$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/a508865e-49b5-3e38-9f07-6d36278922e2.roa File: a508865e-49b5-3e38-9f07-6d36278922e2.roa (raw, json) Hash identifier: SP4Xtx/cLRHbHD28FLX4krLO0QR13tMSWzfFvGuM8Tg= Subject key identifier: 3D:30:14:38:5C:AD:E7:49:D3:F9:37:C6:A6:8F:51:D1:35:CC:A3:7B Certificate issuer: /CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b Certificate serial: 010D0C9F43285849BC8A766E520789CFAF6B5E40 Authority key identifier: CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/a508865e-49b5-3e38-9f07-6d36278922e2.roa Signing time: Sun 04 May 2025 01:44:47 +0000 ROA not before: Sun 04 May 2025 01:44:47 +0000 ROA not after: Sat 02 Aug 2025 01:44:47 +0000 asID: 399122 IP address blocks: 161.115.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:8a:76:6e:52:07:89:cf:af:6b:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b2e64da-0cf1-4baf-be94-c216b2b81d1b Validity Not Before: May 4 01:44:47 2025 GMT Not After : Aug 2 01:44:47 2025 GMT Subject: CN=4fe6f217-81bc-4afe-8342-1b23c69e4046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:e8:b2:bf:4f:8c:19:7c:2f:a1:c0:51:23: a7:87:f8:54:9d:04:30:60:21:12:99:98:65:08:5d: 15:53:a9:10:b9:d9:af:43:0c:b6:f0:49:0a:02:c5: e8:f7:80:f9:2b:0e:c7:66:12:4f:2b:cb:05:8b:88: e2:03:08:83:16:e1:d8:c8:f3:e8:1a:a0:61:fd:57: 5d:02:f4:f8:88:82:bf:75:12:be:93:f7:86:63:ef: fd:eb:a2:f1:b2:5a:c9:02:da:f3:9f:ee:f1:7a:f0: f1:a7:8d:2e:2e:3d:7a:9a:e4:57:da:1f:cd:56:c1: 5d:41:10:f0:a7:4f:62:73:4b:56:63:96:fc:75:e7: 91:1b:1b:5e:a8:d7:74:32:49:30:14:07:82:22:e8: 0b:fc:71:f9:a7:92:98:02:4f:5b:a7:c0:df:96:5b: 3d:d5:94:1d:ca:25:b1:a6:93:9c:7b:78:89:0a:89: 87:ac:32:6e:86:69:73:a0:0e:b6:1d:fd:80:27:97: ed:dc:35:48:2c:8c:cb:1a:a5:54:4f:8b:d2:77:c5: d7:37:8a:f9:c4:5a:28:a4:cf:48:82:0a:d8:87:2a: 13:5e:8f:21:e5:b9:8b:e3:33:56:31:2e:6c:1e:42: 03:eb:7e:42:8f:0a:7f:a6:52:07:d3:40:93:9a:87: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:30:14:38:5C:AD:E7:49:D3:F9:37:C6:A6:8F:51:D1:35:CC:A3:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/a508865e-49b5-3e38-9f07-6d36278922e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.crl X509v3 Authority Key Identifier: keyid:CA:57:B1:59:36:C2:FE:71:4D:AF:90:51:CA:EE:B4:BD:C4:08:AB:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b2e64da-0cf1-4baf-be94-c216b2b81d1b.cer sbgp-ipAddrBlock: critical IPv4: 161.115.