$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa File: 132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa (raw, json) Hash identifier: tGS2FMjl3SxSJqGFvQEQwjfbNlG4E7BNxzKxWtcpYos= Subject key identifier: D7:DC:1D:C6:F8:75:14:50:F6:D5:85:F5:FC:9C:11:27:22:D3:52:56 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584A8575F35C079904C933ADE080 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 16433 IP address blocks: 161.38.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:f3:5c:07:99:04:c9:33:ad:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=cd73e5f2-86df-4be4-82c7-b1205c2f0d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:7a:11:fc:4c:8c:35:56:a6:29:69:4c:ed: df:69:ec:59:4d:fd:31:e3:96:4a:ab:d0:96:12:d7: bb:64:92:cf:2a:c0:98:ea:87:49:12:9a:a8:da:1a: 06:c7:e4:6c:43:3c:d1:9b:4b:9e:17:dc:54:80:55: 88:ad:dd:d1:19:9d:99:2d:8b:d0:af:6e:ee:79:79: 73:20:cf:fa:23:1e:b4:71:b2:c1:fe:2b:9d:bf:ab: 00:ac:d2:75:6b:1f:49:63:cc:53:dc:4d:65:df:4f: 52:bb:68:26:0a:7d:ad:e9:fa:a1:8a:78:8c:86:54: 85:81:25:e1:01:d7:17:6b:5f:24:79:4d:e6:c0:30: 30:49:9c:83:89:1a:0a:29:ab:2c:e0:58:30:88:33: 47:05:ba:a8:56:17:ac:f3:34:3d:af:bb:6f:73:b0: 83:6b:a0:47:2d:b9:15:cc:f9:ba:a2:52:65:44:74: 1c:bb:bf:2c:5e:18:45:de:e4:1e:e8:79:a0:b2:59: 45:29:a1:40:98:35:77:8c:43:30:fb:ad:3b:ec:16: 40:1a:de:9b:5a:06:54:69:d2:34:0f:83:ec:e6:aa: 3c:75:3a:f1:c0:92:38:23:18:5d:cb:97:8d:5d:a3: c4:34:8e:30:55:d1:07:d7:c3:63:da:7e:5b:ba:fe: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DC:1D:C6:F8:75:14:50:F6:D5:85:F5:FC:9C:11:27:22:D3:52:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/132bd361-0cde-3fde-8b6b-64b3bcdf516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 161.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:92:06:b8:89:23:18:2f:10:82:fb:78:ca:0f:33:5f:7b:c2: 0f:73:9c:09:8c:51:b0:c2:fd:13:6e:64:d2:8a:e1:e6:11:59: f8:88:7e:53:27:67:65:ca:32:77:74:4c:8f:37:e2:0c:7a:15: a7:65:e7:37:9a:44:0f:d6:0e:51:b3:8b:e4:6b:9e:c0:3a:53: 01:57:a9:5e:2b:88:7c:60:6e:7c:7b:5c:38:59:9c:5e:ee:a3: 96:10:11:76:86:8f:65:22:25:8e:88:54:b7:d0:b5:e0:e9:f1: 4f:b3:e2:68:59:50:04:98:f5:d4:94:c2:a1:d8:03:83:81:a0: 36:53:5b:54:cb:fe:d9:98:64:8c:e1:30:f4:0b:af:99:9d:51: a3:00:71:8e:ce:52:25:16:4a:b3:4a:f0:7c:6f:44:1c:37:f9: 57:ac:bd:87:eb:f7:a5:81:52:ee:3e:39:f3:4b:28:81:b5:30: ba:9c:6a:1d:da:36:61:6a:e3:da:5a:18:9f:00:90:9f:49:91: 7f:20:ac:9b:f9:38:7d:b3:2d:e5:a6:db:12:bb:99:d2:57:18: d4:61:43:e9:02:f0:a3:8a:a7:0a:3f:96:85:01:b7:2f:f0:f4: 9b:84:d8:3f:6b:0b:bb:06:03:9e:1e:11:01:50:d9:f9:62:9f: 36:22:b4:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdfNcB5kEyTOt4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2Q3M2U1ZjItODZkZi00YmU0LTgyYzctYjEyMDVjMmYwZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT56EfxMjDVWpilpTO3faexZTf0x45ZKq9CW Ete7ZJLPKsCY6odJEpqo2hoGx+RsQzzRm0ueF9xUgFWIrd3RGZ2ZLYvQr27ueXlz IM/6Ix60cbLB/iudv6sArNJ1ax9JY8xT3E1l309Su2gmCn2t6fqhiniMhlSFgSXh AdcXa18keU3mwDAwSZyDiRoKKass4FgwiDNHBbqoVhes8zQ9r7tvc7CDa6BHLbkV zPm6olJlRHQcu78sXhhF3uQe6HmgsllFKaFAmDV3jEMw+6077BZAGt6bWgZUadI0 D4Ps5qo8dTrxwJI4Ixhdy5eNXaPENI4wVdEH18Nj2n5buv6TwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfcHcb4dRRQ9tWF9fycESci01JWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMTMyYmQzNjEtMGNkZS0z ZmRlLThiNmItNjRiM2JjZGY1MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSSBriJIxgvEIL7eMoPM197wg9znAmMUbDC/RNuZNKK4eYRWfiIflMn Z2XKMnd0TI834gx6Fadl5zeaRA/WDlGzi+RrnsA6UwFXqV4riHxgbnx7XDhZnF7u o5YQEXaGj2UiJY6IVLfQteDp8U+z4mhZUASY9dSUwqHYA4OBoDZTW1TL/tmYZIzh MPQLr5mdUaMAcY7OUiUWSrNK8HxvRBw3+VesvYfr96WBUu4+OfNLKIG1MLqcah3a NmFq49paGJ8AkJ9JkX8grJv5OH2zLeWm2xK7mdJXGNRhQ+kC8KOKpwo/loUBty/w 9JuE2D9rC7sGA54eEQFQ2flinzYitA8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:41 2025 by rpki-client