$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/f4409881-0cc2-340a-9a24-65fd19f277e1.roa File: f4409881-0cc2-340a-9a24-65fd19f277e1.roa (raw, json) Hash identifier: kjLBEoy5QxaMUSbNOILSd8HGi2vAAaJLa4AQ9X8u+gQ= Subject key identifier: 91:0A:1B:5A:80:02:49:58:C5:C7:D0:C6:59:73:AC:48:CD:C9:34:15 Certificate issuer: /CN=b9879e55-95a8-4c84-be43-498c51889a0f Certificate serial: 010D0C9F43285849DF5A782C3F143E757CD8B280 Authority key identifier: 5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/f4409881-0cc2-340a-9a24-65fd19f277e1.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 22125 IP address blocks: 161.150.7.0/24 maxlen: 24 161.150.16.0/24 maxlen: 24 161.150.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:78:2c:3f:14:3e:75:7c:d8:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9879e55-95a8-4c84-be43-498c51889a0f Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=8d65f34a-abff-42d2-9d98-940f1eb1a0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:30:54:a0:07:7d:0c:98:8d:f0:50:b4:16: 58:de:49:73:91:c6:58:61:8a:0b:2d:99:5b:a3:cb: f2:b3:59:73:81:b9:3f:7e:ba:c8:67:b9:a1:8c:ac: bb:94:dd:f4:11:25:e5:dd:9f:9f:6e:71:a9:03:e0: 09:a6:cb:e3:3e:04:70:d5:b3:1a:89:7e:3d:74:17: 65:f3:86:e3:5e:f1:d9:ae:fb:43:98:d5:77:cf:3c: dc:3b:ec:f6:a8:03:8c:14:21:bc:49:1c:a3:20:ad: 59:e3:dc:11:59:85:47:4c:52:c1:96:a5:93:ed:ea: 0b:8e:68:6e:eb:fa:80:4b:45:a8:a9:c5:01:5c:08: d1:75:81:fa:c1:8e:23:21:2e:d1:83:1e:11:79:b0: 9b:9a:a5:7e:dd:42:8d:a8:06:bf:37:3b:f4:ca:81: 80:6f:76:d0:1f:c8:48:1a:d0:1a:06:60:2f:ac:e6: 78:b7:a5:50:cc:a3:2c:50:41:a5:52:15:3e:eb:b7: 0a:3c:8f:5c:07:77:c7:62:a0:b3:c3:ea:fc:1f:8e: 41:aa:e8:10:e3:21:ca:7f:b7:22:6d:35:3f:b5:9f: fa:c4:4e:eb:31:f4:fa:c8:9e:6b:ca:21:f5:6d:cd: 76:bc:45:55:7c:6c:4b:74:24:63:f2:9d:ad:4e:d0: 20:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0A:1B:5A:80:02:49:58:C5:C7:D0:C6:59:73:AC:48:CD:C9:34:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/f4409881-0cc2-340a-9a24-65fd19f277e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f/b9879e55-95a8-4c84-be43-498c51889a0f.crl X509v3 Authority Key Identifier: keyid:5B:C4:FB:E1:35:4B:82:34:55:62:58:EF:D8:44:03:CA:34:AB:9F:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b9879e55-95a8-4c84-be43-498c51889a0f.cer sbgp-ipAddrBlock: critical IPv4: 161.150.7.0/24 161.150.16.0/24 161.150.