$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa File: 8f29609a-346f-3347-abbf-261ce08ce477.roa (raw, json) Hash identifier: 0O9ToyJV+9UU3V4WYrsqeecDQfTJUT1nl4uoGHuwDBQ= Subject key identifier: 6F:55:B2:23:95:B0:67:DD:AB:E3:2C:67:4A:D1:48:03:2A:40:7E:39 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F43285849F2E52940EF081A2AF819BA80 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 161.129.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:29:40:ef:08:1a:2a:f8:19:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=59e6e687-5da6-436f-bb81-2901b94e6b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:ac:96:eb:56:bc:d2:d6:7a:25:04:d5:34: 00:b5:ee:02:de:d3:1f:2c:87:b0:e7:4b:0a:6c:99: b0:9c:e2:bc:a6:5e:b0:59:74:c6:a3:d5:86:d6:af: 1b:97:72:bd:d8:23:80:04:ff:d6:06:c2:c4:b4:cd: 40:2c:8a:81:10:4a:8e:cf:76:49:5e:7c:90:1d:b4: f4:94:e7:40:b8:5e:e1:c4:98:f8:25:21:ba:bf:ad: 80:82:01:16:17:55:ce:1c:f4:03:e5:3e:33:54:0f: d5:39:94:ab:e1:b3:64:0d:c9:87:02:80:a8:34:39: 70:7e:1c:7c:09:08:f5:82:9b:5b:55:37:1c:ec:6b: af:f9:bd:d2:c6:f4:7e:54:3b:ee:ad:20:e1:39:ce: 0e:4e:c3:b1:92:25:07:e5:1c:e3:2a:a2:5f:9d:6f: dd:61:05:f1:71:20:1b:48:e1:6d:cb:25:93:5c:24: fc:92:59:fa:3a:56:90:3a:1f:f6:0a:7c:73:2b:d5: a1:b1:f6:2e:c7:83:4e:b7:0f:a5:7b:78:30:42:34: 54:70:e5:16:e3:a9:85:44:ca:a1:54:d7:f6:6a:a2: 30:39:41:48:cc:a9:22:19:5d:1c:fc:29:5e:50:62: 10:fb:af:ca:86:04:d2:1d:2c:f3:d1:c2:a4:61:06: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:55:B2:23:95:B0:67:DD:AB:E3:2C:67:4A:D1:48:03:2A:40:7E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8f29609a-346f-3347-abbf-261ce08ce477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fc:1f:c2:27:ea:ae:be:3d:c8:69:92:bf:34:f0:52:b5:05: c8:5c:7d:ce:c2:45:58:26:71:1c:bf:23:a1:94:79:ff:dc:50: 11:23:5c:e6:fb:d9:c7:49:19:ea:2d:9f:8d:e9:18:a6:3a:6e: de:82:45:19:db:8c:17:4a:28:6d:c9:25:aa:06:c7:0c:74:97: 12:14:e7:df:2a:3e:b8:4f:12:97:a8:8f:b2:e0:cd:de:8d:e7: 1b:4d:cc:de:37:fb:43:0c:e8:21:f3:13:5f:15:86:3e:c7:e8: 06:e9:b8:fb:35:18:3b:15:1b:a9:f0:59:8b:c3:ce:18:02:3d: 2d:8b:ad:4a:4d:63:61:6a:e4:4f:68:b1:bc:2d:2d:01:da:95: 15:20:a3:ed:8d:29:f6:86:91:15:61:ec:14:0f:bc:55:40:dc: 3c:c0:bc:04:24:90:3c:16:09:74:9f:59:4d:7b:4b:8b:ab:ef: 40:10:40:c5:b1:75:4e:7b:82:2e:60:83:83:cd:4c:77:d3:c7: b1:99:3e:31:42:cc:b2:72:27:9e:bc:df:29:86:33:e9:81:98: 43:74:88:74:fd:eb:3c:e1:e6:b9:44:2b:2d:2b:fc:eb:86:c9: 09:5d:1a:14:99:d6:06:c3:74:eb:63:e2:94:ca:e7:0a:dc:4f: 38:01:07:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5SlA7wgaKvgZuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NTllNmU2ODctNWRhNi00MzZmLWJiODEtMjkwMWI5NGU2YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq++slutWvNLWeiUE1TQAte4C3tMfLIew50sK bJmwnOK8pl6wWXTGo9WG1q8bl3K92COABP/WBsLEtM1ALIqBEEqOz3ZJXnyQHbT0 lOdAuF7hxJj4JSG6v62AggEWF1XOHPQD5T4zVA/VOZSr4bNkDcmHAoCoNDlwfhx8 CQj1gptbVTcc7Guv+b3SxvR+VDvurSDhOc4OTsOxkiUH5RzjKqJfnW/dYQXxcSAb SOFtyyWTXCT8kln6OlaQOh/2CnxzK9WhsfYux4NOtw+le3gwQjRUcOUW46mFRMqh VNf2aqIwOUFIzKkiGV0c/CleUGIQ+6/KhgTSHSzz0cKkYQbl8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9VsiOVsGfdq+MsZ0rRSAMqQH45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvOGYyOTYwOWEtMzQ2Zi0z MzQ3LWFiYmYtMjYxY2UwOGNlNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB78H8In6q6+Pchpkr808FK1Bchcfc7CRVgmcRy/I6GUef/cUBEjXOb7 2cdJGeotn43pGKY6bt6CRRnbjBdKKG3JJaoGxwx0lxIU598qPrhPEpeoj7Lgzd6N 5xtNzN43+0MM6CHzE18Vhj7H6AbpuPs1GDsVG6nwWYvDzhgCPS2LrUpNY2Fq5E9o sbwtLQHalRUgo+2NKfaGkRVh7BQPvFVA3DzAvAQkkDwWCXSfWU17S4ur70AQQMWx dU57gi5gg4PNTHfTx7GZPjFCzLJyJ5683ymGM+mBmEN0iHT96zzh5rlEKy0r/OuG yQldGhSZ1gbDdOtj4pTK5wrcTzgBBy4= -----END CERTIFICATE-----Generated at Tue Jul 1 20:27:33 2025 by rpki-client