$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32a7b2f7-029f-3dda-b200-7f8f2979321d.roa File: 32a7b2f7-029f-3dda-b200-7f8f2979321d.roa (raw, json) Hash identifier: xr60Xm0L7OJHmeX7JHP8il/Q5EJLP6Ns3XrfMWS2IGU= Subject key identifier: D5:7C:BD:51:A7:91:90:D5:6F:6A:52:4C:2F:A5:1B:F3:C6:31:C5:88 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461EE470B95888ACD24DC0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32a7b2f7-029f-3dda-b200-7f8f2979321d.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1e:e4:70:b9:58:88:ac:d2:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=2570640d-b262-4a2b-8bb0-b91ad1679c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:d7:27:ce:f9:b8:55:17:73:9b:80:3a:f6: 40:1c:41:7a:48:6f:f9:a5:53:d9:06:fb:6a:bc:3d: 44:26:f4:50:57:9d:be:35:23:ce:41:ba:f8:99:10: 8c:e7:f8:14:5b:f1:63:54:a9:ed:2d:82:fa:0f:f1: 72:d5:3f:04:f9:d7:eb:f0:14:fa:36:73:dd:3e:b4: c1:6e:dd:36:fb:a2:47:a6:6e:2e:2d:e8:f4:57:61: b1:9e:99:16:49:91:d1:35:99:7e:2b:6d:6b:a7:11: 43:ba:f2:fa:37:67:41:5c:c4:8b:36:8f:ad:97:13: 85:a4:0e:b8:0b:fb:8c:fe:dd:45:06:8a:e5:26:b6: c0:43:46:b1:f3:a4:4e:e4:81:29:0a:b9:3a:c8:15: ea:17:4c:0a:38:79:e9:d2:9c:65:04:6d:42:83:eb: 40:d3:ac:e0:be:ef:b5:9b:5a:ab:5a:29:7c:de:dc: 5d:35:43:03:bc:0b:9f:db:d5:56:d9:84:9d:75:9c: 9d:41:cf:c7:25:c0:32:96:17:1d:b5:44:a3:71:aa: 91:a1:ed:da:34:ab:40:b9:28:8f:ec:d6:41:7c:75: 62:18:78:5b:dc:6c:d5:c3:8d:62:45:c0:f6:0f:c0: 72:55:b5:b2:ff:a0:12:57:f2:94:85:8b:6e:e4:e2: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7C:BD:51:A7:91:90:D5:6F:6A:52:4C:2F:A5:1B:F3:C6:31:C5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/32a7b2f7-029f-3dda-b200-7f8f2979321d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:36:84:38:45:84:ef:93:9b:d7:7b:79:be:f1:a9:5b:6e:84: 72:5d:7c:f9:6b:62:0b:1e:1b:fc:48:3d:1c:d0:72:91:c9:1f: 7c:2b:6f:10:3c:5f:d9:89:7f:ab:cd:89:b3:f1:ce:3a:41:79: dd:03:78:7d:ac:48:1f:08:94:8c:09:8e:01:8a:43:65:0d:24: ea:53:60:a8:61:77:b1:96:18:14:6c:7c:ca:71:46:1b:38:62: 05:55:49:54:0f:c5:c2:23:26:3d:05:f4:4d:b1:05:4c:7e:90: 81:cd:c0:8e:f0:15:80:f1:48:e1:4c:cc:d9:bd:aa:b4:cd:2f: fe:03:74:aa:ab:15:6d:26:dc:7d:ca:d8:9c:cc:5e:ec:27:c6: 3a:14:3e:01:71:69:7a:b7:5c:f0:ef:40:2b:1a:7b:fa:c2:3a: 7c:30:a2:55:c2:dd:79:ce:eb:d7:d7:47:ad:b7:a1:a0:ed:27: 44:bd:f0:b1:53:94:da:43:18:ec:22:ff:69:91:64:4f:83:15: 31:79:53:4d:8a:93:ee:05:ec:22:2e:21:41:39:5d:6f:df:3b: e6:87:af:5a:3e:ca:8f:e1:18:3a:5e:45:9e:0d:9a:28:05:82: 35:69:cb:9a:45:44:46:35:a5:c2:21:0f:97:92:60:de:6a:a6: fd:96:ac:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh7kcLlYiKzSTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MjU3MDY0MGQtYjI2Mi00YTJiLThiYjAtYjkxYWQxNjc5Yzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLTXJ875uFUXc5uAOvZAHEF6SG/5pVPZBvtq vD1EJvRQV52+NSPOQbr4mRCM5/gUW/FjVKntLYL6D/Fy1T8E+dfr8BT6NnPdPrTB bt02+6JHpm4uLej0V2GxnpkWSZHRNZl+K21rpxFDuvL6N2dBXMSLNo+tlxOFpA64 C/uM/t1FBorlJrbAQ0ax86RO5IEpCrk6yBXqF0wKOHnp0pxlBG1Cg+tA06zgvu+1 m1qrWil83txdNUMDvAuf29VW2YSddZydQc/HJcAylhcdtUSjcaqRoe3aNKtAuSiP 7NZBfHViGHhb3GzVw41iRcD2D8ByVbWy/6ASV/KUhYtu5OJeowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV8vVGnkZDVb2pSTC+lG/PGMcWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzJhN2IyZjctMDI5Zi0z ZGRhLWIyMDAtN2Y4ZjI5NzkzMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKs2hDhFhO+Tm9d7eb7xqVtuhHJdfPlrYgseG/xIPRzQcpHJH3wrbxA8 X9mJf6vNibPxzjpBed0DeH2sSB8IlIwJjgGKQ2UNJOpTYKhhd7GWGBRsfMpxRhs4 YgVVSVQPxcIjJj0F9E2xBUx+kIHNwI7wFYDxSOFMzNm9qrTNL/4DdKqrFW0m3H3K 2JzMXuwnxjoUPgFxaXq3XPDvQCsae/rCOnwwolXC3XnO69fXR623oaDtJ0S98LFT lNpDGOwi/2mRZE+DFTF5U02Kk+4F7CIuIUE5XW/fO+aHr1o+yo/hGDpeRZ4NmigF gjVpy5pFREY1pcIhD5eSYN5qpv2WrIA= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:09 2025 by rpki-client