$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa File: bab99bc5-d663-3ba0-b545-5274edb63cfa.roa (raw, json) Hash identifier: FpmYJs6cU/JvkxnjnuVThe5hC5/lraKl3sSLNNBqNcE= Subject key identifier: F7:5D:68:14:E2:E6:69:C8:8B:A5:29:B8:D3:03:58:36:A7:10:55:A2 Certificate issuer: /CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Certificate serial: 010D0C9F432858497114300B9801FF845021A8C0 Authority key identifier: B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 394089 IP address blocks: 161.223.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:30:0b:98:01:ff:84:50:21:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8387d894-d2ba-4e33-8e84-44b9d9d6e3d5 Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=3a0db05f-aedb-4117-8075-6e43d7baec1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:b8:f9:83:0d:78:51:4f:51:99:7e:c2:bf: 7e:74:ed:96:f5:79:ac:7d:78:fa:68:75:14:37:b1: f4:0f:70:45:5e:99:c1:a2:ad:8d:de:c7:04:aa:59: c9:c1:51:b6:bb:4d:4f:81:f5:6b:9a:23:21:20:4d: 6b:70:cf:3b:5b:ec:d4:3a:d3:28:64:ac:3f:d4:4d: 4f:c4:b6:dc:5c:62:fa:4b:2b:30:12:8c:7e:e8:11: 3a:7a:ca:d4:a5:c0:2e:a7:00:0c:31:2f:4a:aa:c1: b0:6f:6b:13:36:56:22:b8:2d:65:e9:c9:ee:3f:3f: cc:d6:79:8d:70:d1:6a:53:18:1d:0d:78:89:8b:79: 15:4c:58:4b:b5:e7:1b:e1:de:b4:61:dd:ac:0e:c4: 01:f6:ab:0f:a9:0b:7c:84:c7:36:4d:32:b2:e4:d2: bf:7b:77:3f:c9:36:df:81:cb:0c:73:92:57:b4:05: 57:ca:7a:69:e4:c6:0e:ca:c0:b8:3d:c6:fc:f7:a8: 1a:50:50:fa:b0:52:9f:93:0c:d2:20:32:8c:9b:98: a7:2d:55:9c:eb:c0:17:d8:05:f7:2b:90:ff:c8:68: e9:62:12:d7:fb:5f:e7:ec:d6:49:f6:f7:58:85:fc: 5b:6b:9e:b0:cf:c5:91:7f:9b:4c:40:0c:f3:cf:bd: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5D:68:14:E2:E6:69:C8:8B:A5:29:B8:D3:03:58:36:A7:10:55:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/bab99bc5-d663-3ba0-b545-5274edb63cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.crl X509v3 Authority Key Identifier: keyid:B6:7F:57:84:BA:40:74:5E:DC:4F:E4:B1:F0:64:B7:99:79:38:68:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8387d894-d2ba-4e33-8e84-44b9d9d6e3d5.cer sbgp-ipAddrBlock: critical IPv4: 161.223.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:45:6f:8c:5d:a1:99:88:d4:2f:15:d8:1d:ae:ff:1b:4d:a2: d4:54:91:fb:34:1d:5f:37:61:7e:5a:45:b7:9a:5f:1d:49:c5: 91:12:05:6e:95:00:2a:60:ac:bd:7c:f9:be:3f:ac:86:41:43: 12:b1:69:63:00:b7:4f:3a:95:29:a9:a9:75:14:74:b3:f6:21: d8:6c:e9:58:0b:84:f6:e5:9b:a7:6a:b5:82:03:af:19:d4:bb: cb:2a:5a:ee:65:86:35:6d:30:bc:db:a8:c4:d8:a6:f5:40:74: 27:04:9f:7f:43:60:74:07:39:c4:8f:1f:ae:c5:60:34:8b:7b: 67:e1:c6:1e:84:3f:80:a3:9e:c8:1a:12:65:72:9a:96:36:29: a7:35:59:c5:6a:63:71:4e:0d:8b:f1:b5:74:0c:7c:c7:0d:34: 6f:cd:46:62:c9:15:1a:23:ea:71:aa:8e:68:1e:95:a6:c0:c3: a8:cc:bf:6b:8a:04:a4:ad:17:2f:56:de:1e:c5:9d:c0:41:f2: bb:43:6f:2f:0b:9c:59:04:1e:32:81:7e:84:b9:bb:8e:3e:5e: 4a:52:08:6e:aa:2a:f6:35:f4:48:b5:46:08:e2:18:d7:5a:0f: 8b:d2:ca:cd:53:85:9a:ac:03:e8:70:54:90:56:e8:f1:81:2b: 3e:1c:d1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDALmAH/hFAhqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM4N2Q4OTQtZDJiYS00ZTMzLThlODQtNDRiOWQ5ZDZl M2Q1MB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk M2EwZGIwNWYtYWVkYi00MTE3LTgwNzUtNmU0M2Q3YmFlYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rm4+YMNeFFPUZl+wr9+dO2W9XmsfXj6aHUU N7H0D3BFXpnBoq2N3scEqlnJwVG2u01PgfVrmiMhIE1rcM87W+zUOtMoZKw/1E1P xLbcXGL6SyswEox+6BE6esrUpcAupwAMMS9KqsGwb2sTNlYiuC1l6cnuPz/M1nmN cNFqUxgdDXiJi3kVTFhLtecb4d60Yd2sDsQB9qsPqQt8hMc2TTKy5NK/e3c/yTbf gcsMc5JXtAVXynpp5MYOysC4Pcb896gaUFD6sFKfkwzSIDKMm5inLVWc68AX2AX3 K5D/yGjpYhLX+1/n7NZJ9vdYhfxba56wz8WRf5tMQAzzz713gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPddaBTi5mnIi6UpuNMDWDanEFWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3 ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5ZDlkNmUzZDUvYmFiOTliYzUtZDY2My0z YmEwLWI1NDUtNTI3NGVkYjYzY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODM4N2Q4OTQtZDJiYS00ZTMzLThl ODQtNDRiOWQ5ZDZlM2Q1LzgzODdkODk0LWQyYmEtNGUzMy04ZTg0LTQ0YjlkOWQ2 ZTNkNS5jcmwwHwYDVR0jBBgwFoAUtn9XhLpAdF7cT+Sx8GS3mXk4aDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84Mzg3ZDg5NC1kMmJhLTRlMzMtOGU4NC00NGI5 ZDlkNmUzZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod+6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlFb4xdoZmI1C8V2B2u/xtNotRUkfs0HV83YX5aRbeaXx1JxZESBW6V ACpgrL18+b4/rIZBQxKxaWMAt086lSmpqXUUdLP2Idhs6VgLhPblm6dqtYIDrxnU u8sqWu5lhjVtMLzbqMTYpvVAdCcEn39DYHQHOcSPH67FYDSLe2fhxh6EP4Cjnsga EmVympY2Kac1WcVqY3FODYvxtXQMfMcNNG/NRmLJFRoj6nGqjmgelabAw6jMv2uK BKStFy9W3h7FncBB8rtDby8LnFkEHjKBfoS5u44+XkpSCG6qKvY19Ei1RgjiGNda D4vSys1ThZqsA+hwVJBW6PGBKz4c0bg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:00:15 2025 by rpki-client