$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06b0d6ed-1328-37ac-9ed0-4795420f2d10.roa File: 06b0d6ed-1328-37ac-9ed0-4795420f2d10.roa (raw, json) Hash identifier: Rx81r04uE7G/GmOhqDPuCjDvs2FdbzOXh9FyjxhDczA= Subject key identifier: B5:C6:57:C7:8C:E7:4A:93:48:C7:B0:E7:6B:D1:47:E5:F6:D6:27:F2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB425C92C225420EBEB410 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06b0d6ed-1328-37ac-9ed0-4795420f2d10.roa Signing time: Thu 24 Apr 2025 11:16:16 +0000 ROA not before: Thu 24 Apr 2025 11:16:16 +0000 ROA not after: Wed 23 Jul 2025 11:16:16 +0000 asID: 12041 IP address blocks: 161.232.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:42:5c:92:c2:25:42:0e:be:b4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:16 2025 GMT Not After : Jul 23 11:16:16 2025 GMT Subject: CN=cd9f33f6-4197-4a2b-8c2e-26521e7fad3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:1a:24:f6:05:e8:cf:ae:17:67:0f:dc:43: 89:78:2d:3d:ff:ca:99:a8:93:c7:30:6b:7e:83:d5: 43:a6:c9:1e:8c:04:7c:06:d1:e4:b2:60:77:d0:31: 47:c8:ef:de:ab:41:6b:ff:c8:4b:e6:2c:e9:71:f9: 0b:d7:f8:42:56:49:bd:7a:c8:0f:ed:f3:0f:05:3a: 06:c5:a9:9d:e9:e1:80:47:a4:a8:49:83:20:00:38: 6c:a3:eb:b7:2c:5a:ff:ad:69:40:a0:1f:86:f4:e0: 54:1e:80:59:49:81:04:0c:c2:f3:03:90:47:c9:43: 28:a9:a2:e9:e6:dc:97:08:a3:77:a1:09:57:f0:8a: 0d:9f:13:2d:a8:27:d5:9d:83:6a:b8:ed:0d:12:6b: da:0b:6b:84:4a:ce:55:96:47:04:66:36:8b:7d:3e: c8:24:af:65:3d:9b:c2:d5:16:ac:87:93:62:a1:fe: 54:73:8f:71:ca:51:5c:16:9e:16:b5:9b:cb:98:fe: 93:fc:c3:be:de:66:0c:91:c7:a6:84:ef:1d:04:e8: dd:66:6f:ea:79:aa:cc:54:15:0f:12:0f:e8:ed:4f: e0:ce:e9:54:06:ec:f9:53:65:c8:bb:c3:82:ed:5f: 4b:a4:9f:b5:bd:9a:b9:b4:77:b7:cc:b0:98:48:12: fa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C6:57:C7:8C:E7:4A:93:48:C7:B0:E7:6B:D1:47:E5:F6:D6:27:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/06b0d6ed-1328-37ac-9ed0-4795420f2d10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:69:34:d0:b9:34:c4:18:c7:f8:66:c2:1c:2b:31:6f:cd:57: 3d:0c:cd:30:07:cc:aa:93:5f:10:ed:55:2f:93:66:9f:41:8d: cb:75:96:42:6e:97:6c:6a:f3:a4:0d:47:fa:e1:20:47:8f:de: a8:7b:62:c9:6a:1a:e7:51:81:30:4e:15:5a:92:13:df:76:73: e5:2f:93:0a:52:ac:37:6d:cc:b7:b9:12:32:46:44:67:f9:54: db:85:c1:31:c0:6b:fb:7e:3b:de:10:86:e1:4d:78:b6:ce:08: 2c:99:49:b4:b0:ef:19:87:45:28:e4:ae:25:fa:71:09:45:b1: 45:9f:c3:e4:7e:bd:58:31:f3:ca:9c:40:35:f9:a3:17:e2:6b: 38:a4:a5:33:7c:5c:5d:f5:ee:c5:6f:cd:4c:94:6f:43:4c:bd: c0:38:4d:4f:4a:c7:c9:47:cd:72:6a:a6:6a:4b:83:85:9f:56: cc:c4:4a:9a:a4:3b:8c:ee:67:48:eb:ff:5d:d6:77:15:c1:20: 3e:5f:b4:3f:27:06:3e:79:8c:49:5d:39:25:5a:3e:85:73:e1: 24:71:7e:f3:35:28:eb:8d:f0:eb:6e:b7:72:0c:3a:b3:6d:f3: a8:40:76:0d:7a:37:e8:a1:22:bc:e1:16:c8:59:8b:e5:62:66: f5:04:3e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu0JcksIlQg6+tBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYxNloXDTI1MDcyMzExMTYxNlowLzEtMCsGA1UEAxMk Y2Q5ZjMzZjYtNDE5Ny00YTJiLThjMmUtMjY1MjFlN2ZhZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5EaJPYF6M+uF2cP3EOJeC09/8qZqJPHMGt+ g9VDpskejAR8BtHksmB30DFHyO/eq0Fr/8hL5izpcfkL1/hCVkm9esgP7fMPBToG xamd6eGAR6SoSYMgADhso+u3LFr/rWlAoB+G9OBUHoBZSYEEDMLzA5BHyUMoqaLp 5tyXCKN3oQlX8IoNnxMtqCfVnYNquO0NEmvaC2uESs5VlkcEZjaLfT7IJK9lPZvC 1Rash5Niof5Uc49xylFcFp4WtZvLmP6T/MO+3mYMkcemhO8dBOjdZm/qearMVBUP Eg/o7U/gzulUBuz5U2XIu8OC7V9LpJ+1vZq5tHe3zLCYSBL6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXGV8eM50qTSMew52vRR+X21ifyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMDZiMGQ2ZWQtMTMyOC0z N2FjLTllZDAtNDc5NTQyMGYyZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABpNNC5NMQYx/hmwhwrMW/NVz0MzTAHzKqTXxDtVS+TZp9Bjct1lkJu l2xq86QNR/rhIEeP3qh7YslqGudRgTBOFVqSE992c+UvkwpSrDdtzLe5EjJGRGf5 VNuFwTHAa/t+O94QhuFNeLbOCCyZSbSw7xmHRSjkriX6cQlFsUWfw+R+vVgx88qc QDX5oxfiazikpTN8XF317sVvzUyUb0NMvcA4TU9Kx8lHzXJqpmpLg4WfVszESpqk O4zuZ0jr/13WdxXBID5ftD8nBj55jEldOSVaPoVz4SRxfvM1KOuN8Otut3IMOrNt 86hAdg16N+ihIrzhFshZi+ViZvUEPt4= -----END CERTIFICATE-----Generated at Tue Apr 29 12:06:46 2025 by rpki-client