$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/882baf1b-a54d-3797-a107-bd2d288b44bc.roa File: 882baf1b-a54d-3797-a107-bd2d288b44bc.roa (raw, json) Hash identifier: 2i56WOxbbMjat+fRaN6CbWo+8SMO8If6SjH9bMAtqlc= Subject key identifier: CE:C0:DD:CF:F5:F9:FD:89:CA:FF:63:0D:67:A7:3C:76:EC:F2:B7:8D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB621F0AB9DF54AC22CB00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/882baf1b-a54d-3797-a107-bd2d288b44bc.roa Signing time: Thu 24 Apr 2025 11:16:31 +0000 ROA not before: Thu 24 Apr 2025 11:16:31 +0000 ROA not after: Wed 23 Jul 2025 11:16:31 +0000 asID: 12041 IP address blocks: 161.232.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:62:1f:0a:b9:df:54:ac:22:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:31 2025 GMT Not After : Jul 23 11:16:31 2025 GMT Subject: CN=0e89bd76-34d3-4b7e-8f36-4d4fe89ca397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:e6:ce:d3:38:93:c1:05:69:5b:cc:f8:34: 8d:0b:b7:de:93:58:dc:46:13:a9:ee:8d:34:29:0b: cb:15:14:1b:1b:0d:00:3a:23:bb:5f:1f:e5:bd:c3: 7e:27:c6:b9:5c:5f:ab:e2:af:4c:27:21:11:fb:ca: 2f:5e:34:bd:a9:12:94:63:18:a0:7d:b9:c8:d4:a3: 6b:a3:ec:4f:b7:5b:33:45:53:6f:f7:fa:23:14:cd: 13:19:db:9a:09:38:b8:d9:f5:7b:49:59:5c:a6:e5: 9d:2e:8f:a0:d3:85:5d:af:3b:94:21:df:cc:3b:3c: c1:14:47:29:1f:cd:1f:a8:c0:8d:f3:e9:85:d5:55: 83:d0:43:62:15:56:97:56:c2:c6:10:8d:b8:dd:ee: 78:f1:9a:ef:42:a8:b2:71:fe:76:6d:f1:26:4f:6f: 79:41:c1:c4:31:19:30:4c:16:63:9a:8d:d1:2f:6a: f1:8a:45:8a:a1:26:7a:bb:85:8f:50:e9:64:3d:b2: d2:f9:62:a7:19:c7:89:74:b9:bb:06:94:ef:bf:52: 59:45:85:58:ff:be:6c:4f:e9:8f:ae:f7:d1:74:e3: 4c:dc:91:85:a5:a8:67:5f:39:cd:be:55:fe:e7:26: da:2b:8f:2a:0c:99:20:c3:48:ed:30:5b:fe:81:9a: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C0:DD:CF:F5:F9:FD:89:CA:FF:63:0D:67:A7:3C:76:EC:F2:B7:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/882baf1b-a54d-3797-a107-bd2d288b44bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e8:70:9f:51:3a:54:f3:57:0c:29:c1:3a:1f:25:e8:ba:a4: b9:cd:3a:7a:c4:f4:f9:28:7c:ed:c8:24:36:63:64:20:7c:35: c5:ae:50:81:9c:f1:eb:ce:48:be:c2:7e:2b:15:ae:bb:57:e8: 6e:cd:83:f6:0c:80:cf:c9:f5:e8:64:42:2b:9f:1b:89:3d:7b: 6e:48:c0:bb:cf:2f:10:e7:c9:63:4b:4c:ee:32:23:e4:99:52: ff:b2:b1:f4:a6:33:b5:a4:b4:89:48:3a:49:71:e2:26:41:8d: 89:13:00:e0:3e:da:03:8d:b6:a2:eb:a8:be:fe:56:68:c8:23: 47:5f:0d:23:80:87:48:26:fa:a3:6f:5e:f2:14:61:fb:36:5a: b7:b3:42:89:63:1f:67:c6:b3:63:63:a7:f1:37:87:3a:17:10: 54:ec:05:a8:ed:0a:59:34:21:6e:84:b7:03:67:cc:b4:16:1c: 91:06:93:ff:80:39:a3:af:43:20:88:22:da:80:3e:0b:7c:0f: 0a:8a:de:fd:52:bf:1a:e0:ee:27:20:cd:48:c3:df:aa:15:8f: 30:02:5b:a2:d5:26:83:b3:b8:e1:31:b2:bc:74:3e:de:c4:3a: 90:8a:51:48:e0:2c:9a:2a:85:6d:7f:5d:e3:ad:49:75:e6:51: 58:7c:09:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu2IfCrnfVKwiywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYzMVoXDTI1MDcyMzExMTYzMVowLzEtMCsGA1UEAxMk MGU4OWJkNzYtMzRkMy00YjdlLThmMzYtNGQ0ZmU4OWNhMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV3mztM4k8EFaVvM+DSNC7fek1jcRhOp7o00 KQvLFRQbGw0AOiO7Xx/lvcN+J8a5XF+r4q9MJyER+8ovXjS9qRKUYxigfbnI1KNr o+xPt1szRVNv9/ojFM0TGduaCTi42fV7SVlcpuWdLo+g04VdrzuUId/MOzzBFEcp H80fqMCN8+mF1VWD0ENiFVaXVsLGEI243e548ZrvQqiycf52bfEmT295QcHEMRkw TBZjmo3RL2rxikWKoSZ6u4WPUOlkPbLS+WKnGceJdLm7BpTvv1JZRYVY/75sT+mP rvfRdONM3JGFpahnXznNvlX+5ybaK48qDJkgw0jtMFv+gZrwIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7A3c/1+f2Jyv9jDWenPHbs8reNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODgyYmFmMWItYTU0ZC0z Nzk3LWExMDctYmQyZDI4OGI0NGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfocJ9ROlTzVwwpwTofJei6pLnNOnrE9PkofO3IJDZjZCB8NcWuUIGc 8evOSL7CfisVrrtX6G7Ng/YMgM/J9ehkQiufG4k9e25IwLvPLxDnyWNLTO4yI+SZ Uv+ysfSmM7WktIlIOklx4iZBjYkTAOA+2gONtqLrqL7+VmjII0dfDSOAh0gm+qNv XvIUYfs2WrezQoljH2fGs2Njp/E3hzoXEFTsBajtClk0IW6EtwNnzLQWHJEGk/+A OaOvQyCIItqAPgt8DwqK3v1Svxrg7icgzUjD36oVjzACW6LVJoOzuOExsrx0Pt7E OpCKUUjgLJoqhW1/XeOtSXXmUVh8CZc= -----END CERTIFICATE-----Generated at Tue Apr 29 14:32:53 2025 by rpki-client