$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa File: 0b8a1e80-257b-3d3b-a454-55c527409f72.roa (raw, json) Hash identifier: HUFFt/JzuSxVtOM9QPJ03V8PAfW+/HcbXmV4QUCsw8U= Subject key identifier: A0:99:0A:99:3F:85:49:DE:FB:12:07:38:8B:54:11:53:5C:0F:0C:B8 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F43285849B2AF625FB1962FCF151EC9C0 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 136787 IP address blocks: 172.103.32.0/24 maxlen: 24 172.103.33.0/24 maxlen: 24 172.103.34.0/24 maxlen: 24 172.103.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:62:5f:b1:96:2f:cf:15:1e:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=4e61e7e5-0ed4-405b-b746-4dfe739903a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:81:d9:cc:0e:55:ee:dc:f6:3a:8a:a6:21: 60:34:28:82:55:61:08:1e:0e:10:5f:d0:0d:a3:4c: 26:99:1b:43:8b:b3:f4:9f:43:9c:84:89:4e:ff:50: 5e:76:0e:28:6b:73:e3:f7:4a:0c:03:42:1b:26:23: a9:84:6a:fd:6d:6f:52:e4:78:cf:3d:59:5b:9d:d3: 88:e5:6e:8c:0d:83:f8:22:7d:38:d4:5e:7e:49:39: e2:12:7d:50:2a:7d:30:37:a6:a7:14:40:dc:4b:24: f6:1b:b5:35:ba:c2:f1:59:0f:3e:45:10:0e:cc:39: 65:33:19:35:4c:09:45:3f:7a:66:ff:b8:71:58:6e: 5a:50:f5:12:1a:00:a5:00:d5:ac:54:52:04:18:22: 36:08:75:09:84:12:b3:7a:39:1e:0c:4a:1d:6f:45: ed:81:67:21:32:dc:8f:b7:23:a4:25:fd:ef:4d:e7: 4f:7f:57:6d:be:5c:36:2e:e7:c8:6f:2a:5a:10:49: 82:85:3f:93:75:2c:00:0f:bb:a0:4e:8a:d3:e7:c4: 03:53:9a:bb:eb:5f:fa:1a:66:ee:07:f1:98:00:ea: ef:23:9e:1a:07:98:32:10:6e:0f:5d:cb:cf:46:ac: e5:8e:d0:14:21:db:a9:dc:89:4a:b0:64:28:38:27: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:99:0A:99:3F:85:49:DE:FB:12:07:38:8B:54:11:53:5C:0F:0C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv4: 172.103.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:13:f0:b8:92:86:6f:ea:db:b6:67:69:45:b6:f4:1b:75:e0: 56:ea:ca:69:94:d9:4b:4b:4f:fd:42:82:c8:42:ad:ab:56:3f: c3:64:c9:bb:27:f8:95:af:4f:e2:4e:8b:50:7b:f5:bb:c4:c2: 29:de:50:19:06:d0:47:78:f1:ec:81:ca:0a:63:4a:b7:a0:4f: e2:fb:66:98:1e:a0:bf:4b:8d:05:b7:57:03:ff:b4:63:7d:cf: a4:00:f4:7d:b5:e7:73:aa:ab:13:4d:52:94:01:13:8b:fd:92: a7:49:82:aa:9c:ac:50:da:f1:08:fe:16:47:53:94:16:68:a1: 58:df:96:1b:50:8b:38:95:db:57:41:7a:60:e8:86:a0:e7:4b: cb:ae:69:f8:c1:36:cb:69:2c:27:a4:12:bd:31:f1:64:65:d6: 14:81:4c:02:05:71:3b:26:cc:3b:71:1a:de:43:c4:46:28:e3: a1:2f:27:d9:b5:b1:e2:80:f0:dd:8b:64:57:9d:0d:c4:41:7e: 16:e1:90:ac:bc:82:0f:e8:5c:df:27:88:e9:46:0f:e7:96:c2: ae:fe:5a:f6:ce:22:80:58:7d:13:4a:c8:16:b2:ab:73:ef:e6: f5:01:1e:9b:a8:a4:7b:d6:c8:6b:6d:39:1d:db:bf:a4:6f:9c: e8:30:71:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2JfsZYvzxUeycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk NGU2MWU3ZTUtMGVkNC00MDViLWI3NDYtNGRmZTczOTkwM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA2B2cwOVe7c9jqKpiFgNCiCVWEIHg4QX9AN o0wmmRtDi7P0n0OchIlO/1Bedg4oa3Pj90oMA0IbJiOphGr9bW9S5HjPPVlbndOI 5W6MDYP4In041F5+STniEn1QKn0wN6anFEDcSyT2G7U1usLxWQ8+RRAOzDllMxk1 TAlFP3pm/7hxWG5aUPUSGgClANWsVFIEGCI2CHUJhBKzejkeDEodb0XtgWchMtyP tyOkJf3vTedPf1dtvlw2LufIbypaEEmChT+TdSwAD7ugTorT58QDU5q761/6Gmbu B/GYAOrvI54aB5gyEG4PXcvPRqzljtAUIdup3IlKsGQoOCfM9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCZCpk/hUne+xIHOItUEVNcDwy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvMGI4YTFlODAtMjU3Yi0z ZDNiLWE0NTQtNTVjNTI3NDA5ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoT8LiShm/q27ZnaUW29Bt14FbqymmU2UtLT/1CgshCratWP8Nkybsn +JWvT+JOi1B79bvEwineUBkG0Ed48eyBygpjSregT+L7ZpgeoL9LjQW3VwP/tGN9 z6QA9H2153OqqxNNUpQBE4v9kqdJgqqcrFDa8Qj+FkdTlBZooVjflhtQiziV21dB emDohqDnS8uuafjBNstpLCekEr0x8WRl1hSBTAIFcTsmzDtxGt5DxEYo46EvJ9m1 seKA8N2LZFedDcRBfhbhkKy8gg/oXN8niOlGD+eWwq7+WvbOIoBYfRNKyBayq3Pv 5vUBHpuopHvWyGttOR3bv6RvnOgwcbM= -----END CERTIFICATE-----Generated at Thu May 8 22:16:26 2025 by rpki-client