$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa File: e8c8d5c6-32bd-3820-990c-f66f5a163261.roa (raw, json) Hash identifier: dAYo1RxF4uNLwiqZfFI71q+ZX/ERGQYO9pb22eBhLoM= Subject key identifier: 28:CB:B0:FE:9D:48:FB:E0:0C:CF:97:24:AD:B6:A4:73:51:4E:9B:D8 Certificate issuer: /CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6 Certificate serial: 010D0C9F432858497279B6F0A66B98A4E3B70180 Authority key identifier: 91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 398038 IP address blocks: 161.38.62.0/23 maxlen: 24 192.173.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b6:f0:a6:6b:98:a4:e3:b7:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=c0a4ec50-24d8-40f1-a465-4955d63d22d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:0a:ef:63:78:1d:f7:58:bb:5e:52:f6:27: d7:08:8d:84:ea:36:69:9b:ea:37:c2:c3:d1:f4:3d: aa:69:21:a1:c0:0e:03:61:b5:3e:c7:c0:5a:22:72: 27:64:2c:1a:ec:ed:82:76:24:bb:68:4c:9d:1e:8c: b9:ed:63:a9:75:81:9f:42:d7:32:d3:c7:1b:9f:bc: 7e:06:17:a3:7d:e6:98:07:ef:3b:64:9e:18:b9:8c: 7e:b9:86:1f:b9:95:68:ec:84:5c:c6:39:7a:1e:74: 99:33:a9:e6:77:66:be:f2:6f:ca:09:9f:c6:35:91: 6e:ff:44:d9:18:4b:62:9b:4e:b4:7e:54:bc:fc:22: 3c:95:85:4e:e2:8f:ea:24:b4:6e:07:8e:d6:84:03: 63:d3:6a:03:83:00:a5:51:27:82:d9:11:0b:e9:91: e5:a5:80:9b:c7:84:df:5f:c9:f8:10:bc:b7:40:ec: 04:2d:b2:0a:4a:ef:16:81:84:3d:29:2d:e5:0d:4c: fc:82:00:cc:3e:99:d7:e3:11:b6:79:db:b7:8d:6d: f8:97:77:29:d7:70:09:a1:9e:26:cc:4e:24:b1:22: a0:02:de:3a:c3:e1:9f:d2:c1:dd:a1:9e:be:64:3e: ca:b7:eb:17:17:2f:e3:96:5b:e0:d5:b0:b9:8a:47: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CB:B0:FE:9D:48:FB:E0:0C:CF:97:24:AD:B6:A4:73:51:4E:9B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.crl X509v3 Authority Key Identifier: keyid:91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer sbgp-ipAddrBlock: critical IPv4: 161.38.62.0/23 192.173.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:70:7e:7d:1d:9d:db:41:86:dc:4d:c7:90:43:d5:bd:0d:d2: cc:d7:4d:3d:11:e9:55:df:d2:82:77:01:2b:92:38:af:cf:43: 64:58:59:7a:78:b9:ce:00:3d:aa:d7:c6:3e:a2:b2:92:b2:99: 96:61:62:14:66:f9:41:3d:5f:22:72:45:d9:d9:ab:65:4a:5a: 37:fa:e5:1f:95:04:92:6a:27:79:fb:04:a8:e6:e2:8a:9d:c0: b1:e3:c0:c6:5f:a5:34:9d:24:ee:b4:2a:52:cf:89:44:2e:d9: 5e:ec:15:bd:b4:bb:7e:1f:22:3b:e2:6f:84:f2:31:b1:ec:28: 3c:1d:47:ae:83:00:74:b8:5a:aa:a7:e6:b0:d5:64:cf:72:36: 7d:c4:ef:78:df:a7:ba:6a:c4:37:40:c3:ec:ed:75:01:16:97: d2:27:4b:e9:ce:98:40:a8:5f:36:88:52:f9:71:eb:6f:03:48: eb:b6:dd:5b:63:7a:6f:eb:5d:6c:25:1b:de:5b:92:a4:ad:cd: 22:24:40:5b:ac:61:e6:a0:27:b9:ea:e2:41:4f:38:2e:99:8a: 3d:e4:ac:94:14:c8:a4:04:47:39:12:1f:8e:57:a0:e3:4d:27: f1:84:90:c1:9b:c7:9f:e6:36:25:60:7c:ad:72:5b:29:55:0d: 2e:d0:b0:04 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElyebbwpmuYpOO3AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRjYWYwNzItMTk5ZC00M2EzLThiOGEtMGEyYjI4OTQw YWM2MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk YzBhNGVjNTAtMjRkOC00MGYxLWE0NjUtNDk1NWQ2M2QyMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQQK72N4HfdYu15S9ifXCI2E6jZpm+o3wsPR 9D2qaSGhwA4DYbU+x8BaInInZCwa7O2CdiS7aEydHoy57WOpdYGfQtcy08cbn7x+ BhejfeaYB+87ZJ4YuYx+uYYfuZVo7IRcxjl6HnSZM6nmd2a+8m/KCZ/GNZFu/0TZ GEtim060flS8/CI8lYVO4o/qJLRuB47WhANj02oDgwClUSeC2REL6ZHlpYCbx4Tf X8n4ELy3QOwELbIKSu8WgYQ9KS3lDUz8ggDMPpnX4xG2edu3jW34l3cp13AJoZ4m zE4ksSKgAt46w+Gf0sHdoZ6+ZD7Kt+sXFy/jllvg1bC5ikfI1wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCjLsP6dSPvgDM+XJK22pHNRTpvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZGNh ZjA3Mi0xOTlkLTQzYTMtOGI4YS0wYTJiMjg5NDBhYzYvZThjOGQ1YzYtMzJiZC0z ODIwLTk5MGMtZjY2ZjVhMTYzMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGRjYWYwNzItMTk5ZC00M2EzLThi OGEtMGEyYjI4OTQwYWM2LzBkY2FmMDcyLTE5OWQtNDNhMy04YjhhLTBhMmIyODk0 MGFjNi5jcmwwHwYDVR0jBBgwFoAUke2OiLD9kRVXrimqO8TepIdQPZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZGNhZjA3Mi0xOTlkLTQzYTMtOGI4YS0wYTJi Mjg5NDBhYzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoSY+AwQD wK2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI5wfn0dndtBhtxNx5BD1b0N0szXTT0R6VXf0oJ3ASuSOK/P Q2RYWXp4uc4AParXxj6ispKymZZhYhRm+UE9XyJyRdnZq2VKWjf65R+VBJJqJ3n7 BKjm4oqdwLHjwMZfpTSdJO60KlLPiUQu2V7sFb20u34fIjvib4TyMbHsKDwdR66D AHS4Wqqn5rDVZM9yNn3E73jfp7pqxDdAw+ztdQEWl9InS+nOmECoXzaIUvlx628D SOu23Vtjem/rXWwlG95bkqStzSIkQFusYeagJ7nq4kFPOC6Zij3krJQUyKQERzkS H45XoONNJ/GEkMGbx5/mNiVgfK1yWylVDS7QsAQ= -----END CERTIFICATE-----Generated at Fri May 9 21:47:18 2025 by rpki-client