$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa File: 92d88aa8-e412-3241-8d69-65a663e555a3.roa (raw, json) Hash identifier: j/IktVAlPvaf1JvNjIo32iDSIy4pGO+Noy/7MWHLtEM= Subject key identifier: A9:1C:12:DE:92:59:97:42:73:72:AA:9E:A0:48:88:D4:B2:B1:03:D6 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB7E1600DC6CE942C9E640 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa Signing time: Thu 24 Apr 2025 11:16:45 +0000 ROA not before: Thu 24 Apr 2025 11:16:45 +0000 ROA not after: Wed 23 Jul 2025 11:16:45 +0000 asID: 12041 IP address blocks: 161.232.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:7e:16:00:dc:6c:e9:42:c9:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:45 2025 GMT Not After : Jul 23 11:16:45 2025 GMT Subject: CN=db217d63-87f6-45e7-9623-dcf1bedc0961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:03:67:d2:a9:c9:18:b2:54:ac:a7:b5:eb: a2:c4:4f:e5:72:7b:bf:08:8d:90:b1:98:75:ca:f9: 5b:35:55:cb:0a:9a:1c:2c:83:f2:72:43:5e:49:c6: 2d:d2:a2:e6:80:3a:a8:54:c1:4a:53:cc:16:4a:d1: f2:10:e7:c6:c4:6a:70:79:1b:d2:31:99:e9:88:5f: 1c:9b:80:b4:6d:3c:6b:de:89:b2:b3:c2:ad:72:6f: 23:ad:0a:e2:fe:b3:42:6b:01:5b:7f:70:8d:0f:c2: 83:9e:b3:57:d1:33:01:1d:1b:6d:9f:c5:92:e3:ed: 4d:5c:4c:5e:a0:05:5f:22:a3:65:2e:52:99:f7:11: ac:59:b0:03:62:4e:8b:8e:68:cc:20:a5:b2:59:1f: a6:27:d0:57:db:68:1e:e1:15:2b:f0:90:8c:17:65: 9a:3d:6d:dd:cd:3a:0f:6c:87:f9:a6:45:bd:23:e3: cb:12:1c:0f:db:b2:af:76:25:c5:e2:b7:46:2b:24: 0b:12:ec:9f:88:82:0b:2e:e6:cf:7c:c4:4c:07:d3: c4:be:d3:8b:79:86:7c:90:97:bf:f0:6c:5f:d8:25: a3:1e:93:b3:ee:f1:c8:e4:d6:f8:93:09:97:66:28: 67:a5:62:c8:1d:ee:c2:10:cc:ed:f6:1f:a7:64:d1: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1C:12:DE:92:59:97:42:73:72:AA:9E:A0:48:88:D4:B2:B1:03:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/92d88aa8-e412-3241-8d69-65a663e555a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:14:a0:68:79:51:f9:63:1d:1c:97:1c:08:45:96:d6:f1:2c: 0c:ad:d1:92:89:1c:a1:d3:67:88:37:0f:57:b7:bf:cb:a2:58: f7:e1:17:6f:26:6b:1e:6e:b3:b6:2b:21:af:93:4a:82:a1:5c: 32:45:e0:d2:3e:7f:46:a0:28:a7:62:60:2b:5e:ed:75:56:8d: d6:2e:4e:1b:69:32:ec:d5:ca:0c:9e:34:b6:39:47:18:d1:81: 83:6f:32:1a:b7:ca:da:42:4a:de:7c:f5:e4:6a:6d:df:dc:fc: 9c:0e:41:34:54:06:c9:e3:e0:e9:89:df:42:e0:4f:e2:0d:a8: dc:07:f9:c6:07:36:80:a2:a3:85:cc:d9:29:b0:73:dd:bc:11: a5:bc:38:42:ab:20:47:c6:b3:3e:46:f7:db:e1:ba:2a:74:e6: 83:26:9d:f1:a4:ac:03:c4:9c:66:6f:8d:62:16:a1:5d:03:6c: b6:9f:a7:87:6b:bd:84:0e:93:44:fe:df:46:cd:7f:77:50:72: 39:61:91:b7:82:89:49:78:92:27:cd:db:e2:23:43:6d:33:73: 66:8f:ee:e4:a0:0e:8a:7c:e6:49:4a:01:fc:5f:d2:53:60:65: 72:cc:ac:b4:f7:a2:d2:66:ab:ce:e8:48:92:20:e8:08:32:de: 43:5d:57:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu34WANxs6ULJ5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY0NVoXDTI1MDcyMzExMTY0NVowLzEtMCsGA1UEAxMk ZGIyMTdkNjMtODdmNi00NWU3LTk2MjMtZGNmMWJlZGMwOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrwDZ9KpyRiyVKynteuixE/lcnu/CI2QsZh1 yvlbNVXLCpocLIPyckNeScYt0qLmgDqoVMFKU8wWStHyEOfGxGpweRvSMZnpiF8c m4C0bTxr3omys8Ktcm8jrQri/rNCawFbf3CND8KDnrNX0TMBHRttn8WS4+1NXExe oAVfIqNlLlKZ9xGsWbADYk6LjmjMIKWyWR+mJ9BX22ge4RUr8JCMF2WaPW3dzToP bIf5pkW9I+PLEhwP27KvdiXF4rdGKyQLEuyfiIILLubPfMRMB9PEvtOLeYZ8kJe/ 8Gxf2CWjHpOz7vHI5Nb4kwmXZihnpWLIHe7CEMzt9h+nZNEcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkcEt6SWZdCc3KqnqBIiNSysQPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOTJkODhhYTgtZTQxMi0z MjQxLThkNjktNjVhNjYzZTU1NWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQUoGh5UfljHRyXHAhFltbxLAyt0ZKJHKHTZ4g3D1e3v8uiWPfhF28m ax5us7YrIa+TSoKhXDJF4NI+f0agKKdiYCte7XVWjdYuThtpMuzVygyeNLY5RxjR gYNvMhq3ytpCSt589eRqbd/c/JwOQTRUBsnj4OmJ30LgT+INqNwH+cYHNoCio4XM 2Smwc928EaW8OEKrIEfGsz5G99vhuip05oMmnfGkrAPEnGZvjWIWoV0DbLafp4dr vYQOk0T+30bNf3dQcjlhkbeCiUl4kifN2+IjQ20zc2aP7uSgDop85klKAfxf0lNg ZXLMrLT3otJmq87oSJIg6Agy3kNdVxw= -----END CERTIFICATE-----Generated at Tue Apr 29 22:25:06 2025 by rpki-client