$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa File: dc656332-f87a-3041-bd27-3d6a301f7e5c.roa (raw, json) Hash identifier: Z/sCHc3h98JdwbVfE9DrM3Y9MOA/R0D+zjJ5C+UIBBM= Subject key identifier: FE:A5:4E:B9:C7:B2:14:FE:67:20:B1:7D:16:EB:44:16:05:42:A7:99 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584A05F5BB0FCED4986F13721D2D Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa Signing time: Mon 28 Apr 2025 12:04:52 +0000 ROA not before: Mon 28 Apr 2025 12:04:52 +0000 ROA not after: Sun 27 Jul 2025 12:04:52 +0000 asID: 153371 IP address blocks: 161.129.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:f5:bb:0f:ce:d4:98:6f:13:72:1d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Apr 28 12:04:52 2025 GMT Not After : Jul 27 12:04:52 2025 GMT Subject: CN=4a677c42-fc84-495b-9cdc-1a084f39af38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2e:ae:0e:91:85:c5:46:e6:26:fd:05:d3:7a: bc:21:37:eb:04:6d:9d:d2:ae:57:b2:13:b1:96:78: 5a:d5:59:6c:42:c9:8b:67:37:45:c4:ad:68:0d:b4: 96:74:09:ca:3c:55:ab:06:2d:b9:b8:f6:9b:35:14: ba:1f:53:8c:94:aa:dd:0c:5a:3d:77:92:13:1d:32: 01:1d:4f:5e:69:a6:24:c4:7b:c3:16:c8:3a:b7:d1: 51:80:06:3e:bd:c6:e5:e5:a9:f7:bb:a5:ba:e2:66: 3d:50:77:b4:d4:1f:bd:0a:10:32:a0:80:0d:08:be: d7:f2:69:52:c8:29:ae:1b:d0:b8:e2:e5:c7:cb:a8: 56:db:41:90:2f:64:2e:e6:10:03:9e:80:72:24:7a: 11:97:2a:ba:05:ba:1f:5d:02:98:c3:9b:47:d7:3e: 1f:83:ab:51:af:e2:98:ac:8b:50:07:91:b3:62:05: 92:4d:b4:b9:4b:fa:aa:39:9d:db:4a:b7:84:a0:3e: 93:c1:a4:18:68:67:e5:5b:00:58:60:8c:78:3f:1d: 3c:83:ce:49:d6:56:94:81:ce:74:f7:ae:d9:2d:cc: db:e1:d5:9e:71:01:54:36:e4:41:49:d1:6f:39:f5: 6f:1e:60:6d:47:9e:f0:50:26:c6:b8:cf:a6:d5:b5: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A5:4E:B9:C7:B2:14:FE:67:20:B1:7D:16:EB:44:16:05:42:A7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/dc656332-f87a-3041-bd27-3d6a301f7e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7d:91:c0:c1:2e:99:58:c9:30:92:60:f9:ca:cb:f9:e4:b6: d1:a1:cd:4a:f5:33:69:26:d5:f6:4d:eb:fc:97:8e:28:f2:b6: cc:b0:0f:7b:00:c8:0b:5f:34:61:19:da:0c:00:76:49:0e:78: 73:b6:0b:c2:d2:81:66:60:69:a5:fb:98:19:8e:bf:83:62:0c: e2:b2:dc:98:3b:1b:fe:6d:d9:8a:6c:1e:87:78:11:71:a7:cd: bc:f7:3f:92:20:13:95:b9:06:14:52:ea:91:a7:11:8a:9f:48: cc:2b:7b:ae:d8:c5:94:49:75:14:85:9b:e9:97:9d:fd:d3:80: 6f:ec:ac:63:6b:50:95:76:38:dd:ac:b8:0e:85:ea:a5:34:41: b1:2e:e1:ff:77:95:ea:54:d7:c6:1f:3f:1c:1b:6d:c6:d4:40: ce:67:47:31:d6:85:a2:e6:28:6d:15:c9:5e:91:a1:45:91:88: ce:34:c4:6d:f3:86:75:83:7b:41:e1:78:45:91:bb:ed:c4:73: 7b:88:af:d8:45:d9:57:fb:67:68:df:56:58:82:39:fc:95:4e: a5:e5:3a:65:e5:44:ec:0c:bd:d1:f8:70:37:fd:87:56:29:1c: 31:f0:aa:b8:9d:4b:e4:c8:cc:e6:cc:65:b7:c4:15:f7:80:aa: d8:90:a9:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoF9bsPztSYbxNyHS0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDQyODEyMDQ1MloXDTI1MDcyNzEyMDQ1MlowLzEtMCsGA1UEAxMk NGE2NzdjNDItZmM4NC00OTViLTljZGMtMWEwODRmMzlhZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C6uDpGFxUbmJv0F03q8ITfrBG2d0q5XshOx lnha1VlsQsmLZzdFxK1oDbSWdAnKPFWrBi25uPabNRS6H1OMlKrdDFo9d5ITHTIB HU9eaaYkxHvDFsg6t9FRgAY+vcbl5an3u6W64mY9UHe01B+9ChAyoIANCL7X8mlS yCmuG9C44uXHy6hW20GQL2Qu5hADnoByJHoRlyq6BbofXQKYw5tH1z4fg6tRr+KY rItQB5GzYgWSTbS5S/qqOZ3bSreEoD6TwaQYaGflWwBYYIx4Px08g85J1laUgc50 967ZLczb4dWecQFUNuRBSdFvOfVvHmBtR57wUCbGuM+m1bWSfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6lTrnHshT+ZyCxfRbrRBYFQqeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZGM2NTYzMzItZjg3YS0z MDQxLWJkMjctM2Q2YTMwMWY3ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF9kcDBLplYyTCSYPnKy/nkttGhzUr1M2km1fZN6/yXjijytsywD3sA yAtfNGEZ2gwAdkkOeHO2C8LSgWZgaaX7mBmOv4NiDOKy3Jg7G/5t2YpsHod4EXGn zbz3P5IgE5W5BhRS6pGnEYqfSMwre67YxZRJdRSFm+mXnf3TgG/srGNrUJV2ON2s uA6F6qU0QbEu4f93lepU18YfPxwbbcbUQM5nRzHWhaLmKG0VyV6RoUWRiM40xG3z hnWDe0HheEWRu+3Ec3uIr9hF2Vf7Z2jfVliCOfyVTqXlOmXlROwMvdH4cDf9h1Yp HDHwqridS+TIzObMZbfEFfeAqtiQqWM= -----END CERTIFICATE-----Generated at Mon Jun 30 18:26:36 2025 by rpki-client