$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/55917b41-14fa-376c-864c-cf2e965c31ad.roa File: 55917b41-14fa-376c-864c-cf2e965c31ad.roa (raw, json) Hash identifier: g1PbYkGozZvepNm0AVXJ7RMQu67Z8fgYJVIKkhEjQZk= Subject key identifier: DD:86:BB:FF:D2:4B:EF:75:E3:75:C6:6C:91:A2:57:98:03:68:90:F4 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A2127A2D7A9AED74B32F1AA0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/55917b41-14fa-376c-864c-cf2e965c31ad.roa Signing time: Thu 24 Apr 2025 14:12:00 +0000 ROA not before: Thu 24 Apr 2025 14:12:00 +0000 ROA not after: Wed 23 Jul 2025 14:12:00 +0000 asID: 207266 IP address blocks: 161.232.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:7a:2d:7a:9a:ed:74:b3:2f:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:00 2025 GMT Not After : Jul 23 14:12:00 2025 GMT Subject: CN=9ee1bb59-2d2b-4858-b46d-ff30a48b3165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:da:8c:78:20:73:aa:d5:01:1f:de:39:5a: fe:56:5f:26:97:45:34:59:2d:88:5b:22:94:51:10: 50:09:b6:0e:5e:f7:71:c7:26:78:74:a5:de:38:ba: f6:02:43:a5:11:90:27:91:98:28:ea:66:9c:da:f7: 5f:22:76:16:f2:58:42:2e:f0:fc:d2:55:4f:a1:18: 10:e2:26:23:a7:54:19:03:14:f7:6a:a6:5c:16:80: d3:5e:a5:77:89:df:7f:94:ad:fc:fb:f4:3b:28:db: a1:40:79:81:fa:5a:76:48:31:1f:58:18:cf:8e:38: 60:9d:fb:fb:fb:80:a7:1c:de:45:13:ac:e9:b8:81: e5:6d:16:d5:66:45:67:49:d5:04:34:3f:f4:fa:1d: 93:f2:16:90:e8:4f:fa:c1:2b:06:1e:a2:53:55:63: 75:e4:3e:48:2c:9b:3f:ab:dd:01:b5:72:b4:9c:d4: 6e:8e:fa:be:a7:d0:bb:5d:f9:4c:7a:c2:74:8a:c7: d8:5b:a0:e5:1d:3b:5d:6e:ba:30:0e:62:f9:4d:75: a4:2e:c5:61:50:27:0e:f6:79:09:ce:46:39:08:fa: 20:e6:95:16:f4:b3:3d:86:39:9e:2b:8b:d0:77:2b: c5:82:0d:2b:de:ae:68:5b:96:b3:53:7b:32:3d:0a: 59:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:86:BB:FF:D2:4B:EF:75:E3:75:C6:6C:91:A2:57:98:03:68:90:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/55917b41-14fa-376c-864c-cf2e965c31ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:65:ef:59:15:13:d8:0f:2f:56:f2:90:1c:3a:93:eb:48:d6: f2:1d:fb:c1:c8:b3:4f:0a:a6:2f:01:bb:0e:da:5e:40:31:de: cf:32:df:b7:f4:f5:2b:db:7f:bb:80:88:94:7b:fd:9f:b5:45: 61:23:30:50:71:d0:83:46:fc:c0:b0:0e:cb:69:04:d1:76:49: 44:91:3d:ba:71:19:2d:47:6b:a8:e8:17:88:09:4d:97:65:7d: d9:42:08:84:25:7d:56:e7:87:72:4d:bd:e2:4b:c3:98:6f:d2: dc:ec:e0:4e:9f:fa:af:4e:32:06:83:e1:1c:e0:1f:5e:6a:de: 70:02:34:28:c5:14:c0:ee:ad:54:cb:94:96:5a:7a:0b:22:95: 76:b3:28:f8:6e:f8:c0:68:42:ab:65:56:02:ae:59:13:4d:eb: e8:44:aa:83:eb:c9:66:09:bf:e9:8d:7f:87:bb:79:9c:4e:80: 9b:33:89:12:9d:32:c4:1b:50:b3:de:70:87:3d:b3:a5:17:23: ef:bd:7c:e0:2e:79:60:fe:04:75:50:8e:a5:2e:16:fe:5a:7d: c9:e0:af:78:12:73:0a:c8:46:ec:fb:0d:7a:ce:9d:97:09:24: 3e:8c:8a:cb:fb:7e:6b:8e:0d:a2:7d:51:f1:01:d2:9a:f7:42: 4c:c7:7f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEnoteprtdLMvGqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTIwMFoXDTI1MDcyMzE0MTIwMFowLzEtMCsGA1UEAxMk OWVlMWJiNTktMmQyYi00ODU4LWI0NmQtZmYzMGE0OGIzMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N/ajHggc6rVAR/eOVr+Vl8ml0U0WS2IWyKU URBQCbYOXvdxxyZ4dKXeOLr2AkOlEZAnkZgo6mac2vdfInYW8lhCLvD80lVPoRgQ 4iYjp1QZAxT3aqZcFoDTXqV3id9/lK38+/Q7KNuhQHmB+lp2SDEfWBjPjjhgnfv7 +4CnHN5FE6zpuIHlbRbVZkVnSdUEND/0+h2T8haQ6E/6wSsGHqJTVWN15D5ILJs/ q90BtXK0nNRujvq+p9C7XflMesJ0isfYW6DlHTtdbrowDmL5TXWkLsVhUCcO9nkJ zkY5CPog5pUW9LM9hjmeK4vQdyvFgg0r3q5oW5azU3syPQpZzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2Gu//SS+9143XGbJGiV5gDaJD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTU5MTdiNDEtMTRmYS0z NzZjLTg2NGMtY2YyZTk2NWMzMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBl71kVE9gPL1bykBw6k+tI1vId+8HIs08Kpi8Buw7aXkAx3s8y37f0 9Svbf7uAiJR7/Z+1RWEjMFBx0ING/MCwDstpBNF2SUSRPbpxGS1Ha6joF4gJTZdl fdlCCIQlfVbnh3JNveJLw5hv0tzs4E6f+q9OMgaD4RzgH15q3nACNCjFFMDurVTL lJZaegsilXazKPhu+MBoQqtlVgKuWRNN6+hEqoPryWYJv+mNf4e7eZxOgJsziRKd MsQbULPecIc9s6UXI++9fOAueWD+BHVQjqUuFv5afcngr3gScwrIRuz7DXrOnZcJ JD6Misv7fmuODaJ9UfEB0pr3QkzHf+Y= -----END CERTIFICATE-----Generated at Tue Apr 29 20:59:47 2025 by rpki-client