$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/655ef1c7-bfd8-38a8-bbaf-6cd5c701d1e0.roa File: 655ef1c7-bfd8-38a8-bbaf-6cd5c701d1e0.roa (raw, json) Hash identifier: lW71ET7m3FC5PM24tqU35dFWT50u+dv7pSeyMuR/p5U= Subject key identifier: 86:2E:19:F0:A2:34:1C:88:8C:ED:65:3A:7F:37:93:26:FF:7B:95:EF Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB5C55785E6F59FDFF6980 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/655ef1c7-bfd8-38a8-bbaf-6cd5c701d1e0.roa Signing time: Thu 24 Apr 2025 11:16:29 +0000 ROA not before: Thu 24 Apr 2025 11:16:29 +0000 ROA not after: Wed 23 Jul 2025 11:16:29 +0000 asID: 12041 IP address blocks: 161.232.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:5c:55:78:5e:6f:59:fd:ff:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:29 2025 GMT Not After : Jul 23 11:16:29 2025 GMT Subject: CN=656216de-c593-468e-9b30-d894ecb984bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:cd:7c:f5:63:91:1f:f0:b4:ea:a7:3b:78: 83:39:4c:37:a2:9b:7b:ae:78:ab:0b:79:a8:5a:68: f7:b5:8c:74:70:c5:d8:da:0c:50:e7:a8:37:76:9b: 79:dc:55:71:dc:8a:2e:75:50:ed:f2:1a:7b:df:45: 83:6a:5b:70:e3:06:0d:8c:1e:46:4d:2f:14:45:07: 2c:06:92:df:b5:fc:52:d4:f4:7b:b3:ae:6d:3a:ce: 12:e9:05:4b:9d:19:67:19:87:36:04:cc:e1:14:7e: ff:6a:dc:ff:3a:72:9e:e9:f3:2f:c0:38:ba:f4:13: 40:25:39:09:af:7d:c8:4c:13:20:18:27:9e:68:83: 4a:69:18:83:fc:ac:d2:b7:6e:96:8d:50:c9:bc:7e: b6:38:e3:4a:94:ee:e4:39:d5:95:bb:95:a7:d8:f5: 88:fb:01:31:0b:b3:f6:52:e5:b7:6d:55:17:84:a4: 29:d3:d7:45:49:04:61:24:24:35:7b:ed:8b:b8:59: 6d:eb:02:d8:b6:03:60:70:3c:07:72:3a:6e:26:4e: 7f:c2:36:fd:1e:7b:46:36:ff:7e:37:aa:42:3c:aa: 99:3c:e6:a4:49:80:d4:17:5b:a3:6d:40:70:d3:8c: f4:e9:38:34:b9:64:0c:fd:04:33:65:66:c3:dc:11: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2E:19:F0:A2:34:1C:88:8C:ED:65:3A:7F:37:93:26:FF:7B:95:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/655ef1c7-bfd8-38a8-bbaf-6cd5c701d1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:da:19:97:37:bf:f5:b8:15:39:f5:b3:09:d5:e8:a9:b5:c9: 5a:29:26:10:28:26:11:e0:21:c0:56:9d:0b:e6:5e:fc:05:ce: bd:a1:b4:e8:d8:d2:31:02:21:d1:67:a6:c8:8a:a9:ae:4e:de: 31:b7:b5:72:08:e7:9c:f2:d9:99:b3:20:de:6b:2d:f3:16:60: fe:72:5d:f8:ce:d1:1c:ea:39:38:b9:d8:b5:a0:f8:76:25:a0: 90:6a:05:dc:25:b2:cd:56:39:30:ea:91:c2:40:0f:59:c5:6c: 89:ed:f0:70:a0:bb:71:80:a3:5c:4f:97:cf:e5:f7:93:f9:e5: 95:ad:ee:a3:79:64:97:fd:71:c1:9d:be:2e:83:73:d5:c6:8d: cc:e8:e8:38:f3:21:bd:e7:d6:71:db:fe:71:b2:56:6f:c2:92: 6e:ae:09:b9:0d:6c:f3:45:1d:4b:f4:78:19:20:e2:a4:4d:82: be:3c:7b:2a:ef:a2:f5:67:75:88:b6:31:1f:00:af:5d:99:92: f5:2b:71:cf:f1:93:04:f3:eb:08:d7:7c:55:40:5f:81:26:da: 52:c0:a8:e0:3a:8f:e1:0a:2f:9c:8a:72:63:01:b8:80:bf:ce: 02:fb:46:c0:4e:22:2d:06:e2:cc:b3:62:88:cc:5f:4c:79:f8: 96:1c:fd:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu1xVeF5vWf3/aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYyOVoXDTI1MDcyMzExMTYyOVowLzEtMCsGA1UEAxMk NjU2MjE2ZGUtYzU5My00NjhlLTliMzAtZDg5NGVjYjk4NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ3NfPVjkR/wtOqnO3iDOUw3opt7rnirC3mo Wmj3tYx0cMXY2gxQ56g3dpt53FVx3IoudVDt8hp730WDaltw4wYNjB5GTS8URQcs BpLftfxS1PR7s65tOs4S6QVLnRlnGYc2BMzhFH7/atz/OnKe6fMvwDi69BNAJTkJ r33ITBMgGCeeaINKaRiD/KzSt26WjVDJvH62OONKlO7kOdWVu5Wn2PWI+wExC7P2 UuW3bVUXhKQp09dFSQRhJCQ1e+2LuFlt6wLYtgNgcDwHcjpuJk5/wjb9HntGNv9+ N6pCPKqZPOakSYDUF1ujbUBw04z06Tg0uWQM/QQzZWbD3BH4TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYuGfCiNByIjO1lOn83kyb/e5XvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjU1ZWYxYzctYmZkOC0z OGE4LWJiYWYtNmNkNWM3MDFkMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzaGZc3v/W4FTn1swnV6Km1yVopJhAoJhHgIcBWnQvmXvwFzr2htOjY 0jECIdFnpsiKqa5O3jG3tXII55zy2ZmzIN5rLfMWYP5yXfjO0RzqOTi52LWg+HYl oJBqBdwlss1WOTDqkcJAD1nFbInt8HCgu3GAo1xPl8/l95P55ZWt7qN5ZJf9ccGd vi6Dc9XGjczo6DjzIb3n1nHb/nGyVm/Ckm6uCbkNbPNFHUv0eBkg4qRNgr48eyrv ovVndYi2MR8Ar12ZkvUrcc/xkwTz6wjXfFVAX4Em2lLAqOA6j+EKL5yKcmMBuIC/ zgL7RsBOIi0G4syzYojMX0x5+JYc/SU= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:27 2025 by rpki-client