$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/fb3d9f7f-07e0-37c4-8150-74456102d863.roa File: fb3d9f7f-07e0-37c4-8150-74456102d863.roa (raw, json) Hash identifier: DUWjOV+akjXPSeQneC3TPMX8DZROdcGEaP5ECbk0COM= Subject key identifier: 10:BE:E7:CC:B4:35:75:D3:42:28:AB:8A:90:72:31:99:3A:0C:5B:7A Certificate issuer: /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Certificate serial: 010D0C9F43285849DF51A649AB863A4DAFDE8938 Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/fb3d9f7f-07e0-37c4-8150-74456102d863.roa Signing time: Fri 16 May 2025 12:43:36 +0000 ROA not before: Fri 16 May 2025 12:43:36 +0000 ROA not after: Thu 14 Aug 2025 12:43:36 +0000 asID: 14618 IP address blocks: 160.32.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:51:a6:49:ab:86:3a:4d:af:de:89:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583 Validity Not Before: May 16 12:43:36 2025 GMT Not After : Aug 14 12:43:36 2025 GMT Subject: CN=ce4a9238-224f-4265-9c90-ee28a0048fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:c5:b1:72:a5:35:94:30:f6:27:ca:b7:1c: 5d:9b:84:07:3e:0d:42:78:7b:2a:e5:59:03:ff:6e: b9:08:02:ad:c5:5a:ab:31:be:08:d5:65:7c:e1:c8: fc:71:04:28:27:93:e5:06:bf:c9:07:52:7a:45:78: b6:ff:b2:24:75:22:a7:75:65:e3:38:aa:96:11:0b: 3f:75:5b:94:27:24:1b:ad:79:48:c4:3f:a2:0c:34: 63:7e:ef:34:16:21:bb:4c:91:8c:97:40:08:d9:f9: 27:a8:51:4a:20:45:0f:74:5b:79:40:e1:7e:93:7f: 8d:63:7b:40:bc:b0:34:e9:84:a5:c6:b5:81:2d:ba: 95:44:9c:b3:92:c6:59:bf:ad:9f:96:fb:f7:16:54: 79:ab:8f:d6:92:98:bd:75:9c:bf:57:64:5c:f8:63: 2e:51:15:d4:1e:a6:4e:b7:f8:23:cc:e4:22:6d:2c: f9:60:96:2b:d3:38:94:54:cb:27:ec:54:e2:94:1e: 50:01:4a:d3:ec:73:6d:67:45:d5:ca:bb:2c:ad:10: 69:27:51:d2:96:87:57:48:dd:13:c6:5f:42:b6:5c: 02:09:8c:c2:a4:e1:76:cf:54:c0:a4:22:c1:f6:97: dc:16:93:78:cb:57:49:34:38:4b:1d:35:0d:90:16: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BE:E7:CC:B4:35:75:D3:42:28:AB:8A:90:72:31:99:3A:0C:5B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/fb3d9f7f-07e0-37c4-8150-74456102d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl X509v3 Authority Key Identifier: keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer sbgp-ipAddrBlock: critical IPv4: 160.32.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:50:db:48:20:af:7f:90:b5:91:cf:f3:64:a4:55:13:7f:93: 2d:b4:e3:2c:da:d5:9a:98:f1:49:6a:b1:59:ea:6f:95:9f:53: c4:6a:5a:fa:44:02:bd:26:f3:f2:12:da:1f:6d:33:73:68:dc: 83:c2:c1:82:91:e3:e3:89:60:5a:7c:6a:f8:c6:9c:ac:cc:c6: 03:0d:48:ad:d6:3a:15:52:96:25:eb:6f:a6:18:a8:36:a8:e8: 18:81:83:16:89:16:3f:db:10:f4:9a:d1:0b:ff:73:bf:6f:39: e3:8b:ed:fd:cc:54:7b:13:44:d7:42:99:34:8e:81:16:67:1b: f9:0a:63:b6:e9:11:6c:cc:0e:f0:27:70:14:7f:7e:74:7e:ed: 8e:6f:f6:2e:a6:52:bb:48:78:e3:9b:b1:2c:4f:c2:3d:36:dc: 2e:ed:0b:60:27:3d:8a:1d:a0:60:66:e2:7a:12:32:70:9f:49: 61:7b:81:14:4c:7d:62:66:c6:87:d0:05:d6:ff:89:0c:c5:17: 23:fe:a5:50:65:f1:f3:97:2d:79:13:43:c4:76:af:f1:0a:4d: 6a:06:4f:8c:7e:0b:80:c6:54:9e:e0:08:cd:55:0e:d1:2e:2c: 78:f2:ae:4a:50:b1:f5:d9:70:0b:10:80:b4:d4:53:6a:d9:d8: cf:a7:ad:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfUaZJq4Y6Ta/eiTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw NTgzMB4XDTI1MDUxNjEyNDMzNloXDTI1MDgxNDEyNDMzNlowLzEtMCsGA1UEAxMk Y2U0YTkyMzgtMjI0Zi00MjY1LTljOTAtZWUyOGEwMDQ4ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraDFsXKlNZQw9ifKtxxdm4QHPg1CeHsq5VkD /265CAKtxVqrMb4I1WV84cj8cQQoJ5PlBr/JB1J6RXi2/7IkdSKndWXjOKqWEQs/ dVuUJyQbrXlIxD+iDDRjfu80FiG7TJGMl0AI2fknqFFKIEUPdFt5QOF+k3+NY3tA vLA06YSlxrWBLbqVRJyzksZZv62flvv3FlR5q4/Wkpi9dZy/V2Rc+GMuURXUHqZO t/gjzOQibSz5YJYr0ziUVMsn7FTilB5QAUrT7HNtZ0XVyrssrRBpJ1HSlodXSN0T xl9CtlwCCYzCpOF2z1TApCLB9pfcFpN4y1dJNDhLHTUNkBZp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBC+58y0NXXTQiiripByMZk6DFt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1 N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvZmIzZDlmN2YtMDdlMC0z N2M0LTgxNTAtNzQ0NTYxMDJkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0 MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoCAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZQ20ggr3+QtZHP82SkVRN/ky204yza1ZqY8UlqsVnqb5WfU8RqWvpE Ar0m8/IS2h9tM3No3IPCwYKR4+OJYFp8avjGnKzMxgMNSK3WOhVSliXrb6YYqDao 6BiBgxaJFj/bEPSa0Qv/c79vOeOL7f3MVHsTRNdCmTSOgRZnG/kKY7bpEWzMDvAn cBR/fnR+7Y5v9i6mUrtIeOObsSxPwj023C7tC2AnPYodoGBm4noSMnCfSWF7gRRM fWJmxofQBdb/iQzFFyP+pVBl8fOXLXkTQ8R2r/EKTWoGT4x+C4DGVJ7gCM1VDtEu LHjyrkpQsfXZcAsQgLTUU2rZ2M+nrfk= -----END CERTIFICATE-----Generated at Mon Jun 16 02:28:01 2025 by rpki-client