$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa File: 5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa (raw, json) Hash identifier: qDf9au9F6FQQphGt/hgxdvO7eBO8IkCxQ/9ZB8f5MBc= Subject key identifier: BC:3D:2C:80:64:05:87:45:7D:3A:46:4A:A9:0C:E0:4E:5B:69:B1:0A Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB69E032B7DC7B57E38900 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa Signing time: Thu 24 Apr 2025 11:16:35 +0000 ROA not before: Thu 24 Apr 2025 11:16:35 +0000 ROA not after: Wed 23 Jul 2025 11:16:35 +0000 asID: 12041 IP address blocks: 161.232.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:69:e0:32:b7:dc:7b:57:e3:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:35 2025 GMT Not After : Jul 23 11:16:35 2025 GMT Subject: CN=5b69e47a-fbaf-4cac-8aaa-d77a6c46f98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:9a:52:4c:e1:89:17:af:e2:23:23:a7:61: 07:64:29:53:d5:63:98:9e:ac:fb:ca:58:62:71:cc: 16:5f:72:81:5d:c5:54:fa:a2:2d:ff:57:b8:4c:b1: f0:6b:d1:8a:48:4d:7f:27:b4:7d:d5:30:06:95:e6: ae:19:fa:62:4c:10:14:95:b7:c7:7b:20:33:5f:a0: 3d:a7:b4:5d:98:a8:77:6c:f9:34:8a:6b:24:cf:29: 32:84:79:ba:dd:01:80:e4:93:b0:07:31:6d:e3:0e: 21:3d:cb:15:b1:b4:24:df:33:f1:19:3a:1a:6d:cc: cf:ef:f2:f7:e8:8d:d7:9a:81:99:fc:6f:33:39:a8: a5:9a:ce:3c:f1:22:31:cb:5b:38:4d:96:8b:cf:0e: a9:57:61:e5:1c:89:5f:b2:e1:a1:18:5d:6c:a2:0d: 34:4b:66:06:dc:8e:3e:d0:37:65:ca:c0:f1:13:ad: 80:14:de:1d:b4:37:f1:ad:57:38:75:0e:c7:83:b6: 8d:9a:bd:fe:d9:e4:04:cd:16:65:1b:13:37:3a:e9: 60:7a:a3:42:cc:97:f7:83:f2:31:ee:73:da:38:b3: 86:29:ec:5b:5f:66:e4:ff:af:f2:bc:71:d7:95:15: 73:4f:ae:ec:8a:c1:3f:1c:7c:9c:9a:18:4b:8b:75: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3D:2C:80:64:05:87:45:7D:3A:46:4A:A9:0C:E0:4E:5B:69:B1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/5109e491-a3c7-3ebf-831e-4e31dc0bafc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:20:78:a7:a4:13:64:ce:aa:01:71:79:c9:a9:ae:03:eb:65: f3:62:57:4f:3a:b6:9b:31:d4:71:9c:ad:12:e3:2d:d0:35:58: 5c:6d:1a:e2:fa:c5:4f:71:e0:1a:cb:3d:e7:87:e3:95:1e:4d: d9:5e:ec:f5:b8:f1:5c:6a:dd:35:2f:db:a8:f0:cf:13:c4:59: 7b:de:17:96:16:14:c4:37:c0:3d:12:aa:8b:01:b3:2c:0d:4b: 90:c6:78:98:b7:e3:74:ab:f8:63:82:54:dd:97:5a:f6:5b:05: 59:65:1c:90:e1:af:7c:94:70:20:f2:19:72:89:28:95:68:b8: 4e:c3:9f:9d:a1:79:64:4f:c6:7c:6f:24:08:d5:84:f0:e1:54: ca:45:48:35:0a:37:b2:3b:c4:93:5c:f1:fc:45:1e:6f:2e:e3: 16:1a:8e:07:ee:09:26:f5:26:26:a3:60:e7:ef:5e:af:72:22: 09:f3:33:f0:b1:bb:43:72:f2:c7:42:a3:60:36:56:06:28:02: a2:5a:0e:a2:75:e8:e7:ed:6e:e2:5e:56:3f:1a:cb:d6:54:62: 5f:87:6c:4f:9f:e5:35:29:7a:ae:1a:30:b8:dd:c2:52:7d:fa: 4b:a7:9c:fa:17:71:d5:de:65:26:89:7f:f1:0a:26:9d:00:c0: de:02:69:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu2ngMrfce1fjiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYzNVoXDTI1MDcyMzExMTYzNVowLzEtMCsGA1UEAxMk NWI2OWU0N2EtZmJhZi00Y2FjLThhYWEtZDc3YTZjNDZmOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7CaUkzhiRev4iMjp2EHZClT1WOYnqz7ylhi ccwWX3KBXcVU+qIt/1e4TLHwa9GKSE1/J7R91TAGleauGfpiTBAUlbfHeyAzX6A9 p7RdmKh3bPk0imskzykyhHm63QGA5JOwBzFt4w4hPcsVsbQk3zPxGToabczP7/L3 6I3XmoGZ/G8zOailms488SIxy1s4TZaLzw6pV2HlHIlfsuGhGF1sog00S2YG3I4+ 0DdlysDxE62AFN4dtDfxrVc4dQ7Hg7aNmr3+2eQEzRZlGxM3OulgeqNCzJf3g/Ix 7nPaOLOGKexbX2bk/6/yvHHXlRVzT67sisE/HHycmhhLi3Vp2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw9LIBkBYdFfTpGSqkM4E5babEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTEwOWU0OTEtYTNjNy0z ZWJmLTgzMWUtNGUzMWRjMGJhZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUgeKekE2TOqgFxecmprgPrZfNiV086tpsx1HGcrRLjLdA1WFxtGuL6 xU9x4BrLPeeH45UeTdle7PW48Vxq3TUv26jwzxPEWXveF5YWFMQ3wD0SqosBsywN S5DGeJi343Sr+GOCVN2XWvZbBVllHJDhr3yUcCDyGXKJKJVouE7Dn52heWRPxnxv JAjVhPDhVMpFSDUKN7I7xJNc8fxFHm8u4xYajgfuCSb1JiajYOfvXq9yIgnzM/Cx u0Ny8sdCo2A2VgYoAqJaDqJ16OftbuJeVj8ay9ZUYl+HbE+f5TUpeq4aMLjdwlJ9 +kunnPoXcdXeZSaJf/EKJp0AwN4CaaE= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:48 2025 by rpki-client