$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa File: 9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa (raw, json) Hash identifier: 6OdyjRaQxt29k7v6tV+SzNNOrAnrNC/Ff6lnTm3n1zU= Subject key identifier: CF:E8:12:E3:ED:05:2D:A0:BA:34:87:78:A3:FD:90:F6:4B:FF:67:F7 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB8A1B7F566EBDE2543BC6 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa Signing time: Thu 24 Apr 2025 11:16:50 +0000 ROA not before: Thu 24 Apr 2025 11:16:50 +0000 ROA not after: Wed 23 Jul 2025 11:16:50 +0000 asID: 12041 IP address blocks: 161.232.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:8a:1b:7f:56:6e:bd:e2:54:3b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:50 2025 GMT Not After : Jul 23 11:16:50 2025 GMT Subject: CN=34b6c862-6bb3-4e16-b122-730de565b9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:ba:30:28:e8:46:30:14:61:b4:5e:ec:2f: c6:a8:ba:3d:3e:73:15:69:6b:50:0f:27:54:ba:29: 6d:cf:4b:5f:56:c8:c3:a9:7f:26:30:70:98:da:ba: dc:9c:f4:ef:3e:c5:d8:d7:0d:91:f9:a3:9f:67:71: 9d:c9:19:14:9b:83:31:b8:d5:65:dc:ff:c8:88:6b: 82:99:25:68:cd:b0:89:0b:65:7a:c5:2d:15:e0:e3: 57:db:02:11:11:78:fb:ce:85:9c:58:87:1d:42:e8: be:71:c2:7d:f5:a6:bf:0a:be:61:be:50:eb:c7:ab: f6:6f:02:46:64:c0:4d:52:da:dc:54:14:71:f2:06: f6:b9:c9:65:e8:b5:97:56:86:f3:bf:10:cf:13:05: 68:a6:4e:5d:20:27:dc:b1:ac:f4:b5:e5:bd:b0:24: a9:f0:ef:31:44:93:c1:5f:79:0f:24:f0:28:71:3b: 4e:34:43:a3:f7:ab:8c:0f:ce:f1:ad:e0:5d:47:03: ca:6e:f1:b6:3c:ac:e2:05:61:bb:23:42:33:3f:3f: f1:22:b7:03:60:b0:a1:95:a9:79:db:ff:00:b4:6f: 93:13:90:5e:86:1f:4f:65:10:27:b4:14:d6:27:3e: b6:7a:1d:a2:ea:4c:dc:0d:b6:47:d8:f7:a6:29:9f: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:12:E3:ED:05:2D:A0:BA:34:87:78:A3:FD:90:F6:4B:FF:67:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9a89c06e-e7b9-37e6-b3b1-a82c3b845a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:d4:19:69:e0:e8:c9:f7:c2:02:a2:0b:50:11:26:58:8a:89: 6a:56:06:58:20:36:9c:70:bc:a8:19:b8:e3:c1:24:04:d8:99: fb:4e:83:82:e3:37:ee:c3:a9:52:9b:ef:90:e4:e3:f1:b4:46: df:6d:22:05:ba:56:bd:7c:47:4e:03:46:6d:97:f4:e2:10:66: a1:48:4f:9a:f4:67:99:05:cd:74:e7:3f:fa:91:e9:fa:6c:bd: e6:5a:6c:c8:58:e3:f0:a1:be:aa:29:a3:5d:93:cf:52:dc:5d: 99:91:5c:7d:7a:64:72:03:71:05:ad:ee:d8:51:31:c8:d0:3d: 15:29:f6:cd:24:e3:58:af:32:65:29:5c:9b:3b:54:a5:3b:73: 6c:7b:0d:68:70:aa:e9:c3:35:68:8b:5a:b8:73:7f:08:c3:4a: 86:66:d8:7d:c5:fc:f8:4a:23:e9:70:36:be:af:c3:f7:73:53: 31:e8:f1:57:63:6b:eb:5d:00:92:8b:0f:c1:b3:cf:8d:5d:61: de:78:6b:3c:14:05:8a:cb:9d:6e:78:13:45:c6:3a:58:43:db: 71:8c:a0:fa:1c:1f:ef:86:f6:a5:b8:51:cb:f1:04:a2:ad:ae: 7f:68:e8:de:37:3c:ef:be:b6:f9:b8:02:69:da:44:32:0b:36: e2:95:c2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu4obf1ZuveJUO8YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTY1MFoXDTI1MDcyMzExMTY1MFowLzEtMCsGA1UEAxMk MzRiNmM4NjItNmJiMy00ZTE2LWIxMjItNzMwZGU1NjViOWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wi6MCjoRjAUYbRe7C/GqLo9PnMVaWtQDydU uiltz0tfVsjDqX8mMHCY2rrcnPTvPsXY1w2R+aOfZ3GdyRkUm4MxuNVl3P/IiGuC mSVozbCJC2V6xS0V4ONX2wIREXj7zoWcWIcdQui+ccJ99aa/Cr5hvlDrx6v2bwJG ZMBNUtrcVBRx8gb2ucll6LWXVobzvxDPEwVopk5dICfcsaz0teW9sCSp8O8xRJPB X3kPJPAocTtONEOj96uMD87xreBdRwPKbvG2PKziBWG7I0IzPz/xIrcDYLChlal5 2/8AtG+TE5Behh9PZRAntBTWJz62eh2i6kzcDbZH2PemKZ8atQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/oEuPtBS2gujSHeKP9kPZL/2f3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWE4OWMwNmUtZTdiOS0z N2U2LWIzYjEtYTgyYzNiODQ1YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3UGWng6Mn3wgKiC1ARJliKiWpWBlggNpxwvKgZuOPBJATYmftOg4Lj N+7DqVKb75Dk4/G0Rt9tIgW6Vr18R04DRm2X9OIQZqFIT5r0Z5kFzXTnP/qR6fps veZabMhY4/Chvqopo12Tz1LcXZmRXH16ZHIDcQWt7thRMcjQPRUp9s0k41ivMmUp XJs7VKU7c2x7DWhwqunDNWiLWrhzfwjDSoZm2H3F/PhKI+lwNr6vw/dzUzHo8Vdj a+tdAJKLD8Gzz41dYd54azwUBYrLnW54E0XGOlhD23GMoPocH++G9qW4UcvxBKKt rn9o6N43PO++tvm4AmnaRDILNuKVwi4= -----END CERTIFICATE-----Generated at Wed Apr 30 05:32:39 2025 by rpki-client