$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4f72f389-f219-37e3-8c9d-1b50754e75a5.roa File: 4f72f389-f219-37e3-8c9d-1b50754e75a5.roa (raw, json) Hash identifier: jpU0bi8BP8hbzr9f7BlwQaJcHzF+wIYiisQt5IirvAI= Subject key identifier: 7E:85:AA:6F:89:92:B0:3C:14:B3:65:2F:A2:9D:7B:32:98:88:B6:08 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB657565B324940B920280 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4f72f389-f219-37e3-8c9d-1b50754e75a5.roa Signing time: Thu 24 Apr 2025 11:16:33 +0000 ROA not before: Thu 24 Apr 2025 11:16:33 +0000 ROA not after: Wed 23 Jul 2025 11:16:33 +0000 asID: 12041 IP address blocks: 161.232.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:65:75:65:b3:24:94:0b:92:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:33 2025 GMT Not After : Jul 23 11:16:33 2025 GMT Subject: CN=ca225283-9d97-4469-9637-e638e45f163d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:aa:87:c3:fc:e0:2c:68:92:b9:e3:c4:13: d0:e0:c9:45:2a:df:0d:9d:9a:d6:7f:fb:53:36:81: 65:3c:5b:ec:67:59:02:4e:2d:0a:a0:fd:85:ac:5e: 5d:11:1c:ba:cf:c5:68:ea:44:92:d5:a6:99:05:f8: 13:c1:66:95:46:c7:aa:3e:6a:13:6a:74:2d:2b:64: 2c:7c:49:dc:d4:5c:3b:ca:92:4e:ac:6c:72:2a:01: 72:07:18:fb:77:88:a4:ab:66:f9:2c:ea:89:8e:d5: 1b:ee:45:e8:9c:f5:32:cb:6a:0b:cf:ff:14:d8:c8: b4:bb:8f:c6:d1:1e:15:c7:e1:00:ad:3e:34:60:40: c5:9e:12:b9:c5:60:0f:2b:0c:63:63:bc:68:35:2d: 9c:44:07:f3:c5:36:4e:54:88:78:fc:07:08:b8:26: 53:d6:6b:42:59:6c:69:57:6f:5e:54:df:de:aa:06: 41:3f:af:9b:19:98:d2:d4:a4:48:a0:8d:58:80:31: d7:f2:7c:c6:3f:ed:2a:93:38:c9:56:1f:ae:0a:4a: 0e:99:4a:30:6b:fc:8c:02:6f:41:75:48:38:36:4a: d4:ef:d1:16:3f:c5:9b:27:86:a5:1f:54:e2:3a:f1: 55:19:8a:a6:00:29:70:60:63:3c:04:4a:59:5e:5a: f3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:85:AA:6F:89:92:B0:3C:14:B3:65:2F:A2:9D:7B:32:98:88:B6:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/4f72f389-f219-37e3-8c9d-1b50754e75a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:20:02:a3:80:4e:25:fb:2a:5b:3d:3b:db:72:ce:a0:93:a2: 35:5e:8d:4a:03:9d:f2:fa:47:9d:75:27:00:25:d5:d7:05:1a: fd:34:14:a5:a9:0d:2a:82:32:67:ce:17:66:78:05:de:28:a2: 55:7a:63:ad:93:73:df:e1:91:fa:27:f7:de:ce:91:c3:a9:30: 12:77:ac:bb:23:80:5f:91:6b:26:3e:50:11:0d:aa:c2:1f:d2: 95:d2:ef:63:b2:3c:d9:2a:1b:6a:16:5e:3a:88:a4:4e:b7:be: a0:87:69:d8:88:6d:90:de:cb:92:df:eb:3d:ac:03:a9:27:74: 2d:27:c1:07:2d:d5:f7:56:f0:fa:34:03:f3:37:bb:a6:90:14: da:3d:70:fe:95:23:49:13:e6:3c:10:aa:12:7a:97:fc:5a:14: 9c:a5:1b:08:52:11:bc:91:b8:74:e4:a5:9b:56:e1:16:1f:3a: 8b:24:57:f1:87:82:4f:d5:f9:19:e5:0f:0a:6f:e8:cb:7c:ab: 5b:10:46:41:60:f4:41:79:eb:5c:84:a9:df:25:40:17:29:96: 28:b6:c9:cc:91:3d:12:58:63:c2:b7:11:7d:31:4c:c2:80:68: 46:87:3f:4a:63:9d:15:c7:91:82:2d:c1:7d:f3:22:d6:df:9d: 1f:d4:38:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu2V1ZbMklAuSAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYzM1oXDTI1MDcyMzExMTYzM1owLzEtMCsGA1UEAxMk Y2EyMjUyODMtOWQ5Ny00NDY5LTk2MzctZTYzOGU0NWYxNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWuqh8P84CxokrnjxBPQ4MlFKt8NnZrWf/tT NoFlPFvsZ1kCTi0KoP2FrF5dERy6z8Vo6kSS1aaZBfgTwWaVRseqPmoTanQtK2Qs fEnc1Fw7ypJOrGxyKgFyBxj7d4ikq2b5LOqJjtUb7kXonPUyy2oLz/8U2Mi0u4/G 0R4Vx+EArT40YEDFnhK5xWAPKwxjY7xoNS2cRAfzxTZOVIh4/AcIuCZT1mtCWWxp V29eVN/eqgZBP6+bGZjS1KRIoI1YgDHX8nzGP+0qkzjJVh+uCkoOmUowa/yMAm9B dUg4NkrU79EWP8WbJ4alH1TiOvFVGYqmAClwYGM8BEpZXlrzTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6Fqm+JkrA8FLNlL6KdezKYiLYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNGY3MmYzODktZjIxOS0z N2UzLThjOWQtMWI1MDc1NGU3NWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4gAqOATiX7Kls9O9tyzqCTojVejUoDnfL6R511JwAl1dcFGv00FKWp DSqCMmfOF2Z4Bd4oolV6Y62Tc9/hkfon997OkcOpMBJ3rLsjgF+RayY+UBENqsIf 0pXS72OyPNkqG2oWXjqIpE63vqCHadiIbZDey5Lf6z2sA6kndC0nwQct1fdW8Po0 A/M3u6aQFNo9cP6VI0kT5jwQqhJ6l/xaFJylGwhSEbyRuHTkpZtW4RYfOoskV/GH gk/V+RnlDwpv6Mt8q1sQRkFg9EF561yEqd8lQBcplii2ycyRPRJYY8K3EX0xTMKA aEaHP0pjnRXHkYItwX3zItbfnR/UOBc= -----END CERTIFICATE-----Generated at Tue Apr 29 14:57:44 2025 by rpki-client