$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/57fefa08-5438-324e-b276-9fad2175bb09.roa File: 57fefa08-5438-324e-b276-9fad2175bb09.roa (raw, json) Hash identifier: zxvu5wBx2MYB6DuUg6GYQXhHrTJzbo5WgDMtEL/Xl2A= Subject key identifier: 9B:B3:ED:D0:8B:0B:C1:02:48:74:E0:4F:44:D6:14:98:84:9F:E4:A2 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB71C274D02871C0823380 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/57fefa08-5438-324e-b276-9fad2175bb09.roa Signing time: Thu 24 Apr 2025 11:16:39 +0000 ROA not before: Thu 24 Apr 2025 11:16:39 +0000 ROA not after: Wed 23 Jul 2025 11:16:39 +0000 asID: 12041 IP address blocks: 161.232.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:71:c2:74:d0:28:71:c0:82:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:39 2025 GMT Not After : Jul 23 11:16:39 2025 GMT Subject: CN=1e8bb89a-6c21-4fcf-807e-e65469cff57b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:56:4b:fa:1e:32:3e:e5:d9:be:46:ea:ed: d2:e8:0d:53:da:58:66:57:c2:2f:b3:d5:a2:8a:d5: eb:ca:cb:2b:d6:00:ab:d1:8d:3d:c3:c1:0b:79:33: d2:1b:2e:7f:6a:50:3f:90:6d:56:88:8d:33:16:56: a5:c5:a4:57:6e:5c:7d:5f:06:b2:44:12:b3:bc:d0: e4:2e:43:93:c2:f0:58:21:df:6e:1d:67:a0:50:5f: 20:8e:d8:ad:12:cc:41:35:31:95:29:75:14:c4:cd: 8a:18:e1:a6:ee:0d:93:2e:4b:6e:9d:ac:59:65:9a: 0e:26:fe:8c:02:99:0b:8d:df:01:c4:63:2c:15:d8: e7:eb:25:59:fc:20:9c:53:2f:26:04:91:a4:71:c8: 33:f7:fc:b7:92:4c:db:f2:54:f4:1a:9e:3f:6c:cc: 4c:bc:ed:d8:83:71:1b:e6:c1:c5:f8:99:4f:58:01: 79:58:a3:16:da:bb:85:a0:40:21:c4:8f:27:d0:c4: f0:74:cd:b0:ff:fe:ea:b2:d9:3d:1b:68:fd:79:a5: 01:ae:b7:83:5a:5e:40:44:39:8f:5e:2a:0d:ea:af: b9:46:11:6d:f1:39:5e:8b:a9:ad:a5:26:f1:a1:9a: d4:8c:29:0e:9f:98:5b:c6:dd:3d:60:52:71:48:74: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:ED:D0:8B:0B:C1:02:48:74:E0:4F:44:D6:14:98:84:9F:E4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/57fefa08-5438-324e-b276-9fad2175bb09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:6c:59:34:ba:c4:02:d6:88:fb:de:e1:e8:6e:10:d2:06:86: 1f:04:66:fd:89:83:c5:f5:22:a9:ae:0f:7a:7f:93:f8:40:ea: 5c:8d:47:4a:89:fe:0d:99:86:5b:eb:04:38:39:01:3c:f4:14: 17:8c:ea:ec:5a:6d:64:01:99:d2:66:54:8a:48:4b:81:da:fa: d8:73:76:c9:09:8f:d2:cf:92:b0:2e:ec:7a:f2:43:81:ed:2d: 59:db:33:7e:b2:97:b3:40:79:97:c9:ca:76:6b:25:c3:05:20: dd:4e:f5:ce:db:56:3a:b5:91:9a:ff:67:82:ec:1f:29:98:19: 80:c2:ca:f3:1f:9a:ed:1f:bc:9c:63:8c:02:24:b0:39:08:de: 68:a1:19:68:ed:4b:0f:a3:b3:52:a5:7b:e1:e3:42:65:58:45: 33:5f:6d:37:5e:dc:82:95:d8:cd:5a:03:92:84:c9:2a:3c:b8: 5a:23:2e:b5:74:a1:3f:e0:ca:6e:46:73:a6:c4:2c:d0:8d:ac: 5f:bd:9b:8b:fa:59:c4:de:f8:74:c6:ea:4f:1d:97:e3:c5:b2: 47:f1:59:ed:d1:59:22:16:30:3a:49:6d:50:ee:6e:93:e5:f2: 37:46:fe:b2:62:90:eb:8e:31:5e:c4:f6:c5:09:6b:4e:0a:51: 87:0c:cf:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu3HCdNAoccCCM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYzOVoXDTI1MDcyMzExMTYzOVowLzEtMCsGA1UEAxMk MWU4YmI4OWEtNmMyMS00ZmNmLTgwN2UtZTY1NDY5Y2ZmNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubtWS/oeMj7l2b5G6u3S6A1T2lhmV8Ivs9Wi itXryssr1gCr0Y09w8ELeTPSGy5/alA/kG1WiI0zFlalxaRXblx9XwayRBKzvNDk LkOTwvBYId9uHWegUF8gjtitEsxBNTGVKXUUxM2KGOGm7g2TLktunaxZZZoOJv6M ApkLjd8BxGMsFdjn6yVZ/CCcUy8mBJGkccgz9/y3kkzb8lT0Gp4/bMxMvO3Yg3Eb 5sHF+JlPWAF5WKMW2ruFoEAhxI8n0MTwdM2w//7qstk9G2j9eaUBrreDWl5ARDmP XioN6q+5RhFt8Tlei6mtpSbxoZrUjCkOn5hbxt09YFJxSHTJaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuz7dCLC8ECSHTgT0TWFJiEn+SiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNTdmZWZhMDgtNTQzOC0z MjRlLWIyNzYtOWZhZDIxNzViYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZsWTS6xALWiPve4ehuENIGhh8EZv2Jg8X1IqmuD3p/k/hA6lyNR0qJ /g2ZhlvrBDg5ATz0FBeM6uxabWQBmdJmVIpIS4Ha+thzdskJj9LPkrAu7HryQ4Ht LVnbM36yl7NAeZfJynZrJcMFIN1O9c7bVjq1kZr/Z4LsHymYGYDCyvMfmu0fvJxj jAIksDkI3mihGWjtSw+js1Kle+HjQmVYRTNfbTde3IKV2M1aA5KEySo8uFojLrV0 oT/gym5Gc6bELNCNrF+9m4v6WcTe+HTG6k8dl+PFskfxWe3RWSIWMDpJbVDubpPl 8jdG/rJikOuOMV7E9sUJa04KUYcMz2Y= -----END CERTIFICATE-----Generated at Wed Apr 30 05:51:17 2025 by rpki-client