$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/475e940c-ab94-3d7b-86ac-1c3426452993.roa File: 475e940c-ab94-3d7b-86ac-1c3426452993.roa (raw, json) Hash identifier: NNwjVUVCiXSGgKShVKmJaOgh/YwmHZE4hvPehCkUsGQ= Subject key identifier: 65:08:9B:18:24:96:26:53:B9:BC:ED:51:5F:E5:C5:EE:78:2E:9E:B3 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB4019476AC77CF363F400 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/475e940c-ab94-3d7b-86ac-1c3426452993.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 161.232.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:40:19:47:6a:c7:7c:f3:63:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=c41f8520-9a66-4d71-869e-fa30f8d60edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:b7:00:c1:52:30:b9:36:1a:c4:c2:3b:b5: 89:df:ff:df:5b:80:db:17:5e:3b:d7:e0:0b:e5:74: 78:a5:04:78:c6:67:f4:6a:52:57:e9:70:6f:6e:28: 5c:9f:f0:d2:6f:84:d3:88:a2:60:42:e0:34:d9:25: d1:3f:ff:ab:03:db:47:bd:44:69:09:2b:68:74:06: d0:ec:fa:2f:1a:cb:a7:43:e7:1b:91:f3:20:13:7f: 26:58:23:98:9d:9e:11:39:b6:7a:5f:0c:50:81:bc: 12:a6:9e:02:6f:b9:18:ec:63:69:57:7e:6b:09:de: a5:ac:88:28:d0:28:dd:e9:9e:14:61:37:ed:dc:b2: a0:2b:14:8d:e9:a5:7a:55:97:3b:f2:42:c9:91:86: c1:76:f4:f9:7a:6a:a8:a2:2a:25:5e:34:9b:c1:97: 88:ad:2c:36:17:4f:44:a4:32:c6:40:ba:bc:24:6d: f9:eb:27:d5:06:eb:94:61:b4:f3:c3:65:12:94:75: 41:67:33:ae:bb:38:41:54:3d:7d:0a:29:e5:96:9e: 86:87:4c:7d:be:ba:60:34:56:84:83:90:73:f7:a9: 33:11:15:15:90:ff:58:30:e1:e1:3a:00:03:91:18: 93:fa:ad:e3:3b:6a:41:e2:f2:ef:19:f6:03:60:61: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:08:9B:18:24:96:26:53:B9:BC:ED:51:5F:E5:C5:EE:78:2E:9E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/475e940c-ab94-3d7b-86ac-1c3426452993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:69:2c:89:f4:8b:c5:e4:80:fc:77:ef:b9:7f:dd:e5:c3:32: 9b:eb:d6:1b:6f:4f:27:83:1d:d5:8e:ba:c8:31:cc:32:05:26: ca:da:07:6f:65:aa:3e:f6:da:61:f3:19:b5:8d:67:07:e2:33: bd:cd:49:3d:25:a8:b3:b2:d9:13:86:bf:1d:f6:74:f1:5f:ff: 18:00:14:f4:d6:9d:58:df:6d:6f:93:fe:a6:21:e1:b1:ea:7d: 1e:2f:bb:da:48:5d:59:06:c8:95:6c:00:12:7e:99:e5:01:c7: 16:52:4a:02:9b:93:49:29:fb:a5:b9:45:7f:b8:54:f4:f4:f0: fb:b7:fe:47:2c:fb:05:4b:75:b3:64:58:dd:58:41:19:d0:8c: f6:f6:0f:53:29:1a:71:5a:b3:13:e7:1d:53:ee:97:12:a6:7f: 35:30:96:b4:1c:d0:e8:f2:cf:66:36:a5:b0:39:b0:01:48:35: 60:bd:00:f2:5b:ba:6f:53:c9:08:a3:2d:77:f8:8f:18:fb:55: e1:13:31:69:9f:60:81:60:d5:5b:bf:70:5a:6b:d8:a4:e9:39: 60:32:0d:59:4a:61:5c:f6:b4:65:5d:ab:2c:a2:70:5e:e2:7b: 75:88:0a:26:5e:1a:eb:1f:5e:69:72:fa:de:c8:72:33:f4:83: 67:a8:d5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0AZR2rHfPNj9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk YzQxZjg1MjAtOWE2Ni00ZDcxLTg2OWUtZmEzMGY4ZDYwZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAree3AMFSMLk2GsTCO7WJ3//fW4DbF1471+AL 5XR4pQR4xmf0alJX6XBvbihcn/DSb4TTiKJgQuA02SXRP/+rA9tHvURpCStodAbQ 7PovGsunQ+cbkfMgE38mWCOYnZ4RObZ6XwxQgbwSpp4Cb7kY7GNpV35rCd6lrIgo 0Cjd6Z4UYTft3LKgKxSN6aV6VZc78kLJkYbBdvT5emqooiolXjSbwZeIrSw2F09E pDLGQLq8JG356yfVBuuUYbTzw2USlHVBZzOuuzhBVD19Cinllp6Gh0x9vrpgNFaE g5Bz96kzERUVkP9YMOHhOgADkRiT+q3jO2pB4vLvGfYDYGGRCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUImxgkliZTubztUV/lxe54Lp6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNDc1ZTk0MGMtYWI5NC0z ZDdiLTg2YWMtMWMzNDI2NDUyOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1pLIn0i8XkgPx377l/3eXDMpvr1htvTyeDHdWOusgxzDIFJsraB29l qj722mHzGbWNZwfiM73NST0lqLOy2ROGvx32dPFf/xgAFPTWnVjfbW+T/qYh4bHq fR4vu9pIXVkGyJVsABJ+meUBxxZSSgKbk0kp+6W5RX+4VPT08Pu3/kcs+wVLdbNk WN1YQRnQjPb2D1MpGnFasxPnHVPulxKmfzUwlrQc0Ojyz2Y2pbA5sAFINWC9APJb um9TyQijLXf4jxj7VeETMWmfYIFg1Vu/cFpr2KTpOWAyDVlKYVz2tGVdqyyicF7i e3WICiZeGusfXmly+t7IcjP0g2eo1ZI= -----END CERTIFICATE-----Generated at Thu Aug 7 01:56:29 2025 by rpki-client