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:44:b2:b8:b8:6f:8d:ff:94:6b:0a:e9:0d:f5:63:b9:7d:97: a2:6b:ae:6e:6b:19:1c:67:5b:30:61:8e:60:34:a9:7b:66:c4: 1d:20:7e:3e:28:60:30:ae:1b:34:34:63:e8:d9:05:d8:1e:86: c4:25:e9:ed:e4:c7:93:90:d1:d7:d5:7b:89:88:d9:28:e8:b1: 19:9a:7e:f3:df:e2:94:03:e4:d6:57:0b:9e:6e:82:2b:2c:07: f1:3b:01:c2:68:86:80:c6:a1:04:4f:13:93:17:80:78:15:77: a5:4c:7a:c9:92:25:23:dd:a0:2c:41:5c:17:2a:e5:02:bf:f1: 8a:8d:39:51:67:3b:38:2f:63:ec:d0:b9:24:35:f7:b6:2d:23: f1:47:3b:bb:b8:85:ec:63:70:25:57:14:08:82:db:d4:22:77: 50:74:70:0f:45:68:89:d0:53:d5:4c:ef:5c:86:c7:5b:7e:13: dc:14:cd:98:02:be:d5:1c:0c:02:ce:b3:20:61:aa:60:46:71: fd:57:56:54:9d:ef:18:3a:5f:98:59:76:a1:0a:9b:0b:96:90: 1a:8d:cf:29:fe:72:50:f9:12:62:a6:53:85:d8:32:7d:84:39: 79:39:c6:1a:e5:77:7f:7d:4c:71:d8:84:db:88:b9:0f:c4:bb: 6f:f5:74:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8inZuUgeJz69rXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyZTY0ZGEtMGNmMS00YmFmLWJlOTQtYzIxNmIyYjgx ZDFiMB4XDTI1MDUwNDAxNDQ0N1oXDTI1MDgwMjAxNDQ0N1owLzEtMCsGA1UEAxMk NGZlNmYyMTctODFiYy00YWZlLTgzNDItMWIyM2M2OWU0MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Posr9PjBl8L6HAUSOnh/hUnQQwYCESmZhl CF0VU6kQudmvQwy28EkKAsXo94D5Kw7HZhJPK8sFi4jiAwiDFuHYyPPoGqBh/Vdd AvT4iIK/dRK+k/eGY+/966LxslrJAtrzn+7xevDxp40uLj16muRX2h/NVsFdQRDw p09ic0tWY5b8deeRGxteqNd0MkkwFAeCIugL/HH5p5KYAk9bp8Dflls91ZQdyiWx ppOce3iJComHrDJuhmlzoA62Hf2AJ5ft3DVILIzLGqVUT4vSd8XXN4r5xFoopM9I ggrYhyoTXo8h5bmL4zNWMS5sHkID635Cjwp/plIH00CTmod7jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0wFDhcredJ0/k3xqaPUdE1zKN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYjJl NjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2YjJiODFkMWIvYTUwODg2NWUtNDliNS0z ZTM4LTlmMDctNmQzNjI3ODkyMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGIyZTY0ZGEtMGNmMS00YmFmLWJl OTQtYzIxNmIyYjgxZDFiLzBiMmU2NGRhLTBjZjEtNGJhZi1iZTk0LWMyMTZiMmI4 MWQxYi5jcmwwHwYDVR0jBBgwFoAUylexWTbC/nFNr5BRyu60vcQIq5cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYjJlNjRkYS0wY2YxLTRiYWYtYmU5NC1jMjE2 YjJiODFkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoXPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZEsri4b43/lGsK6Q31Y7l9l6Jrrm5rGRxnWzBhjmA0qXtmxB0gfj4o YDCuGzQ0Y+jZBdgehsQl6e3kx5OQ0dfVe4mI2SjosRmafvPf4pQD5NZXC55ugiss B/E7AcJohoDGoQRPE5MXgHgVd6VMesmSJSPdoCxBXBcq5QK/8YqNOVFnOzgvY+zQ uSQ197YtI/FHO7u4hexjcCVXFAiC29Qid1B0cA9FaInQU9VM71yGx1t+E9wUzZgC vtUcDALOsyBhqmBGcf1XVlSd7xg6X5hZdqEKmwuWkBqNzyn+clD5EmKmU4XYMn2E OXk5xhrld399THHYhNuIuQ/Eu2/1dBQ= -----END CERTIFICATE-----Generated at Fri May 9 07:49:33 2025 by rpki-client