$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa File: 3923c399-894c-389b-a8c4-6ee7b0a60468.roa (raw, json) Hash identifier: rVNW6ZKU4GyZnkbcVSBlCjYhcpNZQlIOLuBJhjQL05Q= Subject key identifier: 32:93:DE:21:89:C4:08:DB:BF:A5:5E:BA:F0:CE:69:8B:20:D3:27:08 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB749CA51F36E8D7CB13C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa Signing time: Thu 24 Apr 2025 11:16:40 +0000 ROA not before: Thu 24 Apr 2025 11:16:40 +0000 ROA not after: Wed 23 Jul 2025 11:16:40 +0000 asID: 12041 IP address blocks: 161.232.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:74:9c:a5:1f:36:e8:d7:cb:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:40 2025 GMT Not After : Jul 23 11:16:40 2025 GMT Subject: CN=3520c59b-53aa-4888-9f3e-20630e0be9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:21:d2:36:5b:c6:05:b6:dc:43:22:94:a7: 9a:87:70:18:d1:fc:6a:d7:5a:63:2e:64:1d:07:08: 43:f5:a8:c6:45:d4:57:d0:e7:e0:47:37:7d:c4:0d: 42:af:43:34:3f:77:9c:54:37:5d:d2:30:65:8b:b7: a6:2c:90:f2:f3:71:ea:70:68:b9:d7:e5:84:dd:f3: 79:11:da:3c:b9:1a:51:84:ab:67:69:90:75:5d:74: 8c:76:6b:ca:6f:e5:c2:28:a1:7d:42:c8:8d:61:f1: 37:69:d7:01:22:ba:88:ba:99:a6:a0:ef:ba:62:76: ed:02:1e:90:56:bc:89:e3:81:a9:69:f2:37:40:fb: f9:b1:4e:18:a2:34:88:38:6e:9b:0d:40:38:b3:92: 70:7d:ca:d2:b0:b2:61:2e:49:b2:23:52:a3:5a:9c: a3:1f:f4:96:01:66:f0:42:67:64:3d:97:9c:f8:02: cb:8d:24:5e:49:dd:7c:4b:b1:34:2e:36:ea:f1:f0: d4:06:76:c1:1c:e7:4f:96:85:50:cd:c7:cb:1b:f4: da:35:71:64:29:55:ef:d2:13:de:7d:76:f2:bd:fa: b9:28:f9:9a:27:fc:79:80:11:29:ef:a9:3f:3c:ec: 4a:8f:2f:16:5e:e1:67:ff:4e:ba:6d:12:8f:ba:bc: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:93:DE:21:89:C4:08:DB:BF:A5:5E:BA:F0:CE:69:8B:20:D3:27:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:69:68:77:a5:2a:c4:75:93:27:97:04:f6:9f:f2:3c:cc:f7: 7e:8a:22:c2:aa:00:cb:d6:83:90:12:9f:a9:c7:0a:f7:20:22: ac:16:e5:22:6c:0b:88:8e:49:ea:6f:9c:7e:03:b6:62:c2:8b: f6:d5:bb:2a:33:2b:d7:3d:df:df:e8:92:5a:36:9f:b9:ef:ec: 4d:4d:d5:ae:9b:fd:65:9c:65:44:28:15:8c:1b:32:33:6a:b7: 26:2d:f3:07:65:37:47:e5:e5:4d:74:aa:b0:f5:02:98:79:b7: 83:67:ac:a2:7a:e4:98:15:e9:2f:ae:8d:c8:64:0e:36:42:28: a3:e9:00:00:df:10:41:34:1f:4b:02:01:51:80:94:40:1a:68: 26:7a:4a:e2:2a:df:1e:68:c0:e8:c4:00:29:d6:69:28:b8:03: 09:d3:15:92:a2:b6:8d:3a:de:d4:c5:18:e5:cd:ee:a5:12:1e: a9:4f:46:c5:76:4c:03:10:5c:2f:a5:a9:9d:3b:37:0c:50:18: ce:d7:eb:ac:6c:90:2d:9e:19:87:ac:86:bc:a5:95:60:99:6c: fb:b5:e7:7f:c1:d3:0f:ef:04:97:7e:47:7f:59:9e:68:1c:b4: 25:0d:72:a2:77:3a:8e:4c:5d:1a:8c:2a:bc:c2:8d:d0:56:a5: 1d:35:d6:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu3ScpR826NfLE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY0MFoXDTI1MDcyMzExMTY0MFowLzEtMCsGA1UEAxMk MzUyMGM1OWItNTNhYS00ODg4LTlmM2UtMjA2MzBlMGJlOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGIh0jZbxgW23EMilKeah3AY0fxq11pjLmQd BwhD9ajGRdRX0OfgRzd9xA1Cr0M0P3ecVDdd0jBli7emLJDy83HqcGi51+WE3fN5 Edo8uRpRhKtnaZB1XXSMdmvKb+XCKKF9QsiNYfE3adcBIrqIupmmoO+6YnbtAh6Q VryJ44GpafI3QPv5sU4YojSIOG6bDUA4s5JwfcrSsLJhLkmyI1KjWpyjH/SWAWbw QmdkPZec+ALLjSReSd18S7E0Ljbq8fDUBnbBHOdPloVQzcfLG/TaNXFkKVXv0hPe fXbyvfq5KPmaJ/x5gBEp76k/POxKjy8WXuFn/066bRKPurxHqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKT3iGJxAjbv6VeuvDOaYsg0ycIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzkyM2MzOTktODk0Yy0z ODliLWE4YzQtNmVlN2IwYTYwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdpaHelKsR1kyeXBPaf8jzM936KIsKqAMvWg5ASn6nHCvcgIqwW5SJs C4iOSepvnH4DtmLCi/bVuyozK9c939/oklo2n7nv7E1N1a6b/WWcZUQoFYwbMjNq tyYt8wdlN0fl5U10qrD1Aph5t4NnrKJ65JgV6S+ujchkDjZCKKPpAADfEEE0H0sC AVGAlEAaaCZ6SuIq3x5owOjEACnWaSi4AwnTFZKito063tTFGOXN7qUSHqlPRsV2 TAMQXC+lqZ07NwxQGM7X66xskC2eGYeshryllWCZbPu153/B0w/vBJd+R39Znmgc tCUNcqJ3Oo5MXRqMKrzCjdBWpR011k8= -----END CERTIFICATE-----Generated at Tue Apr 29 18:38:40 2025 by rpki-client