$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa File: 3923c399-894c-389b-a8c4-6ee7b0a60468.roa (raw, json) Hash identifier: sH5kPJ6Cb+u+/YxE9P3qViYjiOCwtteubnKsPmrhrsc= Subject key identifier: DF:7C:CB:14:E4:35:03:E7:F9:15:F3:57:F4:EE:17:6C:C7:43:A6:5D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461E50704039CEE2A4B4B0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1e:50:70:40:39:ce:e2:a4:b4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=233f2005-bb6c-4d4f-95fb-aca4632fe036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:a2:2d:29:89:a9:6b:a8:a9:46:ea:90:65: 62:76:ac:cd:0e:6d:18:14:b6:1e:5b:d7:75:0c:15: fb:77:f4:4d:85:f4:eb:70:68:c9:b2:43:fc:c3:07: 71:08:8a:b1:28:9c:a6:20:46:d6:e4:05:f8:44:1c: 97:34:ae:66:e0:b7:9a:66:81:09:e7:83:7a:9b:30: 35:27:a6:00:44:af:16:56:6c:4b:b4:c3:78:4e:4e: 5a:a4:0a:51:06:bf:9f:97:fb:96:06:66:ad:35:28: 49:30:bb:07:b0:e8:d4:47:e7:f1:72:f7:60:2f:51: 85:cf:89:47:b9:ce:dd:c8:32:a4:6b:11:6a:5d:8d: d8:f5:40:a8:1b:6c:05:8c:6b:f2:02:61:3d:b4:4b: 9f:3e:e8:36:53:ac:95:44:6b:d2:a4:31:11:1b:b7: 3f:21:67:0a:6e:ad:e0:6a:03:e6:9a:ae:a2:1f:f4: b5:81:8c:13:ea:3d:6c:6a:05:d7:a1:16:56:c8:2c: d0:28:d7:20:02:7e:56:0c:34:26:64:b0:8d:25:60: b1:8d:a8:23:7c:86:27:be:94:c1:a3:92:82:c1:d8: c7:e0:ea:cc:d9:38:c5:07:6c:28:e2:91:bb:d0:1d: 88:9e:34:9f:96:0f:32:43:ab:21:81:d6:62:0a:7f: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7C:CB:14:E4:35:03:E7:F9:15:F3:57:F4:EE:17:6C:C7:43:A6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3923c399-894c-389b-a8c4-6ee7b0a60468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e9:14:4c:97:93:a8:a1:f7:95:6c:0c:d1:5d:3c:59:b2:9a: e3:b5:93:08:11:8b:08:6f:af:ba:f7:ca:48:ae:21:26:e5:83: 6f:dc:83:aa:83:98:83:b8:11:74:eb:36:5c:63:7a:92:59:fc: 5d:53:5f:6b:ca:2e:07:16:0a:aa:ef:43:ac:a9:23:e7:4a:5f: 14:f1:f8:ce:b2:cb:b8:e7:a5:a8:67:a1:84:91:a8:ba:3a:ac: 5a:84:f9:19:02:39:87:84:20:ce:58:96:e7:55:74:4b:56:8f: 94:d6:e6:fe:bb:c5:62:5d:95:86:05:11:c2:ee:ae:3d:2c:99: c5:e8:c5:62:c4:f7:08:65:81:d4:e7:48:2e:ec:87:74:11:c9: ad:80:7a:84:81:2d:ef:e3:8c:96:4a:7d:26:f0:0a:3c:44:40: c6:f9:1b:ae:b1:73:a5:61:6a:c9:be:56:98:ee:6d:a1:d6:88: c2:e3:ff:68:03:2e:9e:1b:67:18:66:68:44:91:28:71:32:d2: f8:e8:7c:07:bf:be:3b:b9:22:c3:be:7a:b5:7b:85:ce:18:ec: 60:2b:5f:5f:30:df:42:70:b7:88:b1:38:27:9d:7b:e1:9e:d0: 69:b3:99:0b:a9:67:4b:17:31:cc:01:78:00:53:bb:12:da:d5: 4b:b9:36:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh5QcEA5zuKktLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MjMzZjIwMDUtYmI2Yy00ZDRmLTk1ZmItYWNhNDYzMmZlMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kqiLSmJqWuoqUbqkGVidqzNDm0YFLYeW9d1 DBX7d/RNhfTrcGjJskP8wwdxCIqxKJymIEbW5AX4RByXNK5m4LeaZoEJ54N6mzA1 J6YARK8WVmxLtMN4Tk5apApRBr+fl/uWBmatNShJMLsHsOjUR+fxcvdgL1GFz4lH uc7dyDKkaxFqXY3Y9UCoG2wFjGvyAmE9tEufPug2U6yVRGvSpDERG7c/IWcKbq3g agPmmq6iH/S1gYwT6j1sagXXoRZWyCzQKNcgAn5WDDQmZLCNJWCxjagjfIYnvpTB o5KCwdjH4OrM2TjFB2wo4pG70B2InjSflg8yQ6shgdZiCn+nmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN98yxTkNQPn+RXzV/TuF2zHQ6ZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMzkyM2MzOTktODk0Yy0z ODliLWE4YzQtNmVlN2IwYTYwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzpFEyXk6ih95VsDNFdPFmymuO1kwgRiwhvr7r3ykiuISblg2/cg6qD mIO4EXTrNlxjepJZ/F1TX2vKLgcWCqrvQ6ypI+dKXxTx+M6yy7jnpahnoYSRqLo6 rFqE+RkCOYeEIM5YludVdEtWj5TW5v67xWJdlYYFEcLurj0smcXoxWLE9whlgdTn SC7sh3QRya2AeoSBLe/jjJZKfSbwCjxEQMb5G66xc6Vhasm+VpjubaHWiMLj/2gD Lp4bZxhmaESRKHEy0vjofAe/vju5IsO+erV7hc4Y7GArX18w30Jwt4ixOCede+Ge 0GmzmQupZ0sXMcwBeABTuxLa1Uu5Np8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:52 2025 by rpki-client