$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e35b315-6c31-35d5-8b03-cef3fe0f653f.roa File: 2e35b315-6c31-35d5-8b03-cef3fe0f653f.roa (raw, json) Hash identifier: 2PDx9aZHy/FRSVnzQrCy4ANfik3WM6f7G1/S6sUW8p8= Subject key identifier: EA:2F:DB:1F:7E:F9:93:B4:B7:D7:DB:A2:3D:AD:8A:FA:62:C5:04:5F Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB349638854A783DF96CC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e35b315-6c31-35d5-8b03-cef3fe0f653f.roa Signing time: Thu 24 Apr 2025 11:16:10 +0000 ROA not before: Thu 24 Apr 2025 11:16:10 +0000 ROA not after: Wed 23 Jul 2025 11:16:10 +0000 asID: 12041 IP address blocks: 161.232.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:34:96:38:85:4a:78:3d:f9:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:10 2025 GMT Not After : Jul 23 11:16:10 2025 GMT Subject: CN=7241d045-173e-445c-a2c6-76b299195acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2a:c1:7a:a7:2e:da:4e:42:c8:af:a0:27:e1: 51:a2:c3:09:d6:3d:95:20:3d:da:3f:cb:85:d9:d5: de:da:79:33:56:a0:53:17:db:b4:0c:89:2f:d8:93: e5:05:f0:16:77:36:f7:1e:d8:bc:25:33:9d:51:0c: 08:3b:45:1f:9d:7a:9f:3d:10:02:fc:62:da:82:fe: 5f:0b:3e:94:06:7e:11:b7:22:f1:b1:fe:25:72:c4: fd:ad:cd:18:25:f8:e2:09:33:a0:23:36:ed:1c:4c: b1:fe:6c:ef:09:d9:ee:9a:69:9b:1e:b0:70:06:70: ef:36:19:bd:14:54:ae:3e:34:8d:84:a9:8f:04:c9: da:cf:d3:30:29:fc:3c:40:fe:1d:c0:73:98:86:01: a7:84:9a:3c:1b:9f:0e:be:5b:82:ab:b2:c0:80:82: 9f:f6:59:13:b8:9d:ff:48:1d:b0:90:ea:73:cc:67: 18:05:63:24:17:a9:60:cb:4b:a3:f4:38:83:f1:06: f8:6e:f8:b4:70:65:d2:9f:1f:94:f2:0d:28:e0:ba: ca:96:5a:50:46:ef:ab:17:02:24:45:f4:11:9b:f4: 1b:b0:25:53:a3:41:7c:59:3c:a6:1c:6d:32:7e:9d: 02:78:23:41:2e:7f:58:d8:d9:da:3a:90:5f:d7:c9: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2F:DB:1F:7E:F9:93:B4:B7:D7:DB:A2:3D:AD:8A:FA:62:C5:04:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2e35b315-6c31-35d5-8b03-cef3fe0f653f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c9:92:9f:81:a1:f1:9a:9e:f9:f7:6b:6e:03:96:cd:c6:7f: 0c:5f:7b:cb:58:c0:36:d5:79:bd:4a:c6:80:18:d9:5b:1a:ca: 4f:47:cd:fe:e1:6a:12:d9:59:a8:fd:1f:46:df:51:86:79:dc: 8f:b1:05:05:9f:04:df:e5:e7:74:48:d9:b6:70:ee:28:42:b3: c7:a2:8a:9c:db:a2:05:d1:48:b2:a9:0d:d6:f1:89:27:78:49: e6:c8:6d:c8:dc:48:87:6e:57:e5:07:ae:6d:a6:3b:73:42:f5: ff:fa:d5:40:9b:11:b5:4c:6c:a6:76:11:3a:c9:f0:af:ec:e8: 71:0e:10:11:16:f7:01:7b:c8:76:e2:e8:0c:06:f2:5e:43:0a: f4:2b:b2:07:86:36:a6:a0:82:5c:10:d5:a8:c3:64:fe:17:64: 80:b3:98:a9:b5:54:cb:f0:a7:21:53:d2:32:48:bf:16:f3:38: 75:b9:10:df:54:06:f0:d1:d4:5d:3d:a4:5e:53:92:66:46:ff: 91:92:c9:c0:e1:70:87:7e:a7:1b:25:5c:f4:6e:6c:1e:93:3f: df:8e:6b:45:3e:7f:83:6a:5e:1a:98:1f:3d:14:d8:d0:b1:1f: 79:db:0d:86:2d:72:ff:74:a8:8c:03:09:12:9f:d8:95:77:71: a8:2a:f0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuzSWOIVKeD35bMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYxMFoXDTI1MDcyMzExMTYxMFowLzEtMCsGA1UEAxMk NzI0MWQwNDUtMTczZS00NDVjLWEyYzYtNzZiMjk5MTk1YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSrBeqcu2k5CyK+gJ+FRosMJ1j2VID3aP8uF 2dXe2nkzVqBTF9u0DIkv2JPlBfAWdzb3Hti8JTOdUQwIO0UfnXqfPRAC/GLagv5f Cz6UBn4RtyLxsf4lcsT9rc0YJfjiCTOgIzbtHEyx/mzvCdnummmbHrBwBnDvNhm9 FFSuPjSNhKmPBMnaz9MwKfw8QP4dwHOYhgGnhJo8G58OvluCq7LAgIKf9lkTuJ3/ SB2wkOpzzGcYBWMkF6lgy0uj9DiD8Qb4bvi0cGXSnx+U8g0o4LrKllpQRu+rFwIk RfQRm/QbsCVTo0F8WTymHG0yfp0CeCNBLn9Y2NnaOpBf18nl+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOov2x9++ZO0t9fboj2tivpixQRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmUzNWIzMTUtNmMzMS0z NWQ1LThiMDMtY2VmM2ZlMGY2NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLJkp+BofGanvn3a24Dls3Gfwxfe8tYwDbVeb1KxoAY2Vsayk9Hzf7h ahLZWaj9H0bfUYZ53I+xBQWfBN/l53RI2bZw7ihCs8eiipzbogXRSLKpDdbxiSd4 SebIbcjcSIduV+UHrm2mO3NC9f/61UCbEbVMbKZ2ETrJ8K/s6HEOEBEW9wF7yHbi 6AwG8l5DCvQrsgeGNqagglwQ1ajDZP4XZICzmKm1VMvwpyFT0jJIvxbzOHW5EN9U BvDR1F09pF5TkmZG/5GSycDhcId+pxslXPRubB6TP9+Oa0U+f4NqXhqYHz0U2NCx H3nbDYYtcv90qIwDCRKf2JV3cagq8OU= -----END CERTIFICATE-----Generated at Tue Apr 29 23:44:03 2025 by rpki-client