$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b48b6092-fe7a-3630-8384-578a4e294be0.roa File: b48b6092-fe7a-3630-8384-578a4e294be0.roa (raw, json) Hash identifier: YE8m4Qav4kqYd+pWZpzOGNaCt4AEhyXQ4M/YKYTJAZE= Subject key identifier: 52:BD:FB:D0:FE:A2:6C:09:55:91:5B:FC:23:CC:A7:0F:21:88:38:66 Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F43285849393E6EE7A3355AFC6FD6F180 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b48b6092-fe7a-3630-8384-578a4e294be0.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 395213 IP address blocks: 161.38.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:6e:e7:a3:35:5a:fc:6f:d6:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=8da4a62e-5616-4602-83ab-b3daaab74ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:b0:da:66:32:f0:5c:dd:d1:ff:a9:55:d7: 5f:dc:be:76:7c:92:9f:67:50:38:39:64:d3:78:05: c4:7e:cf:22:86:1e:6e:98:b1:6c:81:c4:7a:52:78: a1:60:71:02:29:9d:7d:25:62:8d:ee:94:46:97:f5: 4d:8a:34:f1:60:cd:15:e9:dd:93:15:1b:27:56:74: fc:eb:ab:21:eb:96:5d:14:5f:9f:a4:75:b4:21:32: 87:5a:e8:4b:cd:d6:ee:d8:ff:f9:43:bc:80:d5:fb: 77:71:06:43:21:71:3d:06:14:c9:75:e2:f4:90:1f: 65:a1:ad:1c:c8:b5:1a:17:8a:f0:ea:6f:f5:86:9a: 00:82:a2:e2:66:25:53:76:3e:23:f2:10:17:29:0e: 92:54:91:e6:b5:42:2e:91:d3:af:23:06:a9:ec:6b: 34:7b:3e:6a:de:53:b5:a1:fb:a1:65:44:7b:b7:fc: a2:69:e7:15:75:f1:b0:14:44:4e:ef:15:f4:a1:b7: 33:46:f0:bb:e4:56:2b:4a:6a:54:2a:7e:c4:6d:d0: 03:5e:6c:9f:ef:e4:cc:74:8c:96:a6:0b:51:a9:83: 94:34:35:69:93:1b:0f:d0:a2:b4:9b:ec:5a:7e:3b: d6:15:ec:59:37:54:21:28:36:c9:c0:24:3d:2c:ae: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BD:FB:D0:FE:A2:6C:09:55:91:5B:FC:23:CC:A7:0F:21:88:38:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/b48b6092-fe7a-3630-8384-578a4e294be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv4: 161.38.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b9:4a:90:64:25:29:89:c6:52:da:4e:cc:03:91:28:ef:94: d3:49:18:8e:39:05:c0:00:f6:d6:cc:59:33:f5:e3:49:37:a6: 42:5d:2d:18:a3:93:86:4b:c1:67:12:3d:30:6e:f0:a4:3a:e4: c3:db:77:0d:9f:15:63:62:d4:4c:16:0c:4b:03:50:55:7c:12: a1:12:37:c4:22:b3:cf:01:89:57:28:6e:dc:31:ec:14:a8:a3: 28:bf:9f:a2:8b:56:94:fd:fb:79:16:20:d9:cf:29:07:db:65: 7b:0f:04:81:b0:00:ae:61:aa:f1:c6:58:d0:98:4b:bf:2b:cf: cc:56:80:6c:87:cc:61:da:61:e0:72:b6:d8:f0:b9:20:19:ab: b6:79:6f:48:23:54:0a:de:77:0a:00:14:70:98:57:c5:b0:5a: 18:89:32:4f:5f:76:f0:0e:de:88:a9:93:ad:e3:28:bb:18:ed: dc:e8:28:e8:00:39:96:ee:ef:b3:55:c8:07:2a:7f:50:7a:d7: 90:d3:a5:77:89:c5:2d:b0:2e:ab:e0:48:84:25:95:3b:92:93: 12:a3:ec:8e:6b:23:29:dd:bb:f7:f1:39:6f:7f:12:c0:14:21: 3e:bd:ef:22:3e:e0:cd:6c:8a:15:0a:85:29:69:c3:8e:c7:7e: a1:e6:32:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pm7nozVa/G/W8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk OGRhNGE2MmUtNTYxNi00NjAyLTgzYWItYjNkYWFhYjc0Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIqw2mYy8Fzd0f+pVddf3L52fJKfZ1A4OWTT eAXEfs8ihh5umLFsgcR6UnihYHECKZ19JWKN7pRGl/VNijTxYM0V6d2TFRsnVnT8 66sh65ZdFF+fpHW0ITKHWuhLzdbu2P/5Q7yA1ft3cQZDIXE9BhTJdeL0kB9loa0c yLUaF4rw6m/1hpoAgqLiZiVTdj4j8hAXKQ6SVJHmtUIukdOvIwap7Gs0ez5q3lO1 ofuhZUR7t/yiaecVdfGwFERO7xX0obczRvC75FYrSmpUKn7EbdADXmyf7+TMdIyW pgtRqYOUNDVpkxsP0KK0m+xafjvWFexZN1QhKDbJwCQ9LK760QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK9+9D+omwJVZFb/CPMpw8hiDhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvYjQ4YjYwOTItZmU3YS0z NjMwLTgzODQtNTc4YTRlMjk0YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC5SpBkJSmJxlLaTswDkSjvlNNJGI45BcAA9tbMWTP140k3pkJdLRij k4ZLwWcSPTBu8KQ65MPbdw2fFWNi1EwWDEsDUFV8EqESN8Qis88BiVcobtwx7BSo oyi/n6KLVpT9+3kWINnPKQfbZXsPBIGwAK5hqvHGWNCYS78rz8xWgGyHzGHaYeBy ttjwuSAZq7Z5b0gjVAredwoAFHCYV8WwWhiJMk9fdvAO3oipk63jKLsY7dzoKOgA OZbu77NVyAcqf1B615DTpXeJxS2wLqvgSIQllTuSkxKj7I5rIyndu/fxOW9/EsAU IT697yI+4M1sihUKhSlpw47HfqHmMog= -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:29 2025 by rpki-client