$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/693c258b-6507-3d87-bbbb-fb3ebd6abe37.roa File: 693c258b-6507-3d87-bbbb-fb3ebd6abe37.roa (raw, json) Hash identifier: kBWOl5SWoM6ITR4HLW11n94svqenGPD9Z7FY10lKhCg= Subject key identifier: CE:C0:F1:C0:06:12:51:62:89:5C:A5:44:26:CA:86:2E:92:0A:14:E6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB3302625444C5C9EC0880 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/693c258b-6507-3d87-bbbb-fb3ebd6abe37.roa Signing time: Thu 24 Apr 2025 11:16:09 +0000 ROA not before: Thu 24 Apr 2025 11:16:09 +0000 ROA not after: Wed 23 Jul 2025 11:16:09 +0000 asID: 12041 IP address blocks: 161.232.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:33:02:62:54:44:c5:c9:ec:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:09 2025 GMT Not After : Jul 23 11:16:09 2025 GMT Subject: CN=a2359b36-1904-4eb3-b5ea-6e10de169c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:58:13:ae:c4:e7:e1:ab:16:d5:8a:1a:f0: 5e:93:35:dd:1b:52:57:50:4e:77:53:f7:27:58:38: de:a7:8b:96:b0:83:08:85:64:b5:01:52:fc:11:a3: ca:5b:fe:41:5a:e6:27:d2:c0:27:73:85:69:dd:c4: 4e:a9:07:58:0e:ec:2b:46:74:ca:16:3c:76:6c:99: b7:f5:67:44:5f:fa:e6:7f:fb:6c:f8:f4:76:0f:37: b4:30:d6:1e:56:b3:b6:1e:e8:b2:e0:29:57:0d:88: ac:27:ee:72:ce:41:fe:a8:02:0f:e1:a4:59:3d:2c: 3b:ea:64:33:74:63:63:4e:61:6b:d4:33:29:51:45: 2d:57:e9:a5:80:31:14:3d:6b:05:77:d1:9f:eb:47: 95:a8:f4:c7:9c:44:5e:02:8a:5f:32:02:f6:2b:3b: 4b:53:95:d1:f8:13:5a:84:d4:84:70:fe:64:13:b0: a6:b6:94:4b:b6:58:0c:19:2e:6e:52:c6:4b:7b:fd: 35:5c:82:de:00:83:e7:72:6a:bc:43:c9:1f:0e:39: b5:d8:a9:e9:ee:71:3c:cf:d2:79:56:47:4d:53:a1: 7b:7c:65:c3:80:9e:3c:d7:cb:aa:23:db:ea:7b:d4: e0:5b:6c:49:1b:54:f4:59:09:b3:7c:b8:8c:33:15: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C0:F1:C0:06:12:51:62:89:5C:A5:44:26:CA:86:2E:92:0A:14:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/693c258b-6507-3d87-bbbb-fb3ebd6abe37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:94:61:ce:d5:f2:fd:e5:fb:80:dd:95:56:e8:35:cb:25:a4: ca:38:dd:11:4c:f7:f2:3d:05:ca:88:14:b8:4b:49:6b:79:0c: 05:7c:71:bb:2f:56:2a:33:14:f4:66:4c:1e:74:69:42:71:1d: 39:d4:e2:12:f3:3e:c1:40:5f:02:8d:c8:c3:9f:04:89:e1:e8: 3c:93:2d:6b:11:91:e8:9f:54:38:8c:65:d6:cb:28:fe:a0:c7: ce:bb:0e:d6:40:45:ff:b9:cd:27:37:8f:e9:50:69:7c:69:09: 3a:05:e1:76:cd:3c:9d:1e:80:62:50:99:bc:c6:c0:b5:e3:ae: 5e:2f:b6:ac:44:ba:55:cd:a6:95:00:1e:a5:c9:5e:5e:27:3c: 9a:c4:9a:9b:c7:05:fa:34:1a:3c:8c:4f:71:88:e6:6b:d7:f9: 26:f5:1e:d5:d0:cd:d7:81:0a:b1:df:18:b9:53:85:09:3e:99: ed:99:f5:93:45:17:cb:9c:18:77:32:d4:a3:17:5e:d6:21:ed: ab:9b:4f:54:4f:82:9b:3f:c4:86:17:b4:38:a4:c4:eb:f3:03: 4d:47:3b:94:bd:5b:f0:68:4b:be:50:a5:8a:5a:6e:4f:d9:3f: d5:a7:57:79:b1:47:3b:c9:cd:3a:78:d6:0d:5a:c1:40:51:bf: ae:c5:dd:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuzMCYlRExcnsCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYwOVoXDTI1MDcyMzExMTYwOVowLzEtMCsGA1UEAxMk YTIzNTliMzYtMTkwNC00ZWIzLWI1ZWEtNmUxMGRlMTY5YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDVYE67E5+GrFtWKGvBekzXdG1JXUE53U/cn WDjep4uWsIMIhWS1AVL8EaPKW/5BWuYn0sAnc4Vp3cROqQdYDuwrRnTKFjx2bJm3 9WdEX/rmf/ts+PR2Dze0MNYeVrO2Huiy4ClXDYisJ+5yzkH+qAIP4aRZPSw76mQz dGNjTmFr1DMpUUUtV+mlgDEUPWsFd9Gf60eVqPTHnEReAopfMgL2KztLU5XR+BNa hNSEcP5kE7CmtpRLtlgMGS5uUsZLe/01XILeAIPncmq8Q8kfDjm12Knp7nE8z9J5 VkdNU6F7fGXDgJ4818uqI9vqe9TgW2xJG1T0WQmzfLiMMxXtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7A8cAGElFiiVylRCbKhi6SChTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjkzYzI1OGItNjUwNy0z ZDg3LWJiYmItZmIzZWJkNmFiZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiUYc7V8v3l+4DdlVboNcslpMo43RFM9/I9BcqIFLhLSWt5DAV8cbsv ViozFPRmTB50aUJxHTnU4hLzPsFAXwKNyMOfBInh6DyTLWsRkeifVDiMZdbLKP6g x867DtZARf+5zSc3j+lQaXxpCToF4XbNPJ0egGJQmbzGwLXjrl4vtqxEulXNppUA HqXJXl4nPJrEmpvHBfo0GjyMT3GI5mvX+Sb1HtXQzdeBCrHfGLlThQk+me2Z9ZNF F8ucGHcy1KMXXtYh7aubT1RPgps/xIYXtDikxOvzA01HO5S9W/BoS75QpYpabk/Z P9WnV3mxRzvJzTp41g1awUBRv67F3dQ= -----END CERTIFICATE-----Generated at Tue Jun 17 07:54:36 2025 by rpki-client