$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97e6a902-2d91-3951-aad2-d20e3d37c707.roa File: 97e6a902-2d91-3951-aad2-d20e3d37c707.roa (raw, json) Hash identifier: Ti8xW/zCGizPXHg9zMtfwCCbqVMsLlln3VzTVUkMuMc= Subject key identifier: F3:C4:E1:AC:5D:4F:F2:50:4B:18:3E:7C:71:52:62:8A:1A:7C:24:6F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849B9AA091AED4D9747F8920A80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97e6a902-2d91-3951-aad2-d20e3d37c707.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 161.184.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:09:1a:ed:4d:97:47:f8:92:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=72e78d79-ca36-48d0-ad4b-45ec0f00fa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:43:a0:3a:dd:03:28:69:32:cc:28:04:13: 64:d8:39:03:e5:97:89:54:59:d0:2c:52:34:3b:79: 12:c6:89:02:b6:a5:ca:f3:47:1a:05:b4:25:b7:ad: 87:e3:25:18:9a:ea:07:f9:f3:a9:65:91:ae:19:99: db:0a:62:f8:1c:83:8a:ea:14:cc:f8:62:93:c7:fa: 68:57:c0:3d:fe:b7:ba:af:56:4e:22:6d:e1:95:07: dc:c2:8e:46:74:50:0a:22:5e:9f:87:de:be:ec:2a: fb:12:af:3b:85:ff:de:31:c8:b6:86:f1:f8:a5:82: 44:de:ed:f8:41:9f:af:ae:7e:c4:bf:ff:54:02:1e: 2a:ba:69:e5:bf:b1:f6:9a:54:1e:92:e5:e2:68:84: ad:3d:2d:8b:54:89:b7:f4:fa:4d:7d:28:b3:b8:b3: 47:87:dd:62:01:ab:21:eb:d5:ca:82:2c:10:d9:5a: 91:9a:f5:f4:a8:08:c7:15:c4:16:fd:9f:39:de:c8: b6:ac:22:a9:e8:c9:08:e8:40:0b:30:05:79:27:b6: 44:f3:9e:41:64:d6:56:6b:54:23:e7:d3:21:ef:88: f9:9d:ca:66:28:3a:a2:fe:14:2b:89:6f:38:74:bd: b5:57:de:26:19:ef:21:b4:9f:df:37:80:ac:1a:19: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C4:E1:AC:5D:4F:F2:50:4B:18:3E:7C:71:52:62:8A:1A:7C:24:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97e6a902-2d91-3951-aad2-d20e3d37c707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 161.184.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e5:3d:94:29:2e:e9:d7:c7:ae:a4:56:5e:62:88:0a:94:7f: e0:be:f7:9a:8d:45:09:4e:e3:a0:18:34:8a:37:ea:cf:94:13: 59:25:f7:5c:ae:1e:4f:71:6a:b8:be:f5:f4:e9:01:a6:a5:df: 04:8e:8e:fc:75:59:d2:ae:ea:56:c9:40:0f:11:b6:85:4e:d6: ef:bb:0d:ca:17:b1:82:0c:34:5d:46:12:e0:aa:7f:8c:4e:75: fa:54:bb:3a:de:3d:d4:4a:48:50:1b:4b:d5:d4:7f:cf:22:a6: 79:39:ad:e0:86:53:74:9d:21:4e:66:af:c7:ee:ee:6e:cb:62: b6:19:3b:51:da:29:64:f1:38:fc:e6:8d:b6:03:23:a8:e5:50: d5:db:34:ab:c8:02:52:24:30:c3:c0:1e:41:4e:88:ef:8a:07: 11:9e:46:37:52:b9:18:7f:76:62:d1:57:de:68:a5:b2:e5:dc: e7:19:a2:ae:3e:35:ad:e7:d9:f6:81:17:b4:17:c0:4d:b7:6e: 8f:bf:2c:be:28:e5:91:ec:41:cd:e1:a0:5d:e6:7c:ed:6d:8b: 69:8a:4e:fd:c3:ed:90:bb:4e:29:4b:77:75:20:50:da:72:3e: 84:3f:0b:28:df:23:b8:45:c3:6f:ac:a0:aa:c7:f2:c4:fb:0a: 1e:b8:8a:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgka7U2XR/iSCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk NzJlNzhkNzktY2EzNi00OGQwLWFkNGItNDVlYzBmMDBmYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrpDoDrdAyhpMswoBBNk2DkD5ZeJVFnQLFI0 O3kSxokCtqXK80caBbQlt62H4yUYmuoH+fOpZZGuGZnbCmL4HIOK6hTM+GKTx/po V8A9/re6r1ZOIm3hlQfcwo5GdFAKIl6fh96+7Cr7Eq87hf/eMci2hvH4pYJE3u34 QZ+vrn7Ev/9UAh4qumnlv7H2mlQekuXiaIStPS2LVIm39PpNfSizuLNHh91iAash 69XKgiwQ2VqRmvX0qAjHFcQW/Z853si2rCKp6MkI6EALMAV5J7ZE855BZNZWa1Qj 59Mh74j5ncpmKDqi/hQriW84dL21V94mGe8htJ/fN4CsGhnG2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPE4axdT/JQSxg+fHFSYooafCRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTdlNmE5MDItMmQ5MS0z OTUxLWFhZDItZDIwZTNkMzdjNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAobhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7lPZQpLunXx66kVl5iiAqUf+C+95qNRQlO46AYNIo36s+UE1kl91yu Hk9xari+9fTpAaal3wSOjvx1WdKu6lbJQA8RtoVO1u+7DcoXsYIMNF1GEuCqf4xO dfpUuzrePdRKSFAbS9XUf88ipnk5reCGU3SdIU5mr8fu7m7LYrYZO1HaKWTxOPzm jbYDI6jlUNXbNKvIAlIkMMPAHkFOiO+KBxGeRjdSuRh/dmLRV95opbLl3OcZoq4+ Na3n2faBF7QXwE23bo+/LL4o5ZHsQc3hoF3mfO1ti2mKTv3D7ZC7TilLd3UgUNpy PoQ/CyjfI7hFw2+soKrH8sT7Ch64ikY= -----END CERTIFICATE-----Generated at Sun May 11 01:49:57 2025 by rpki-client