9bhzrzeqTogcNeNM9VX22cupjVP8QPt5Z3uKIfWexUo42S7qJ5rObPXpfHIHIbos l/oZDKur/k5WHlF7IokYGEo52lOS/FQ= -----END CERTIFICATE-----Generated at Tue Apr 29 14:55:33 2025 by rpki-client