$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa File: 117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa (raw, json) Hash identifier: eyHlgifNW6b/amWv7j9zjr77IpXjsVzF3hdeMiecMp4= Subject key identifier: A4:52:50:C3:BF:9B:B7:C4:B4:2E:B6:A5:80:FD:02:24:E9:D6:7E:C4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461CC801196B3FED1FAF80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1c:c8:01:19:6b:3f:ed:1f:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2b2bb468-00b7-4e26-8c72-0e2421d1effa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:9d:4e:53:25:32:28:66:76:81:00:b0:23: 5c:de:7a:f0:45:a8:d7:2d:72:18:9d:32:8d:2a:79: 6c:fc:5b:a0:dd:4e:50:1f:69:09:41:f1:8d:13:6d: be:7f:12:92:27:09:90:c1:f4:3d:a4:a9:6e:35:c0: 60:eb:51:c6:a9:64:b6:95:b2:47:53:8e:5f:57:c6: c5:21:1e:b2:35:c1:6d:b2:4d:af:cf:d1:0a:1f:e6: a3:9c:da:57:c9:8b:c9:dd:ea:ff:41:5f:8b:5b:84: 55:ad:85:dc:04:ad:d5:b1:dc:aa:6e:94:bd:f7:bb: 37:fe:f3:b5:bd:04:8b:24:d4:3c:a6:e9:6d:5b:6d: b4:94:ef:ec:df:e4:b3:dc:3c:c2:ce:5c:7c:2c:7b: 91:72:74:1b:89:05:63:7e:69:1c:1c:97:6b:bd:78: a7:52:92:af:35:d6:bc:ff:7c:3d:b5:2a:c0:21:b9: b8:50:da:1a:0f:63:8b:29:84:8b:b3:41:f7:3a:72: d8:70:11:c9:4d:2b:a6:da:2b:75:f7:57:99:a8:55: c0:32:76:5f:10:50:ad:72:3a:0c:c8:e3:3e:1c:9f: 00:df:40:01:44:9a:90:3a:bc:8b:3f:81:bd:9d:d0: 54:e9:73:14:d1:27:cc:06:57:b5:6f:6c:0e:f8:2e: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:52:50:C3:BF:9B:B7:C4:B4:2E:B6:A5:80:FD:02:24:E9:D6:7E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/117a847b-5835-3cec-bd0b-1a95a5c4c6ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:da:5b:26:73:98:62:ca:02:86:27:b0:d7:4e:2b:53:21:cf: d8:33:89:ca:f5:4a:93:c3:8e:d2:e6:61:66:7f:cc:f2:82:36: 19:76:ed:15:8a:c0:7b:19:d5:32:b1:81:0e:ce:32:60:c1:ef: 25:09:fe:39:bb:4d:e6:4f:59:06:c4:fe:25:18:40:31:47:24: 8d:0b:22:ec:e7:95:fc:c5:d4:af:14:a1:1e:d4:2f:4c:3a:b7: a4:cc:6a:50:45:3a:f0:81:09:ce:8b:d6:c0:31:1f:56:c9:59: 7a:b6:b5:34:5b:a6:f7:a4:07:39:e6:b4:36:49:9e:6e:6e:ab: d2:87:39:dc:ea:39:f3:8d:ef:b4:18:bd:00:ef:3f:e7:e9:4e: 22:98:2e:50:4e:80:35:be:87:db:86:1f:62:7c:42:91:63:1f: 82:60:e8:55:f2:2e:ab:86:f5:8e:50:4f:10:22:29:19:65:fe: 10:8b:10:1f:d1:43:87:e8:86:b0:99:ee:a4:b7:74:14:c1:7a: 7a:82:f2:05:12:cc:61:9e:05:16:0f:42:2c:29:1d:19:26:d1: 89:8a:50:e7:d2:67:b1:33:9b:73:b2:1c:64:a5:90:e8:de:6b: 49:cd:2c:99:c5:38:c0:d1:9c:fe:d6:2e:f2:18:6d:67:3e:3e: 5d:bc:15:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhzIARlrP+0fr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MmIyYmI0NjgtMDBiNy00ZTI2LThjNzItMGUyNDIxZDFlZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8GdTlMlMihmdoEAsCNc3nrwRajXLXIYnTKN Knls/Fug3U5QH2kJQfGNE22+fxKSJwmQwfQ9pKluNcBg61HGqWS2lbJHU45fV8bF IR6yNcFtsk2vz9EKH+ajnNpXyYvJ3er/QV+LW4RVrYXcBK3VsdyqbpS997s3/vO1 vQSLJNQ8pultW220lO/s3+Sz3DzCzlx8LHuRcnQbiQVjfmkcHJdrvXinUpKvNda8 /3w9tSrAIbm4UNoaD2OLKYSLs0H3OnLYcBHJTSum2it191eZqFXAMnZfEFCtcjoM yOM+HJ8A30ABRJqQOryLP4G9ndBU6XMU0SfMBle1b2wO+C5+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRSUMO/m7fEtC62pYD9AiTp1n7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTE3YTg0N2ItNTgzNS0z Y2VjLWJkMGItMWE5NWE1YzRjNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAraWyZzmGLKAoYnsNdOK1Mhz9gzicr1SpPDjtLmYWZ/zPKCNhl27RWK wHsZ1TKxgQ7OMmDB7yUJ/jm7TeZPWQbE/iUYQDFHJI0LIuznlfzF1K8UoR7UL0w6 t6TMalBFOvCBCc6L1sAxH1bJWXq2tTRbpvekBznmtDZJnm5uq9KHOdzqOfON77QY vQDvP+fpTiKYLlBOgDW+h9uGH2J8QpFjH4Jg6FXyLquG9Y5QTxAiKRll/hCLEB/R Q4fohrCZ7qS3dBTBenqC8gUSzGGeBRYPQiwpHRkm0YmKUOfSZ7Ezm3OyHGSlkOje a0nNLJnFOMDRnP7WLvIYbWc+Pl28Fe8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:55 2025 by rpki-client