$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa File: 24e50275-08d8-38a2-a053-3a76fa2cbac3.roa (raw, json) Hash identifier: 9xMOpDyLWgKJj+ixwJFkjBRaT587HTTQ83j0W4vwT4c= Subject key identifier: E8:25:72:76:56:FC:A0:1C:F5:82:AC:09:C5:FA:51:6F:C6:6A:4F:0E Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F43285849393E6ED27B5BB310C7E04680 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 396982 IP address blocks: 161.38.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:6e:d2:7b:5b:b3:10:c7:e0:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=788ad52e-b951-42cd-b3d1-13ce6bee6cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:71:02:05:6d:7d:d4:94:0a:60:18:57:f1: de:b8:cc:7b:90:1c:67:e4:93:4e:4f:c4:b7:9c:ef: b6:36:41:ea:dd:dc:ff:c8:70:43:e1:38:75:9c:72: 7b:97:7b:c5:97:68:af:12:0c:6c:20:7c:78:a6:9a: f5:34:dc:63:3e:a1:34:df:99:06:6c:f5:77:97:06: 8e:33:1c:f0:bf:f9:9c:19:e4:25:77:92:28:25:8e: 49:51:df:8a:4f:f5:dd:da:93:df:c8:71:b4:3e:ba: df:ab:9c:36:98:14:7a:a1:1c:1b:5d:68:73:af:7d: ed:36:8a:95:5a:e8:e0:27:d8:37:ba:5e:f8:e4:9d: 0e:58:a3:13:bf:b7:6b:ab:6e:90:6f:f3:ff:88:91: e1:8a:0b:a1:d9:9e:90:89:fc:e4:08:40:ad:7d:41: 91:6f:47:49:5d:8a:56:d0:db:9e:89:47:4d:20:3b: 01:ca:41:9e:ae:89:79:56:fc:91:6a:29:3c:ee:01: c4:31:04:53:1e:b6:76:1a:fc:6a:e9:ab:98:f4:84: d7:5e:c3:a8:ab:7e:d8:b7:d0:d8:d7:9f:01:9c:62: c1:a7:22:9e:38:58:47:1f:45:55:86:cc:f6:8b:ec: a6:42:a3:bc:77:48:cb:10:a0:02:09:64:3d:75:dd: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:25:72:76:56:FC:A0:1C:F5:82:AC:09:C5:FA:51:6F:C6:6A:4F:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv4: 161.38.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b0:b3:f7:fc:5f:ba:99:e6:a5:ff:65:45:cb:b5:6b:d2:75: b8:36:98:92:de:f6:be:7c:d0:00:14:20:46:bb:2b:07:6a:8d: 1f:62:af:43:44:00:e1:ac:56:8a:4a:d5:90:85:14:98:f7:35: 3a:6e:e0:39:e7:df:45:5b:6f:ad:16:ef:d7:19:d1:41:ee:28: a3:68:94:ae:c2:9a:1c:35:9b:ff:b7:34:5a:5c:56:7f:8b:f3: 5f:b2:60:5f:f4:61:8f:ae:f0:f2:ae:85:5e:13:73:a4:18:e8: 0f:7b:d5:95:0b:bc:05:13:88:db:ef:89:fd:e9:1a:ed:43:76: 31:ea:2f:49:21:ca:e7:e4:d6:a4:1f:8d:23:00:04:fd:97:aa: 96:c3:80:64:27:68:48:70:ef:c8:69:c3:f9:50:03:c1:5a:94: 5d:83:cd:74:b9:b8:8e:62:78:a1:28:df:db:95:62:fb:da:5a: 3a:c1:f4:b0:89:28:40:65:f5:82:db:6c:d3:08:1f:fb:4b:8d: 0f:1b:0c:71:23:dc:df:54:36:b4:1f:80:d4:3c:c2:aa:a0:05: 94:8d:f0:7d:95:a7:a4:79:e3:7a:db:2d:74:d0:40:0a:52:e4: 80:20:f7:7d:5d:17:5d:7a:a9:e7:ba:32:cb:1f:d7:a2:88:c9: 59:af:24:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pm7Se1uzEMfgRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk Nzg4YWQ1MmUtYjk1MS00MmNkLWIzZDEtMTNjZTZiZWU2Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwNxAgVtfdSUCmAYV/HeuMx7kBxn5JNOT8S3 nO+2NkHq3dz/yHBD4Th1nHJ7l3vFl2ivEgxsIHx4ppr1NNxjPqE035kGbPV3lwaO Mxzwv/mcGeQld5IoJY5JUd+KT/Xd2pPfyHG0Prrfq5w2mBR6oRwbXWhzr33tNoqV WujgJ9g3ul745J0OWKMTv7drq26Qb/P/iJHhiguh2Z6QifzkCECtfUGRb0dJXYpW 0NueiUdNIDsBykGerol5VvyRaik87gHEMQRTHrZ2Gvxq6auY9ITXXsOoq37Yt9DY 158BnGLBpyKeOFhHH0VVhsz2i+ymQqO8d0jLEKACCWQ9dd1PHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOglcnZW/KAc9YKsCcX6UW/Gak8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMjRlNTAyNzUtMDhkOC0z OGEyLWEwNTMtM2E3NmZhMmNiYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6ws/f8X7qZ5qX/ZUXLtWvSdbg2mJLe9r580AAUIEa7KwdqjR9ir0NE AOGsVopK1ZCFFJj3NTpu4Dnn30Vbb60W79cZ0UHuKKNolK7Cmhw1m/+3NFpcVn+L 81+yYF/0YY+u8PKuhV4Tc6QY6A971ZULvAUTiNvvif3pGu1DdjHqL0khyufk1qQf jSMABP2XqpbDgGQnaEhw78hpw/lQA8FalF2DzXS5uI5ieKEo39uVYvvaWjrB9LCJ KEBl9YLbbNMIH/tLjQ8bDHEj3N9UNrQfgNQ8wqqgBZSN8H2Vp6R543rbLXTQQApS 5IAg931dF116qee6Mssf16KIyVmvJOM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:52 2025 by rpki-client