$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/63342f0b-c28b-384a-8a47-1b6d6c8ff4f7.roa File: 63342f0b-c28b-384a-8a47-1b6d6c8ff4f7.roa (raw, json) Hash identifier: yX5iWqDkP41nzf52UVljXqVmwUoWND14KKR6WTwtnZI= Subject key identifier: 5E:47:15:32:33:35:15:7D:C4:3C:A4:47:66:C0:C9:63:A9:1A:87:8D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461DFFADC4876A0870E4C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/63342f0b-c28b-384a-8a47-1b6d6c8ff4f7.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1d:ff:ad:c4:87:6a:08:70:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=aae8586c-a50c-4c7f-800d-ccc5466ec073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:3a:8b:72:3d:ea:7c:1a:35:be:a1:9d:b6: ed:68:39:43:c2:88:12:ee:66:f1:bc:0e:e0:0b:bd: 8c:63:ae:59:4c:11:5b:71:f5:38:d0:a8:30:09:dc: 99:55:7d:ea:01:48:af:a3:60:b9:97:93:80:9f:ae: 87:63:a4:bf:ba:6a:33:83:73:b2:8b:e6:81:74:2f: a8:b9:16:fe:06:31:68:0b:fb:4c:2e:0e:51:fe:e4: 0e:84:f1:94:57:6e:2a:4f:e7:a4:2f:8b:af:9b:06: cb:67:6d:23:a0:c0:ac:f5:e0:c7:73:4f:de:c4:ff: cc:2f:d5:23:ad:29:95:0a:3a:27:78:6b:d6:ab:f2: 13:31:10:10:d4:52:16:e2:61:0e:4d:73:89:a7:5c: 08:ee:3d:bf:f2:99:d8:06:63:3e:3d:76:80:dc:a3: bc:06:7b:d1:b5:3c:77:1c:48:2a:fe:c9:48:0a:8c: 97:b8:0b:48:3c:f9:33:62:33:9d:e8:2c:e8:62:f8: aa:10:51:f8:73:d6:ba:6d:e9:f4:af:3d:ae:f0:8e: 0d:4f:06:ca:01:77:23:4f:88:a9:40:e0:6c:d0:58: 47:c7:c7:9c:be:0f:f9:83:e2:2c:47:ae:21:7b:c5: d4:fd:53:02:d1:46:f5:2c:c0:52:9a:57:d8:d2:4f: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:47:15:32:33:35:15:7D:C4:3C:A4:47:66:C0:C9:63:A9:1A:87:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/63342f0b-c28b-384a-8a47-1b6d6c8ff4f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d2:ce:c8:b5:c4:ae:c6:7d:af:6a:b3:52:c5:13:68:39:0d: 6a:72:b6:f3:10:a6:d6:a7:cb:df:eb:e3:61:6e:67:e4:3e:fa: 22:f0:ef:a8:b9:c5:bc:ac:89:27:ae:ae:26:db:0d:ac:2c:8c: 9f:89:1a:fb:c5:c2:b5:0a:fc:8b:09:1e:24:46:11:32:1f:2f: 28:79:cb:c1:a9:ec:a9:0a:43:9b:77:ec:d0:36:94:bd:f8:f2: a7:fb:e6:bc:2c:82:d3:21:2d:61:14:08:b2:19:34:eb:02:92: ff:f4:c6:ad:e6:f2:e0:ed:16:ad:e7:b7:a1:74:db:7b:9d:89: 9c:3f:b0:aa:0d:6b:06:7f:33:b1:6a:50:e0:d4:d3:f4:4c:75: 1c:2d:d6:0a:65:04:69:45:6c:99:14:aa:8f:d7:f3:fa:43:c5: c0:10:39:33:6c:5e:9f:bf:35:4c:68:f7:6c:52:8e:95:62:3e: 2c:79:9a:c8:c4:e8:97:ae:46:4d:e0:f9:1b:c9:13:4a:ff:78: 54:c4:96:8f:d8:eb:17:a0:a7:ce:5d:96:de:fb:b5:1c:79:32: f7:26:58:d9:bc:c0:9c:fa:84:eb:b1:9f:35:36:9f:c1:a0:d3: b5:b3:b1:3d:32:a0:1c:1b:a1:05:65:e8:c5:d9:9d:65:e2:d0: 30:7f:83:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh3/rcSHaghw5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YWFlODU4NmMtYTUwYy00YzdmLTgwMGQtY2NjNTQ2NmVjMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvY6i3I96nwaNb6hnbbtaDlDwogS7mbxvA7g C72MY65ZTBFbcfU40KgwCdyZVX3qAUivo2C5l5OAn66HY6S/umozg3Oyi+aBdC+o uRb+BjFoC/tMLg5R/uQOhPGUV24qT+ekL4uvmwbLZ20joMCs9eDHc0/exP/ML9Uj rSmVCjoneGvWq/ITMRAQ1FIW4mEOTXOJp1wI7j2/8pnYBmM+PXaA3KO8BnvRtTx3 HEgq/slICoyXuAtIPPkzYjOd6CzoYviqEFH4c9a6ben0rz2u8I4NTwbKAXcjT4ip QOBs0FhHx8ecvg/5g+IsR64he8XU/VMC0Ub1LMBSmlfY0k86jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5HFTIzNRV9xDykR2bAyWOpGoeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjMzNDJmMGItYzI4Yi0z ODRhLThhNDctMWI2ZDZjOGZmNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoehDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLSzsi1xK7Gfa9qs1LFE2g5DWpytvMQptany9/r42FuZ+Q++iLw76i5 xbysiSeuribbDawsjJ+JGvvFwrUK/IsJHiRGETIfLyh5y8Gp7KkKQ5t37NA2lL34 8qf75rwsgtMhLWEUCLIZNOsCkv/0xq3m8uDtFq3nt6F023udiZw/sKoNawZ/M7Fq UODU0/RMdRwt1gplBGlFbJkUqo/X8/pDxcAQOTNsXp+/NUxo92xSjpViPix5msjE 6JeuRk3g+RvJE0r/eFTElo/Y6xegp85dlt77tRx5MvcmWNm8wJz6hOuxnzU2n8Gg 07WzsT0yoBwboQVl6MXZnWXi0DB/g9w= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:13 2025 by rpki-client