$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c4ed8b6-4544-3505-8cf6-27a47c9792ee.roa File: 1c4ed8b6-4544-3505-8cf6-27a47c9792ee.roa (raw, json) Hash identifier: Yxv9iZOO0MAVyOp2m2RzXqtAhROEZZfkzeQPKkc+s+M= Subject key identifier: 5C:23:D1:15:DA:E4:83:DD:2E:6D:7E:0C:D8:F5:75:AB:41:F1:42:CF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB77BD5CAE738266619380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c4ed8b6-4544-3505-8cf6-27a47c9792ee.roa Signing time: Thu 24 Apr 2025 11:16:42 +0000 ROA not before: Thu 24 Apr 2025 11:16:42 +0000 ROA not after: Wed 23 Jul 2025 11:16:42 +0000 asID: 12041 IP address blocks: 161.232.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:77:bd:5c:ae:73:82:66:61:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:42 2025 GMT Not After : Jul 23 11:16:42 2025 GMT Subject: CN=2ddc2e90-a45b-43ff-b5f3-fbb945df26e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:cd:70:2c:87:09:11:65:37:41:19:dd:af: e9:ec:95:93:71:57:e7:de:bb:a1:44:27:10:38:59: 0c:1d:3c:2b:40:79:ec:5e:28:62:c2:0b:c9:6b:ed: bf:88:43:66:39:95:45:f6:d5:5a:55:a0:36:fd:ab: cd:4f:d3:f7:4b:d0:70:b2:3b:95:15:73:ed:c8:8f: 00:aa:27:dd:5e:2b:4d:13:51:72:61:e6:2c:de:bb: e3:89:72:3b:8e:97:12:6c:ff:a4:c9:c5:f1:86:c0: 4d:3c:76:55:8e:71:68:6a:94:6e:b0:43:b1:7a:b8: 99:79:65:02:17:42:d4:e0:84:47:d2:08:c4:02:e2: 81:95:67:3a:45:ca:d0:de:b2:e0:a6:4b:2b:33:e5: fe:77:c2:08:5c:59:56:96:55:94:78:50:bc:63:4b: 55:73:04:da:6f:54:00:30:74:dd:e5:a1:6c:36:6b: b5:72:50:1c:ce:8d:29:38:65:83:5c:bb:cb:e8:e7: 5b:30:16:6b:bf:55:12:ab:6d:de:b9:38:7d:90:fb: 4f:3e:a0:b0:db:84:b1:e6:06:e7:7a:37:ce:88:08: bf:f6:95:40:14:56:a0:04:0e:82:d2:bb:48:c6:63: 26:5e:f0:ce:9c:df:d0:2d:ff:b6:d7:4f:b5:a5:46: 0f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:23:D1:15:DA:E4:83:DD:2E:6D:7E:0C:D8:F5:75:AB:41:F1:42:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1c4ed8b6-4544-3505-8cf6-27a47c9792ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:be:a3:09:59:48:83:5a:17:ef:d5:43:a7:3c:b0:6b:b9:92: 2a:85:1c:e5:5c:d4:95:c9:ac:76:64:13:07:a3:f5:2d:3d:48: ed:0e:8c:0c:d2:a2:7b:06:59:d2:bd:89:06:7c:1e:fe:34:5a: 38:e4:95:d2:50:9c:52:c5:f9:a8:ce:fb:04:49:34:73:9c:d4: 06:40:2f:7c:af:1a:b8:89:7a:32:ba:93:82:f1:df:af:f4:f5: 1c:7e:d2:03:e8:c4:bc:c5:dc:a3:5a:da:48:c9:25:a7:b5:c0: 04:8e:3b:b7:d5:d0:e2:5a:e4:6d:78:46:87:bb:06:04:d1:a7: bc:2b:fa:f6:53:9f:fa:42:fb:48:ab:aa:0d:fa:1d:3e:7e:89: 38:88:8b:5e:d9:96:64:eb:b6:90:db:f6:7b:4e:cd:eb:5e:df: 61:5d:c3:d9:c5:1a:3d:01:e4:21:ff:79:da:d7:9a:b5:99:44: 6e:39:69:0d:ca:42:33:56:12:68:e2:42:e8:6b:81:91:73:a9: 36:5d:a2:3d:c1:74:08:9f:18:ce:fc:86:de:26:79:77:4c:26: 5b:58:51:32:51:89:8f:2c:e5:c5:e3:48:c0:8d:7f:6a:d9:16: 1c:bc:4a:06:c1:d2:76:fb:d2:27:2e:d0:e7:2a:eb:34:22:34: 65:56:26:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu3e9XK5zgmZhk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY0MloXDTI1MDcyMzExMTY0MlowLzEtMCsGA1UEAxMk MmRkYzJlOTAtYTQ1Yi00M2ZmLWI1ZjMtZmJiOTQ1ZGYyNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOjNcCyHCRFlN0EZ3a/p7JWTcVfn3ruhRCcQ OFkMHTwrQHnsXihiwgvJa+2/iENmOZVF9tVaVaA2/avNT9P3S9BwsjuVFXPtyI8A qifdXitNE1FyYeYs3rvjiXI7jpcSbP+kycXxhsBNPHZVjnFoapRusEOxeriZeWUC F0LU4IRH0gjEAuKBlWc6RcrQ3rLgpksrM+X+d8IIXFlWllWUeFC8Y0tVcwTab1QA MHTd5aFsNmu1clAczo0pOGWDXLvL6OdbMBZrv1USq23euTh9kPtPPqCw24Sx5gbn ejfOiAi/9pVAFFagBA6C0rtIxmMmXvDOnN/QLf+210+1pUYPcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwj0RXa5IPdLm1+DNj1datB8ULPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWM0ZWQ4YjYtNDU0NC0z NTA1LThjZjYtMjdhNDdjOTc5MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6+owlZSINaF+/VQ6c8sGu5kiqFHOVc1JXJrHZkEwej9S09SO0OjAzS onsGWdK9iQZ8Hv40WjjkldJQnFLF+ajO+wRJNHOc1AZAL3yvGriJejK6k4Lx36/0 9Rx+0gPoxLzF3KNa2kjJJae1wASOO7fV0OJa5G14Roe7BgTRp7wr+vZTn/pC+0ir qg36HT5+iTiIi17ZlmTrtpDb9ntOzete32Fdw9nFGj0B5CH/edrXmrWZRG45aQ3K QjNWEmjiQuhrgZFzqTZdoj3BdAifGM78ht4meXdMJltYUTJRiY8s5cXjSMCNf2rZ Fhy8SgbB0nb70icu0Ocq6zQiNGVWJvw= -----END CERTIFICATE-----Generated at Tue Apr 29 17:49:01 2025 by rpki-client