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:00:e9:44:f8:b9:71:bd:5e:9f:cc:09:94:cb:d2:4e:1f:dd: ee:ab:94:4d:7b:bb:d6:7d:4f:4d:2e:f9:08:9d:e3:9a:c8:78: d0:ab:bc:37:1e:a5:c7:b1:e0:4f:2a:7b:38:6a:b1:26:ab:88: 85:ec:df:bd:19:c5:01:16:e9:89:b6:c8:63:0c:37:64:76:62: f8:2a:c8:fc:93:05:fd:00:5e:1f:44:03:e5:d7:13:2f:af:c0: 9c:42:1f:2c:7d:a3:83:29:b9:6e:3a:10:60:c7:39:a3:dc:12: f5:43:4a:fa:9e:b6:be:bf:d6:31:0f:66:1f:68:7d:4b:b1:10: 81:ee:64:9d:e8:e0:e9:b7:2d:ee:8f:24:b8:ef:2d:12:cf:7a: bc:38:bc:af:38:a0:c3:4b:c0:3d:fd:0d:86:d9:7b:6a:4b:83: 3c:d5:ad:76:87:8e:cf:1a:32:86:58:3b:f5:e2:36:74:86:88: 46:ff:23:e1:6e:d5:47:0f:3c:57:af:12:0f:59:a6:ea:37:89: c7:50:78:26:2a:b6:73:76:1e:c7:cc:83:56:ee:eb:50:6b:f3: c7:0a:41:bd:b6:f3:45:92:4c:44:a5:05:4d:23:47:1d:f0:5c: 56:3b:15:fc:fc:ed:83:ff:15:c8:76:25:4a:90:0a:ce:a2:09: ad:90:80:f3 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEnfWngsPxQ+dXzYsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4NzllNTUtOTVhOC00Yzg0LWJlNDMtNDk4YzUxODg5 YTBmMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk OGQ2NWYzNGEtYWJmZi00MmQyLTlkOTgtOTQwZjFlYjFhMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDQwVKAHfQyYjfBQtBZY3klzkcZYYYoLLZlb o8vys1lzgbk/frrIZ7mhjKy7lN30ESXl3Z+fbnGpA+AJpsvjPgRw1bMaiX49dBdl 84bjXvHZrvtDmNV3zzzcO+z2qAOMFCG8SRyjIK1Z49wRWYVHTFLBlqWT7eoLjmhu 6/qAS0WoqcUBXAjRdYH6wY4jIS7Rgx4RebCbmqV+3UKNqAa/Nzv0yoGAb3bQH8hI GtAaBmAvrOZ4t6VQzKMsUEGlUhU+67cKPI9cB3fHYqCzw+r8H45BqugQ4yHKf7ci bTU/tZ/6xE7rMfT6yJ5ryiH1bc12vEVVfGxLdCRj8p2tTtAgwQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJEKG1qAAklYxcfQxllzrEjNyTQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3 OWU1NS05NWE4LTRjODQtYmU0My00OThjNTE4ODlhMGYvZjQ0MDk4ODEtMGNjMi0z NDBhLTlhMjQtNjVmZDE5ZjI3N2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4NzllNTUtOTVhOC00Yzg0LWJl NDMtNDk4YzUxODg5YTBmL2I5ODc5ZTU1LTk1YTgtNGM4NC1iZTQzLTQ5OGM1MTg4 OWEwZi5jcmwwHwYDVR0jBBgwFoAUW8T74TVLgjRVYljv2EQDyjSrn7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOTg3OWU1NS05NWE4LTRjODQtYmU0My00OThj NTE4ODlhMGYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAoZYHAwQA oZYQAwQAoZY1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKcA6UT4uXG9Xp/MCZTL0k4f3e6rlE17u9Z9T00u +Qid45rIeNCrvDcepcex4E8qezhqsSariIXs370ZxQEW6Ym2yGMMN2R2YvgqyPyT Bf0AXh9EA+XXEy+vwJxCHyx9o4MpuW46EGDHOaPcEvVDSvqetr6/1jEPZh9ofUux EIHuZJ3o4Om3Le6PJLjvLRLPerw4vK84oMNLwD39DYbZe2pLgzzVrXaHjs8aMoZY O/XiNnSGiEb/I+Fu1UcPPFevEg9Zpuo3icdQeCYqtnN2HsfMg1bu61Br88cKQb22 80WSTESlBU0jRx3wXFY7Ffz87YP/Fch2JUqQCs6iCa2QgPM= -----END CERTIFICATE-----Generated at Tue Jul 1 17:27:45 2025 by rpki-client