$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa File: 1909c963-0da6-3f09-8485-a5f139e7bf16.roa (raw, json) Hash identifier: xPI9PO0coghp7C428Fmcuj7ttwDWBTN6bkmaSdXK3+k= Subject key identifier: F4:06:BA:77:1B:28:D3:D1:69:96:DA:AD:62:49:C5:D7:A6:51:22:85 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB8EB7224E95DEC6297600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa Signing time: Thu 24 Apr 2025 11:16:52 +0000 ROA not before: Thu 24 Apr 2025 11:16:52 +0000 ROA not after: Wed 23 Jul 2025 11:16:52 +0000 asID: 12041 IP address blocks: 161.232.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:8e:b7:22:4e:95:de:c6:29:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:52 2025 GMT Not After : Jul 23 11:16:52 2025 GMT Subject: CN=4f4c69af-c2f5-4e74-bfaa-db8310e49094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0f:a8:35:93:96:e3:c3:3b:e1:10:38:f1:3e: cb:f3:44:c5:59:d7:2c:b3:09:76:ad:80:78:86:95: 70:80:dd:ac:22:e3:0a:3f:ab:a8:b3:ab:5d:b9:c2: ed:87:cb:c8:ac:a0:33:3a:3e:13:ed:c6:4f:62:af: 7e:85:ac:ce:13:43:fa:06:34:4f:bf:60:aa:4b:6c: bb:80:5c:f1:53:21:8b:52:27:66:38:1c:54:9c:ad: c2:73:e1:d5:fd:b8:14:95:8f:ce:12:4e:46:27:1b: c3:19:49:20:d9:5a:2c:23:94:1f:a9:7f:c3:4a:9a: 4f:67:a4:f4:4a:9b:81:d5:75:f4:5e:a6:2a:2e:55: f0:0d:57:4a:39:db:4d:16:94:77:db:09:8d:d2:cb: 8a:16:9d:4a:a6:6b:1b:06:5d:78:89:0d:ad:87:8e: 42:4a:e7:02:9c:1e:73:2b:ee:d1:fa:b0:c3:74:b7: 60:54:d1:47:46:fe:f7:87:6e:53:83:a0:7b:fe:31: 0c:fa:0f:b2:2c:a9:72:b3:ec:0b:69:6c:c6:59:4c: 5c:fe:78:93:e8:59:4b:f5:2b:34:a1:bd:6b:7c:08: 12:60:ec:c0:45:65:41:28:df:3b:f7:f3:53:93:dd: 8c:eb:40:22:30:36:b5:79:62:7b:3e:3b:33:6a:3a: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:06:BA:77:1B:28:D3:D1:69:96:DA:AD:62:49:C5:D7:A6:51:22:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1909c963-0da6-3f09-8485-a5f139e7bf16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9e:7c:20:86:6f:f6:17:4c:cc:ed:5e:d7:9b:6c:0c:a9:28: d2:65:7a:bd:58:40:8b:0d:7b:2e:2e:42:61:4a:d9:6c:19:6d: 37:16:6a:8b:ef:03:2a:9d:10:8b:a3:9c:ca:50:cd:c4:79:4e: d9:d3:aa:52:a6:5e:a8:34:56:4c:51:69:93:81:a9:36:98:4f: 2b:1f:77:d1:13:38:85:5f:07:a4:bb:64:00:7c:1f:5a:63:c5: 09:ba:a0:17:2f:a5:4b:22:d1:5c:1a:12:04:0b:fe:6c:73:ef: 02:f1:2d:69:26:e7:5b:c5:6f:bf:63:83:28:27:ea:c8:69:f0: 0a:64:43:de:02:c1:92:f1:0e:5a:95:be:37:c5:d5:d7:68:b4: e3:70:c3:2d:36:ac:2e:2a:ef:79:03:a9:75:bf:00:0a:d6:6a: 21:d3:86:e9:f6:80:0d:a6:ad:0b:70:ab:9e:1d:c1:52:36:2f: e0:4d:3d:51:fa:d5:68:98:12:d8:98:65:eb:5c:26:f4:a9:51: d6:89:03:73:48:b4:e1:3e:5b:a1:69:68:5a:72:2f:38:67:3b: 78:93:bb:98:0a:55:39:63:dd:89:c1:f9:5f:c9:84:54:b5:e6: 46:9f:a3:7b:46:7b:64:48:7b:a3:7c:24:1f:87:89:83:8c:7b: 82:ae:03:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu463Ik6V3sYpdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY1MloXDTI1MDcyMzExMTY1MlowLzEtMCsGA1UEAxMk NGY0YzY5YWYtYzJmNS00ZTc0LWJmYWEtZGI4MzEwZTQ5MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA+oNZOW48M74RA48T7L80TFWdcsswl2rYB4 hpVwgN2sIuMKP6uos6tducLth8vIrKAzOj4T7cZPYq9+hazOE0P6BjRPv2CqS2y7 gFzxUyGLUidmOBxUnK3Cc+HV/bgUlY/OEk5GJxvDGUkg2VosI5QfqX/DSppPZ6T0 SpuB1XX0XqYqLlXwDVdKOdtNFpR32wmN0suKFp1KpmsbBl14iQ2th45CSucCnB5z K+7R+rDDdLdgVNFHRv73h25Tg6B7/jEM+g+yLKlys+wLaWzGWUxc/niT6FlL9Ss0 ob1rfAgSYOzARWVBKN879/NTk92M60AiMDa1eWJ7PjszajpXvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQGuncbKNPRaZbarWJJxdemUSKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTkwOWM5NjMtMGRhNi0z ZjA5LTg0ODUtYTVmMTM5ZTdiZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqefCCGb/YXTMztXtebbAypKNJler1YQIsNey4uQmFK2WwZbTcWaovv AyqdEIujnMpQzcR5TtnTqlKmXqg0VkxRaZOBqTaYTysfd9ETOIVfB6S7ZAB8H1pj xQm6oBcvpUsi0VwaEgQL/mxz7wLxLWkm51vFb79jgygn6shp8ApkQ94CwZLxDlqV vjfF1ddotONwwy02rC4q73kDqXW/AArWaiHThun2gA2mrQtwq54dwVI2L+BNPVH6 1WiYEtiYZetcJvSpUdaJA3NItOE+W6FpaFpyLzhnO3iTu5gKVTlj3YnB+V/JhFS1 5kafo3tGe2RIe6N8JB+HiYOMe4KuA2Y= -----END CERTIFICATE-----Generated at Tue Apr 29 16:18:20 2025 by rpki-client