$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4eafbc74-c6df-37e1-9ad3-277ec335c099.roa File: 4eafbc74-c6df-37e1-9ad3-277ec335c099.roa (raw, json) Hash identifier: esuOjGt7HnV1j4LE+vx3UDUHDxPah/PAJSO0pEgNzI0= Subject key identifier: 5D:A3:C9:F3:C2:71:D8:13:B5:74:4F:48:D2:80:57:DE:61:B6:8A:01 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB314B45310149C5726A00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4eafbc74-c6df-37e1-9ad3-277ec335c099.roa Signing time: Thu 24 Apr 2025 11:16:08 +0000 ROA not before: Thu 24 Apr 2025 11:16:08 +0000 ROA not after: Wed 23 Jul 2025 11:16:08 +0000 asID: 12041 IP address blocks: 161.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:31:4b:45:31:01:49:c5:72:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:08 2025 GMT Not After : Jul 23 11:16:08 2025 GMT Subject: CN=81499d7e-1f8d-4f0b-9430-57b049058e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:94:a1:a4:19:10:05:b8:d4:3f:98:4b:79:49: 34:62:49:e9:0b:b6:d5:23:89:4b:5a:92:2b:0c:be: dd:c5:7b:40:b4:d2:0e:6c:2a:3d:d9:c5:42:89:7f: c6:ce:4c:58:c5:3a:f8:8d:c9:57:5c:12:c4:65:fa: 0e:15:36:b7:03:85:b8:68:b8:2f:1c:25:b7:f5:cf: db:cc:15:1a:b7:9a:1b:56:10:d6:c9:a5:dc:01:e2: 36:95:f6:13:a1:94:72:e2:26:1c:f3:96:26:3c:bc: 7a:27:27:f8:02:94:8d:4d:27:3a:f8:75:62:46:a5: 4a:d1:af:cb:4b:5a:d1:03:1c:30:5c:cc:61:74:44: e6:ac:61:57:ce:49:6f:cf:36:34:78:6f:d7:8c:be: 10:8c:1d:ce:c0:33:c1:ae:fc:b2:52:db:28:22:82: a5:2e:01:5f:a0:57:42:78:56:cb:42:01:56:cb:8d: 8e:e7:ed:53:dd:db:42:4b:23:37:8e:39:a2:38:0d: c3:bf:4a:3d:0d:89:c2:e8:ab:d8:a0:71:be:b4:4a: a6:22:6a:a6:d0:03:42:34:30:a6:fd:59:65:2d:d9: f9:f2:e7:56:1c:50:89:96:44:82:aa:4a:13:59:3f: 9c:53:8e:c9:e2:1e:59:ab:79:72:c2:b9:8e:98:1d: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A3:C9:F3:C2:71:D8:13:B5:74:4F:48:D2:80:57:DE:61:B6:8A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4eafbc74-c6df-37e1-9ad3-277ec335c099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:69:11:9f:48:f8:19:7b:cc:d2:e9:cd:91:27:50:35:1e:f2: 53:71:08:b1:35:05:1e:66:9c:e9:50:6b:ec:ef:b8:e4:77:3e: 72:42:14:66:35:34:34:1e:d9:f2:0d:0b:b5:3c:fa:21:66:58: c1:c5:96:e3:1c:a6:d6:13:3c:90:7e:db:b4:75:6a:34:cc:a2: 0e:93:cc:c8:2a:6e:ac:15:e7:08:e6:b9:ef:6b:45:86:dc:f8: 5c:52:eb:86:ce:ed:7b:57:77:94:99:72:1c:29:4b:5c:e6:83: 72:cb:f2:61:e7:50:3e:56:4d:08:61:98:e0:89:cb:2d:00:fe: 1c:ff:e1:80:8e:25:4f:7e:a3:38:65:28:1b:6e:37:b1:14:e1: 22:86:b0:5f:0d:2b:33:a9:f9:67:52:33:fb:0b:66:05:be:75: 2e:74:f8:f6:f9:09:ec:e1:30:ce:96:bd:82:9a:04:b2:54:b3: 28:f4:a5:a3:50:fb:3c:b0:a4:a6:1c:48:a0:ce:9c:30:6a:a1: 81:bc:db:42:19:79:f9:be:e7:e7:ce:15:de:8f:b6:a8:35:6f: 65:15:78:f2:95:fb:db:08:f2:72:2a:f4:3e:65:b1:ed:50:ee: 35:15:6d:63:0b:9e:9e:7b:69:ff:2d:01:09:7d:27:6b:f8:e4: 3e:48:61:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuzFLRTEBScVyagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYwOFoXDTI1MDcyMzExMTYwOFowLzEtMCsGA1UEAxMk ODE0OTlkN2UtMWY4ZC00ZjBiLTk0MzAtNTdiMDQ5MDU4ZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpShpBkQBbjUP5hLeUk0YknpC7bVI4lLWpIr DL7dxXtAtNIObCo92cVCiX/GzkxYxTr4jclXXBLEZfoOFTa3A4W4aLgvHCW39c/b zBUat5obVhDWyaXcAeI2lfYToZRy4iYc85YmPLx6Jyf4ApSNTSc6+HViRqVK0a/L S1rRAxwwXMxhdETmrGFXzklvzzY0eG/XjL4QjB3OwDPBrvyyUtsoIoKlLgFfoFdC eFbLQgFWy42O5+1T3dtCSyM3jjmiOA3Dv0o9DYnC6KvYoHG+tEqmImqm0ANCNDCm /VllLdn58udWHFCJlkSCqkoTWT+cU47J4h5Zq3lywrmOmB20RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2jyfPCcdgTtXRPSNKAV95htooBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGVhZmJjNzQtYzZkZi0z N2UxLTlhZDMtMjc3ZWMzMzVjMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJpEZ9I+Bl7zNLpzZEnUDUe8lNxCLE1BR5mnOlQa+zvuOR3PnJCFGY1 NDQe2fINC7U8+iFmWMHFluMcptYTPJB+27R1ajTMog6TzMgqbqwV5wjmue9rRYbc +FxS64bO7XtXd5SZchwpS1zmg3LL8mHnUD5WTQhhmOCJyy0A/hz/4YCOJU9+ozhl KBtuN7EU4SKGsF8NKzOp+WdSM/sLZgW+dS50+Pb5CezhMM6WvYKaBLJUsyj0paNQ +zywpKYcSKDOnDBqoYG820IZefm+5+fOFd6Ptqg1b2UVePKV+9sI8nIq9D5lse1Q 7jUVbWMLnp57af8tAQl9J2v45D5IYYg= -----END CERTIFICATE-----Generated at Wed Apr 30 05:45:29 2025 by rpki-client