$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa File: 8854b722-19fe-3709-b8c9-baa21c86eb4a.roa (raw, json) Hash identifier: fGg5otCxzSEv/S7VW1Pq3IC6xpiqdrZlpLmgWVMggUY= Subject key identifier: 4D:C4:92:E9:BD:4D:1C:93:F6:CF:9E:CD:6E:B9:2E:F5:29:08:B6:EF Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F43285849ABB49C38C7D49489F4651AA0 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 161.199.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9c:38:c7:d4:94:89:f4:65:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=7a62a28b-fa22-4a39-99af-20ac6dbc056a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5f:73:e5:e3:77:39:a3:f9:6c:9f:dd:34:d9: e9:32:f8:d0:08:2e:37:5b:67:0c:ae:3e:6a:f9:a5: 24:34:e7:df:a4:b1:c0:89:b1:6e:81:86:3a:ae:e2: 7d:aa:dc:22:ee:d7:04:2d:7c:0d:d1:b2:bb:a8:4a: fc:a7:4e:47:a9:53:89:15:a5:29:cd:40:0d:24:b8: 4b:aa:60:bd:ed:a4:ac:4e:c7:9a:0f:7b:3b:83:bc: 84:c0:58:db:f7:6c:ea:26:9d:94:7f:23:5a:bf:98: e5:ba:6d:02:6d:b9:38:b1:57:4d:7b:61:8a:25:83: d3:52:46:92:d0:29:39:6e:04:cd:c0:16:53:78:28: 14:2b:df:0f:59:05:f3:3e:12:80:5b:c5:04:73:29: 57:0a:dc:a1:46:6c:93:98:af:2b:55:be:a6:d3:d6: 05:91:7e:42:b2:d8:8d:fa:b1:2b:b1:c8:e1:04:5c: eb:78:11:b1:ec:12:af:30:d4:65:d1:34:ef:a3:eb: 58:cb:c9:d4:77:b7:c0:fe:02:a7:0a:15:8e:5e:e4: 62:92:09:4b:92:b9:57:ce:7f:6c:cd:f8:51:27:11: e3:2c:a2:b9:2c:98:21:08:57:ce:99:bf:e1:0e:ce: 1a:9d:54:4f:48:54:af:8a:55:75:34:a7:b0:9e:be: 84:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C4:92:E9:BD:4D:1C:93:F6:CF:9E:CD:6E:B9:2E:F5:29:08:B6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 161.199.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:91:1b:20:1d:06:19:f0:93:7f:75:f7:6f:b7:85:dc:42:12: ec:e9:4c:04:24:53:d0:44:3b:ba:ee:7f:2f:be:06:17:b6:d7: d8:5d:60:c0:e4:56:d5:6f:c7:9d:55:85:de:5a:8c:06:2d:7f: a1:86:33:ad:e7:d5:42:54:2c:9d:9b:24:0c:4a:d7:67:b9:e5: 24:e7:2a:ac:bf:2c:92:55:f9:eb:a8:cc:53:cc:82:44:61:e5: 04:35:b3:73:87:af:0e:bc:8b:c9:5e:a6:9e:87:3f:c3:b4:2f: f4:d6:a7:c8:28:8d:43:c8:88:53:71:13:3e:bd:bb:08:46:35: 30:a0:7a:8f:fc:a8:85:ef:80:2c:17:f8:a4:4f:33:8e:4a:08: f3:cd:84:6c:ef:40:68:8a:e5:94:71:92:b3:e9:e8:10:89:c4: 3f:78:1e:d8:eb:a0:3c:06:e1:20:d0:b7:a9:0b:79:6e:ca:1b: 77:3b:cf:20:2e:fe:8d:1f:10:46:c5:00:b8:45:7e:ee:92:19: fd:00:d7:60:2e:d7:85:ef:ec:cb:c0:b9:90:ea:35:ed:1f:cb: 06:79:b9:4e:73:3d:c1:e0:0b:20:2e:2d:30:97:dd:69:b6:f6: a3:5b:b3:9f:56:db:6d:8a:02:96:b4:c5:f1:31:6c:0f:69:13: b1:f7:82:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJw4x9SUifRlGqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk N2E2MmEyOGItZmEyMi00YTM5LTk5YWYtMjBhYzZkYmMwNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF9z5eN3OaP5bJ/dNNnpMvjQCC43W2cMrj5q +aUkNOffpLHAibFugYY6ruJ9qtwi7tcELXwN0bK7qEr8p05HqVOJFaUpzUANJLhL qmC97aSsTseaD3s7g7yEwFjb92zqJp2UfyNav5jlum0Cbbk4sVdNe2GKJYPTUkaS 0Ck5bgTNwBZTeCgUK98PWQXzPhKAW8UEcylXCtyhRmyTmK8rVb6m09YFkX5CstiN +rErscjhBFzreBGx7BKvMNRl0TTvo+tYy8nUd7fA/gKnChWOXuRikglLkrlXzn9s zfhRJxHjLKK5LJghCFfOmb/hDs4anVRPSFSvilV1NKewnr6EiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3Ekum9TRyT9s+ezW65LvUpCLbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvODg1NGI3MjItMTlmZS0z NzA5LWI4YzktYmFhMjFjODZlYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBocf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+RGyAdBhnwk39192+3hdxCEuzpTAQkU9BEO7rufy++Bhe219hdYMDk VtVvx51Vhd5ajAYtf6GGM63n1UJULJ2bJAxK12e55STnKqy/LJJV+euozFPMgkRh 5QQ1s3OHrw68i8lepp6HP8O0L/TWp8gojUPIiFNxEz69uwhGNTCgeo/8qIXvgCwX +KRPM45KCPPNhGzvQGiK5ZRxkrPp6BCJxD94HtjroDwG4SDQt6kLeW7KG3c7zyAu /o0fEEbFALhFfu6SGf0A12Au14Xv7MvAuZDqNe0fywZ5uU5zPcHgCyAuLTCX3Wm2 9qNbs59W222KApa0xfExbA9pE7H3gvk= -----END CERTIFICATE-----Generated at Mon May 5 13:23:31 2025 by rpki-client