$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa File: 157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa (raw, json) Hash identifier: m8lFCB/O9S4bilQKTkWsD+2aepJ/UjIC4N1rxRkMxiM= Subject key identifier: 80:FF:F7:91:33:51:E5:75:A8:4D:04:9A:42:D3:CD:97:97:8C:BF:AE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB4D38800F44A0B6164700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa Signing time: Thu 24 Apr 2025 11:16:22 +0000 ROA not before: Thu 24 Apr 2025 11:16:22 +0000 ROA not after: Wed 23 Jul 2025 11:16:22 +0000 asID: 12041 IP address blocks: 161.232.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:4d:38:80:0f:44:a0:b6:16:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:22 2025 GMT Not After : Jul 23 11:16:22 2025 GMT Subject: CN=6d777caa-a5b6-44ad-bf67-d7db097fdc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:51:d7:a1:bb:de:8b:a0:26:57:18:1b:f9: 1c:4f:3f:49:ef:ff:fd:c5:2a:11:14:52:d8:8e:71: 6a:3a:70:9d:8e:18:a9:83:70:74:d7:1d:88:33:35: 5d:39:d5:29:2d:29:69:a8:80:c1:41:95:09:23:6b: 5d:42:2c:e8:29:52:d6:15:c3:62:af:6b:ac:f4:9b: 4a:57:c3:d1:50:40:52:d4:a1:1b:8f:6c:73:db:72: 90:27:ea:13:36:1f:b4:01:8f:82:cc:c4:4a:4f:3c: 1f:27:ec:e8:4f:1d:bf:f3:a5:9d:63:6e:50:f7:a0: 96:78:66:03:5c:2f:c1:dc:4d:25:91:9b:48:11:d3: 33:c3:62:0d:00:3a:c2:8e:2c:30:0f:1b:80:7a:7d: 50:91:2b:5e:20:42:fe:d7:3b:47:3f:0e:d9:aa:66: 41:a7:eb:87:68:4d:e5:e3:25:5e:ee:a9:8c:d7:c4: d6:9d:1b:6e:eb:af:d6:08:2a:9f:5c:3e:17:c8:a5: 3e:3c:f7:42:10:a2:2e:86:c7:dd:60:ad:01:9d:2f: 30:58:73:9d:c1:c2:09:c2:17:07:0f:85:aa:28:91: 95:bf:f1:35:26:2f:8a:44:80:62:34:ee:b1:a6:d0: a6:75:39:d2:ae:e3:a3:78:f0:04:59:e4:2a:6d:28: 60:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:F7:91:33:51:E5:75:A8:4D:04:9A:42:D3:CD:97:97:8C:BF:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/157d4883-4cc1-3655-8b36-cc0e2aaa4651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:cd:76:60:ce:04:d7:6c:a4:d9:db:dc:6c:f1:54:23:26:78: c6:e0:f1:b0:23:59:aa:97:0e:35:fa:e2:7c:ca:72:6f:30:0f: 02:3f:62:fd:32:4e:e9:f8:a0:bc:b7:3b:aa:c1:6c:7b:cb:5e: ef:18:dc:d3:db:49:36:4d:31:f5:2f:53:54:e7:ff:1c:35:2c: a9:e1:54:f7:70:6f:e0:8b:ff:ed:0c:6b:67:b3:59:97:16:7f: 37:e0:c4:46:5f:9f:51:22:ca:d9:76:17:ef:36:9b:75:ab:8b: 53:20:fe:6f:1f:11:29:bc:a0:3c:a7:15:36:12:7d:3d:da:64: 77:95:e0:13:5f:6f:ff:41:55:19:78:b6:66:4f:45:f4:86:76: d5:85:ea:15:95:a8:73:39:70:ad:a6:bc:09:b2:52:f9:09:5f: a5:7f:9d:d9:66:79:90:15:86:b6:c7:f1:3e:d8:2e:42:f1:04: 83:c0:8e:09:aa:5d:6c:3d:48:84:62:f2:ad:19:56:c0:eb:b1: 47:f9:64:78:c0:58:b3:4c:e7:e9:36:c1:75:e3:8e:30:c1:17: 68:3e:96:d6:53:af:1f:b0:82:c9:cc:1c:9f:66:05:e6:c3:16: 1b:04:c1:ef:c9:43:6c:d1:4e:83:02:82:7d:db:33:70:59:96: ae:64:0e:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu004gA9EoLYWRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYyMloXDTI1MDcyMzExMTYyMlowLzEtMCsGA1UEAxMk NmQ3NzdjYWEtYTViNi00NGFkLWJmNjctZDdkYjA5N2ZkYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4NR16G73ougJlcYG/kcTz9J7//9xSoRFFLY jnFqOnCdjhipg3B01x2IMzVdOdUpLSlpqIDBQZUJI2tdQizoKVLWFcNir2us9JtK V8PRUEBS1KEbj2xz23KQJ+oTNh+0AY+CzMRKTzwfJ+zoTx2/86WdY25Q96CWeGYD XC/B3E0lkZtIEdMzw2INADrCjiwwDxuAen1QkSteIEL+1ztHPw7ZqmZBp+uHaE3l 4yVe7qmM18TWnRtu66/WCCqfXD4XyKU+PPdCEKIuhsfdYK0BnS8wWHOdwcIJwhcH D4WqKJGVv/E1Ji+KRIBiNO6xptCmdTnSruOjePAEWeQqbShgwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID/95EzUeV1qE0EmkLTzZeXjL+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTU3ZDQ4ODMtNGNjMS0z NjU1LThiMzYtY2MwZTJhYWE0NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbNdmDOBNdspNnb3GzxVCMmeMbg8bAjWaqXDjX64nzKcm8wDwI/Yv0y Tun4oLy3O6rBbHvLXu8Y3NPbSTZNMfUvU1Tn/xw1LKnhVPdwb+CL/+0Ma2ezWZcW fzfgxEZfn1Eiytl2F+82m3Wri1Mg/m8fESm8oDynFTYSfT3aZHeV4BNfb/9BVRl4 tmZPRfSGdtWF6hWVqHM5cK2mvAmyUvkJX6V/ndlmeZAVhrbH8T7YLkLxBIPAjgmq XWw9SIRi8q0ZVsDrsUf5ZHjAWLNM5+k2wXXjjjDBF2g+ltZTrx+wgsnMHJ9mBebD FhsEwe/JQ2zRToMCgn3bM3BZlq5kDuQ= -----END CERTIFICATE-----Generated at Tue Apr 29 13:23:14 2025 by rpki-client