$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa File: 0b8a1e80-257b-3d3b-a454-55c527409f72.roa (raw, json) Hash identifier: b99/Vw4+JHvqbZHxjGkhwkzvN4FmKMXoMOH530yRp8c= Subject key identifier: FE:3D:D3:3F:B0:B6:15:8D:9B:4D:A8:E2:62:8F:AF:2F:1D:E3:F5:31 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F43285848D3765D8210F1B1A8764FF000 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa Signing time: Sun 09 Feb 2025 14:00:51 +0000 ROA not before: Sun 09 Feb 2025 14:00:51 +0000 ROA not after: Sat 10 May 2025 13:00:51 +0000 asID: 136787 IP address blocks: 172.103.32.0/24 maxlen: 24 172.103.33.0/24 maxlen: 24 172.103.34.0/24 maxlen: 24 172.103.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d3:76:5d:82:10:f1:b1:a8:76:4f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Feb 9 14:00:51 2025 GMT Not After : May 10 13:00:51 2025 GMT Subject: CN=64a53bd8-36ae-4230-be8d-5a7e477e872f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:a2:c4:96:d4:00:ab:5a:71:2d:53:c7:11: d6:a0:b0:24:a3:7f:58:da:cb:ee:04:e7:3d:8c:a0: e7:57:ca:b0:c1:0f:fc:46:b3:dc:98:2e:61:fb:b3: 24:8d:14:97:7a:47:ec:a7:17:55:57:be:cb:47:6e: ba:0f:9b:80:a7:62:88:0e:3f:c1:05:d1:6f:fd:d1: 0a:2a:44:09:b7:cf:c1:af:c4:8c:fe:83:dd:7d:ca: ef:a2:fa:7f:72:64:e3:cf:72:13:53:37:44:0b:70: 91:07:b0:4e:b3:ec:44:c6:54:94:f9:22:26:d2:52: 61:1b:b3:33:80:5c:42:56:a2:e2:48:83:8a:0c:7f: d0:53:e9:68:cc:98:3d:1b:9d:a7:bc:d4:60:6b:c7: ab:48:9f:65:fa:c6:f6:c6:71:cb:cf:f0:57:8d:bf: 82:4d:42:d3:60:83:5b:b3:0e:7b:76:70:9a:0d:d3: 42:ac:c3:67:3c:7b:63:42:61:a1:c7:e9:c6:e2:9d: 6d:de:04:f3:f4:2f:72:87:6d:71:ac:db:06:73:80: b2:82:55:1f:a6:50:82:ac:59:89:1b:3b:d7:78:04: 42:84:49:54:1a:f2:ce:54:56:29:b5:74:ab:55:0b: a3:92:c8:65:70:68:0f:db:74:b6:c2:78:3b:af:4b: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3D:D3:3F:B0:B6:15:8D:9B:4D:A8:E2:62:8F:AF:2F:1D:E3:F5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 172.103.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:14:13:ac:24:d6:dc:f8:1e:dd:a3:4d:02:ba:7d:cb:cb:6f: a9:e0:85:a9:70:61:13:96:85:53:7b:c7:92:11:a0:63:76:73: 18:d2:86:92:63:62:46:25:c8:6a:52:b4:af:72:27:ff:db:c6: a1:d8:a4:86:37:af:ef:29:ae:ca:e5:22:e3:1b:95:8c:dc:89: 22:b2:8d:81:7a:7a:16:00:7e:d4:1b:eb:e5:a3:44:1e:43:80: 6a:9c:52:78:21:4c:6c:5e:93:06:e0:f1:3c:31:25:47:c5:cc: 30:7b:77:cf:a2:03:5a:0c:51:db:85:83:21:68:64:d9:9f:9a: 2e:8f:f4:9e:98:de:b0:b8:2f:63:ad:25:ed:34:f5:7c:9d:ec: 8d:b5:06:c1:fd:5f:07:95:9f:71:b6:fe:26:af:8a:89:7e:ee: a6:bd:25:dd:44:07:dd:51:eb:15:0c:7f:b7:aa:a6:20:38:5e: 97:9d:db:a9:8d:09:96:c4:21:be:e7:46:67:02:c7:76:44:d2: ca:8d:d1:d5:93:37:e7:e1:f3:60:1b:50:f0:81:be:65:b1:01: 36:f8:55:c9:b9:75:43:70:1e:0d:98:ce:69:4f:b8:fe:75:62: 94:8c:28:25:cc:25:82:bc:90:75:1f:0e:eb:3e:8e:8a:a3:06: 39:16:54:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjTdl2CEPGxqHZP8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDIwOTE0MDA1MVoXDTI1MDUxMDEzMDA1MVowLzEtMCsGA1UEAxMk NjRhNTNiZDgtMzZhZS00MjMwLWJlOGQtNWE3ZTQ3N2U4NzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFOixJbUAKtacS1TxxHWoLAko39Y2svuBOc9 jKDnV8qwwQ/8RrPcmC5h+7MkjRSXekfspxdVV77LR266D5uAp2KIDj/BBdFv/dEK KkQJt8/Br8SM/oPdfcrvovp/cmTjz3ITUzdEC3CRB7BOs+xExlSU+SIm0lJhG7Mz gFxCVqLiSIOKDH/QU+lozJg9G52nvNRga8erSJ9l+sb2xnHLz/BXjb+CTULTYINb sw57dnCaDdNCrMNnPHtjQmGhx+nG4p1t3gTz9C9yh21xrNsGc4CyglUfplCCrFmJ GzvXeARChElUGvLOVFYptXSrVQujkshlcGgP23S2wng7r0s63wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP490z+wthWNm02o4mKPry8d4/UxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMGI4YTFlODAtMjU3Yi0z ZDNiLWE0NTQtNTVjNTI3NDA5ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0UE6wk1tz4Ht2jTQK6fcvLb6nghalwYROWhVN7x5IRoGN2cxjShpJj YkYlyGpStK9yJ//bxqHYpIY3r+8prsrlIuMblYzciSKyjYF6ehYAftQb6+WjRB5D gGqcUnghTGxekwbg8TwxJUfFzDB7d8+iA1oMUduFgyFoZNmfmi6P9J6Y3rC4L2Ot Je009Xyd7I21BsH9XweVn3G2/iaviol+7qa9Jd1EB91R6xUMf7eqpiA4Xped26mN CZbEIb7nRmcCx3ZE0sqN0dWTN+fh82AbUPCBvmWxATb4Vcm5dUNwHg2YzmlPuP51 YpSMKCXMJYK8kHUfDus+joqjBjkWVME= -----END CERTIFICATE-----Generated at Sun Apr 27 13:07:18 2025 by rpki-client