$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17ddb15f-2c2f-3086-8ceb-9d30dd1da1c5.roa File: 17ddb15f-2c2f-3086-8ceb-9d30dd1da1c5.roa (raw, json) Hash identifier: WT/VCF2g5+GciU7SRqRWdL5av6yIKIw4N3byNs1khEY= Subject key identifier: 1B:CD:3B:A7:9B:82:B0:D9:F0:31:DC:02:5E:ED:5A:B8:A7:0A:73:98 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB731AAA5D606F3EA7A0E0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17ddb15f-2c2f-3086-8ceb-9d30dd1da1c5.roa Signing time: Thu 24 Apr 2025 11:16:39 +0000 ROA not before: Thu 24 Apr 2025 11:16:39 +0000 ROA not after: Wed 23 Jul 2025 11:16:39 +0000 asID: 12041 IP address blocks: 161.232.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:73:1a:aa:5d:60:6f:3e:a7:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:39 2025 GMT Not After : Jul 23 11:16:39 2025 GMT Subject: CN=659b2a99-8357-4dc8-af97-f64e7b4a9d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7d:95:a2:7b:27:28:2e:36:08:f7:00:3b:e5: 6e:dc:1a:7a:dd:e1:a2:f3:f5:0c:22:96:38:44:4c: 66:c7:6b:03:5b:83:b5:62:20:05:02:f7:7b:ed:57: c6:3d:6a:38:2e:56:08:64:45:3d:ca:98:82:d0:7d: 89:93:95:af:4d:8a:87:a1:df:0e:84:26:db:5f:66: 50:c6:23:06:dd:b9:bc:c5:3c:86:c7:bd:21:1d:5d: ee:a0:08:f0:3d:37:01:c0:d2:18:03:51:c0:6d:f7: 6f:15:a7:8c:0b:fb:da:8a:c9:0e:f7:ae:6a:e0:5b: 4e:4c:6a:dd:bf:fb:9c:ea:7b:76:5b:7b:e9:c8:2e: 50:65:c8:eb:4c:fc:67:c2:45:c4:ad:3e:a6:c6:c0: e7:8c:02:01:4e:c2:36:c9:e8:0e:c5:23:e2:0b:2b: d8:2b:11:e5:e7:8b:6b:1e:0d:f0:be:6b:2d:71:8a: cd:35:f5:8f:3b:5b:06:60:0e:79:de:11:93:ef:9a: 0c:08:66:0d:b8:09:bd:46:a3:21:c2:02:68:a8:7a: e9:2b:62:ba:37:b1:fb:3b:fc:93:d9:31:23:72:c4: 5e:ce:76:4b:18:4d:fd:2b:00:f8:de:bc:4a:a3:88: ee:c9:e6:ec:8b:24:97:ab:bd:b0:c8:a6:15:cd:c1: f9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:3B:A7:9B:82:B0:D9:F0:31:DC:02:5E:ED:5A:B8:A7:0A:73:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/17ddb15f-2c2f-3086-8ceb-9d30dd1da1c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ab:f7:70:61:4e:c6:3a:f5:14:91:65:9a:6e:c6:34:58:04: d1:fc:62:72:17:a3:d9:92:36:e6:97:79:d2:9b:ac:29:e8:d9: 55:c8:d3:25:b7:b1:b0:c3:39:a9:c5:b8:08:52:51:73:2b:19: e4:7a:40:e2:21:61:6b:c8:d7:d7:7a:d6:30:ac:26:d5:b4:6c: b5:4b:2c:04:fa:91:a5:a4:ac:86:07:e7:69:1e:7e:17:e5:5d: 28:7f:8b:d6:d1:1b:38:06:9a:21:e4:d9:37:4a:9d:e7:91:f9: f7:9c:5e:34:05:cf:4d:01:b3:90:1c:2a:74:e8:0a:78:0e:2d: 5a:52:6d:0f:24:f2:11:9e:55:49:e3:0c:e5:92:cf:ed:32:45: 0b:00:e1:e1:b5:73:09:69:c4:4e:93:d7:ed:fb:00:ea:79:16: de:69:25:3d:3c:e4:82:fd:9b:f7:47:33:7f:b4:24:81:fd:41: 1d:8f:cf:17:b5:91:45:01:f0:61:e2:1c:fe:dc:22:8b:a0:67: cf:d6:c0:4e:9a:97:97:9c:1d:fd:dd:b7:11:19:b4:6f:77:43: 00:55:0e:27:4f:5b:48:c1:bc:c1:d9:79:e4:9d:0b:1e:7b:3f: 7f:02:03:67:bb:3d:fd:0d:69:fb:1b:2c:d0:43:2a:de:7b:ba: 96:75:0c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu3Maql1gbz6noOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYzOVoXDTI1MDcyMzExMTYzOVowLzEtMCsGA1UEAxMk NjU5YjJhOTktODM1Ny00ZGM4LWFmOTctZjY0ZTdiNGE5ZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX2VonsnKC42CPcAO+Vu3Bp63eGi8/UMIpY4 RExmx2sDW4O1YiAFAvd77VfGPWo4LlYIZEU9ypiC0H2Jk5WvTYqHod8OhCbbX2ZQ xiMG3bm8xTyGx70hHV3uoAjwPTcBwNIYA1HAbfdvFaeMC/vaiskO965q4FtOTGrd v/uc6nt2W3vpyC5QZcjrTPxnwkXErT6mxsDnjAIBTsI2yegOxSPiCyvYKxHl54tr Hg3wvmstcYrNNfWPO1sGYA553hGT75oMCGYNuAm9RqMhwgJoqHrpK2K6N7H7O/yT 2TEjcsReznZLGE39KwD43rxKo4juyebsiySXq72wyKYVzcH5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvNO6ebgrDZ8DHcAl7tWrinCnOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTdkZGIxNWYtMmMyZi0z MDg2LThjZWItOWQzMGRkMWRhMWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6r93BhTsY69RSRZZpuxjRYBNH8YnIXo9mSNuaXedKbrCno2VXI0yW3 sbDDOanFuAhSUXMrGeR6QOIhYWvI19d61jCsJtW0bLVLLAT6kaWkrIYH52kefhfl XSh/i9bRGzgGmiHk2TdKneeR+fecXjQFz00Bs5AcKnToCngOLVpSbQ8k8hGeVUnj DOWSz+0yRQsA4eG1cwlpxE6T1+37AOp5Ft5pJT085IL9m/dHM3+0JIH9QR2Pzxe1 kUUB8GHiHP7cIougZ8/WwE6al5ecHf3dtxEZtG93QwBVDidPW0jBvMHZeeSdCx57 P38CA2e7Pf0NafsbLNBDKt57upZ1DMk= -----END CERTIFICATE-----Generated at Tue Apr 29 14:34:06 2025 by rpki-client