$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/a360b2f0-95ca-3ce4-964d-e0045372812f.roa File: a360b2f0-95ca-3ce4-964d-e0045372812f.roa (raw, json) Hash identifier: HOVm5OcD0TSMHXf3wRQHDQ3sxJk39MT2+wPLnvA2jNQ= Subject key identifier: 0D:AC:33:37:38:7C:ED:04:42:51:61:5A:B8:A1:61:CA:EB:BB:40:EF Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F432858498B4167ACC44213777E4E9180 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/a360b2f0-95ca-3ce4-964d-e0045372812f.roa Signing time: Wed 16 Apr 2025 10:02:58 +0000 ROA not before: Wed 16 Apr 2025 10:02:58 +0000 ROA not after: Tue 15 Jul 2025 10:02:58 +0000 asID: 16509 IP address blocks: 160.32.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:41:67:ac:c4:42:13:77:7e:4e:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: Apr 16 10:02:58 2025 GMT Not After : Jul 15 10:02:58 2025 GMT Subject: CN=1bcbaca1-daca-40ff-ba0f-481e23227787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:e7:63:5e:16:b6:2c:60:51:d0:35:f5:5a: 58:e3:40:50:51:dc:b8:59:74:a7:17:9b:84:e7:64: ee:e6:74:33:06:08:e6:ba:5d:40:7d:d8:ad:48:9b: 24:84:19:1c:e3:38:6a:04:8e:e2:82:3b:f5:35:a7: 92:71:40:cc:fa:51:01:ed:6c:83:53:d3:59:9b:d4: b4:98:c8:9c:97:86:34:57:96:c7:2d:05:09:ce:db: 97:ce:42:24:98:ea:df:53:3f:c9:97:f0:4b:09:d7: a8:5e:2d:87:a2:e1:ec:6c:52:00:e7:e0:bc:8c:1a: 0d:fc:b7:c7:81:3c:4b:50:34:55:3d:92:a8:4c:6a: 23:40:f6:a3:36:c4:9c:cf:bd:33:89:a5:c5:8d:22: ec:a0:fd:d7:e3:95:c9:8f:f0:29:37:7e:6b:e1:06: 33:75:f2:f8:45:0b:d1:27:e4:b2:68:35:5a:6a:84: fe:45:3b:56:62:2e:b6:b0:ab:6c:61:ec:a6:39:e4: 4b:9e:0f:a7:00:df:90:be:c9:d2:93:1b:93:ba:37: 9d:b2:af:ea:ff:25:d3:3b:e0:46:e0:86:c3:64:4c: 10:98:66:25:7f:0c:63:3c:28:c4:38:94:1b:3e:77: e2:54:a4:9b:95:61:a3:bf:53:76:d5:5b:a1:02:8a: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AC:33:37:38:7C:ED:04:42:51:61:5A:B8:A1:61:CA:EB:BB:40:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/a360b2f0-95ca-3ce4-964d-e0045372812f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:aa:7c:f1:13:38:69:72:8a:34:5c:7e:84:99:bb:67:39:93: f4:f8:c3:0a:37:dd:82:0e:0b:16:31:7c:4b:17:d6:57:b0:9a: 78:b7:16:ae:86:37:cf:e7:ae:5b:30:0e:d1:12:68:10:8e:a5: 21:d0:c2:70:ea:a2:f4:64:02:06:12:aa:9f:fd:ce:0c:1f:ff: 8e:03:fd:0c:f3:98:ab:e4:1c:6a:41:0f:08:2e:ac:2a:26:00: 5c:9f:6c:8b:cd:df:26:1a:e9:a4:26:de:54:6d:36:21:67:0f: 72:ce:b8:c5:6f:23:42:6f:7c:40:70:4c:38:1a:71:7a:13:1e: cc:40:08:3c:35:aa:32:70:3d:d7:6c:2a:9b:2b:9b:8f:ad:77: 40:03:f2:0a:03:52:24:c6:ba:d8:4e:35:f0:ac:c3:34:ca:7d: bf:f4:d2:44:82:c2:c8:ed:7e:66:30:aa:9b:a4:c4:28:e4:05: d6:44:74:3e:02:02:e7:f4:7a:fc:12:c9:69:3d:f8:47:b4:4a: 62:7e:d8:c5:c9:7f:27:b9:dc:5d:30:8c:5b:c1:aa:ba:87:e5: 84:c1:73:95:b2:1b:6e:b8:c9:d9:cb:e0:13:f9:9a:81:3d:b0: 2e:50:fc:a7:7d:1e:30:e8:bf:fc:24:65:e1:1a:ed:07:9d:ca: a4:7d:73:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLQWesxEITd35OkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MDQxNjEwMDI1OFoXDTI1MDcxNTEwMDI1OFowLzEtMCsGA1UEAxMk MWJjYmFjYTEtZGFjYS00MGZmLWJhMGYtNDgxZTIzMjI3Nzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxjnY14WtixgUdA19VpY40BQUdy4WXSnF5uE 52Tu5nQzBgjmul1AfditSJskhBkc4zhqBI7igjv1NaeScUDM+lEB7WyDU9NZm9S0 mMicl4Y0V5bHLQUJztuXzkIkmOrfUz/Jl/BLCdeoXi2HouHsbFIA5+C8jBoN/LfH gTxLUDRVPZKoTGojQPajNsScz70ziaXFjSLsoP3X45XJj/ApN35r4QYzdfL4RQvR J+SyaDVaaoT+RTtWYi62sKtsYeymOeRLng+nAN+QvsnSkxuTujedsq/q/yXTO+BG 4IbDZEwQmGYlfwxjPCjEOJQbPnfiVKSblWGjv1N21VuhAopqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2sMzc4fO0EQlFhWrihYcrru0DvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvYTM2MGIyZjAtOTVjYS0z Y2U0LTk2NGQtZTAwNDUzNzI4MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoCAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqqfPETOGlyijRcfoSZu2c5k/T4wwo33YIOCxYxfEsX1lewmni3Fq6G N8/nrlswDtESaBCOpSHQwnDqovRkAgYSqp/9zgwf/44D/QzzmKvkHGpBDwgurCom AFyfbIvN3yYa6aQm3lRtNiFnD3LOuMVvI0JvfEBwTDgacXoTHsxACDw1qjJwPdds Kpsrm4+td0AD8goDUiTGuthONfCswzTKfb/00kSCwsjtfmYwqpukxCjkBdZEdD4C Auf0evwSyWk9+Ee0SmJ+2MXJfye53F0wjFvBqrqH5YTBc5WyG264ydnL4BP5moE9 sC5Q/Kd9HjDov/wkZeEa7QedyqR9c/w= -----END CERTIFICATE-----Generated at Sat Apr 26 18:39:01 2025 by rpki-client