$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41066e44-9ff9-372e-ad32-8f6b89307711.roa File: 41066e44-9ff9-372e-ad32-8f6b89307711.roa (raw, json) Hash identifier: 5vIGVuBWoRHr8NPjKraK6BA5LRtVBSRYPSXVfGDcmjg= Subject key identifier: 79:EE:B0:08:E7:CD:BE:1A:52:AF:C2:B9:5B:FC:C8:2F:8B:FC:22:69 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461D36084EB13E663AC980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41066e44-9ff9-372e-ad32-8f6b89307711.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1d:36:08:4e:b1:3e:66:3a:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=cf6c068c-a65c-4fad-8d93-f4cf97011313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:b0:3c:72:ec:dd:f1:e2:21:1e:7a:c6:d2: 3d:16:5c:50:85:bc:e2:cb:00:74:9e:44:93:91:32: 1a:d5:5a:ab:ae:ff:d5:89:92:9e:15:0b:bf:d9:8b: 4d:78:45:7b:32:58:1f:20:89:82:0a:5e:91:43:33: 32:fb:ec:1b:65:c9:f3:0c:33:32:5a:02:c4:0a:ea: 31:8d:4c:02:20:3f:db:f4:59:fb:ac:46:76:b4:54: 70:65:b9:69:e4:f9:7b:8d:42:65:19:07:98:af:95: 6b:80:be:a8:b0:9b:18:bc:90:e1:ff:ba:92:6f:68: 7c:e1:06:e7:87:de:bc:92:66:fa:dd:cd:49:25:27: 17:7d:fa:8d:81:33:5a:45:a2:99:fa:50:bd:47:55: ca:01:e4:6b:4c:ec:b1:5c:58:2d:d9:5f:23:12:5f: dd:2b:68:ea:01:51:fa:86:bd:43:dd:e6:45:bd:fd: 69:c9:dc:6f:db:93:25:d2:2f:5e:de:32:7c:22:91: bb:e1:45:9d:54:11:df:19:4b:40:ee:00:7e:52:76: 80:41:a6:c3:25:30:69:fc:2b:2d:c7:ca:9d:aa:2b: 51:f8:0e:06:5f:2c:bc:21:54:9f:05:0b:33:9b:d2: 36:21:d0:91:0c:b7:0b:73:cf:98:a0:07:93:17:8c: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EE:B0:08:E7:CD:BE:1A:52:AF:C2:B9:5B:FC:C8:2F:8B:FC:22:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/41066e44-9ff9-372e-ad32-8f6b89307711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4d:70:b3:90:3a:a5:62:d4:d8:b8:ae:1a:b5:2e:0a:28:6f: ec:06:49:18:85:40:db:7d:61:c0:0a:64:3f:19:c8:80:a5:65: 70:3e:d4:7f:6f:d5:86:6b:68:7e:8a:36:a1:6e:64:71:e8:68: 3e:10:bd:f5:75:00:74:4b:c5:f5:f4:49:6e:7c:b8:c6:5a:d2: e7:12:ba:b7:23:32:53:cc:fa:ac:cc:71:92:9f:07:b5:ac:de: c1:d3:a4:c0:0e:fe:ff:3c:45:1a:69:38:ba:86:db:28:d2:ee: b2:cf:9e:5d:66:28:84:d5:6d:dc:ca:5c:f1:14:38:52:53:31: cf:fd:2d:8d:f9:89:c4:02:ea:93:b4:08:af:f2:f1:66:bb:78: cb:35:4b:81:00:17:75:41:78:94:24:39:84:6a:c3:56:d5:a7: 6b:c5:7a:ef:09:3d:69:1b:19:12:6e:32:1b:9e:2d:88:4f:e2: dd:a4:4e:22:c3:bf:53:67:9f:cd:9a:a8:02:17:cc:1b:55:a2: 93:e1:a3:3b:67:51:2c:29:eb:b0:44:27:c4:99:5e:c7:e6:e4: d5:f5:00:47:1c:07:87:78:a0:73:0d:f5:8b:dc:70:df:3b:5d: 36:8b:86:b2:72:51:9f:a5:92:f4:8f:6f:4c:ae:81:b3:cd:95: 4c:4d:16:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh02CE6xPmY6yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2Y2YzA2OGMtYTY1Yy00ZmFkLThkOTMtZjRjZjk3MDExMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMmwPHLs3fHiIR56xtI9FlxQhbziywB0nkST kTIa1Vqrrv/ViZKeFQu/2YtNeEV7MlgfIImCCl6RQzMy++wbZcnzDDMyWgLECuox jUwCID/b9Fn7rEZ2tFRwZblp5Pl7jUJlGQeYr5VrgL6osJsYvJDh/7qSb2h84Qbn h968kmb63c1JJScXffqNgTNaRaKZ+lC9R1XKAeRrTOyxXFgt2V8jEl/dK2jqAVH6 hr1D3eZFvf1pydxv25Ml0i9e3jJ8IpG74UWdVBHfGUtA7gB+UnaAQabDJTBp/Cst x8qdqitR+A4GXyy8IVSfBQszm9I2IdCRDLcLc8+YoAeTF4wBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnusAjnzb4aUq/CuVv8yC+L/CJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDEwNjZlNDQtOWZmOS0z NzJlLWFkMzItOGY2Yjg5MzA3NzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxNcLOQOqVi1Ni4rhq1Lgoob+wGSRiFQNt9YcAKZD8ZyIClZXA+1H9v 1YZraH6KNqFuZHHoaD4QvfV1AHRLxfX0SW58uMZa0ucSurcjMlPM+qzMcZKfB7Ws 3sHTpMAO/v88RRppOLqG2yjS7rLPnl1mKITVbdzKXPEUOFJTMc/9LY35icQC6pO0 CK/y8Wa7eMs1S4EAF3VBeJQkOYRqw1bVp2vFeu8JPWkbGRJuMhueLYhP4t2kTiLD v1Nnn82aqAIXzBtVopPhoztnUSwp67BEJ8SZXsfm5NX1AEccB4d4oHMN9YvccN87 XTaLhrJyUZ+lkvSPb0yugbPNlUxNFkQ= -----END CERTIFICATE-----Generated at Thu Aug 7 01:21:50 2025 by rpki-client