$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9e315f6f-e98b-3890-9528-a8f20fbba589.roa File: 9e315f6f-e98b-3890-9528-a8f20fbba589.roa (raw, json) Hash identifier: 1TtlHmU5A2iSlr4nvyywUn969o8UWWZE5LGovCMm8YA= Subject key identifier: B8:1D:85:49:93:B3:A5:FE:DC:00:4A:E4:9C:50:EE:1A:D2:2F:31:3B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB391DC6F3B70263C27B80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9e315f6f-e98b-3890-9528-a8f20fbba589.roa Signing time: Thu 24 Apr 2025 11:16:12 +0000 ROA not before: Thu 24 Apr 2025 11:16:12 +0000 ROA not after: Wed 23 Jul 2025 11:16:12 +0000 asID: 12041 IP address blocks: 161.232.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:39:1d:c6:f3:b7:02:63:c2:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:12 2025 GMT Not After : Jul 23 11:16:12 2025 GMT Subject: CN=2d80261e-d4bb-4cd3-b06f-45b3ca582f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:de:c8:c2:c7:20:95:d8:32:79:cd:6d:df: 5a:21:7e:92:19:8f:e8:2d:a0:a7:90:84:ac:60:99: d3:ac:24:06:98:6c:52:60:b1:b7:fd:80:a7:d7:51: 1c:17:28:70:f4:fc:36:b6:f5:7d:86:c8:20:10:b1: 3f:dc:55:62:8c:8b:3e:82:e3:23:cb:55:28:e8:8a: a9:80:00:40:17:49:de:39:2c:88:1a:3d:4d:07:9f: ed:35:56:90:dd:f3:c2:6a:9b:81:66:e4:0b:d9:6e: c7:fa:1b:ac:3e:5e:4f:27:c8:c2:08:26:fe:0f:cc: 5a:75:09:3f:a5:44:89:2a:f5:b6:14:bb:57:8d:a1: d9:7a:07:c4:6c:e1:a1:aa:d5:51:e7:c2:c7:8f:3e: 83:71:8a:78:9d:6b:c5:a5:24:e7:44:70:44:65:12: 96:7a:2b:95:1c:82:be:9f:bb:08:20:21:b1:f5:77: 9f:e2:9c:2b:e3:a7:1e:43:c1:8e:44:95:e0:f0:5c: 2d:4a:0a:e7:f3:1b:12:7a:df:b4:15:f5:b3:0c:0b: 42:93:9f:e9:19:5c:87:0d:f9:32:a7:fe:32:f3:ea: ae:a8:fe:e7:20:7d:6a:d6:d8:f3:7a:7e:f1:a1:8a: 64:6d:0f:9c:3a:cf:d5:48:86:e6:6a:a2:08:2f:27: ef:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1D:85:49:93:B3:A5:FE:DC:00:4A:E4:9C:50:EE:1A:D2:2F:31:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9e315f6f-e98b-3890-9528-a8f20fbba589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c1:26:4f:17:64:1a:a0:98:49:38:dc:c8:e2:0d:2f:69:71: 95:e1:25:42:f3:95:de:68:03:13:8a:ee:a3:26:11:b6:74:20: ff:1a:6c:4e:3e:1c:9f:94:f4:e1:d0:63:f7:d3:93:e3:d4:27: 88:62:d6:99:d3:83:a0:4f:81:5a:d8:3a:fe:bd:4e:41:6d:d1: 2f:01:d8:00:c5:84:fd:5c:a8:54:83:b8:f9:9c:a4:3a:32:14: 64:c1:e8:92:af:c9:63:34:3a:0c:9a:33:48:51:c8:df:68:31: 7a:d0:cb:58:6c:be:22:1f:17:34:51:b7:5d:fe:1b:2e:f1:b6: a7:85:5c:42:fd:48:88:8a:cf:cd:63:4f:56:c6:18:d5:b5:74: de:b3:c1:6d:18:59:1c:c3:da:ca:7f:41:f3:ca:73:bf:4f:ba: f5:a6:0a:3f:9d:73:5c:69:57:c3:ba:46:83:d6:bd:7b:44:d9: 6c:40:10:ac:92:21:c3:29:9f:9a:a8:c4:05:da:28:78:77:de: b0:a7:4c:62:16:19:21:ff:ec:d9:ec:5e:67:39:28:b1:80:1b: 2d:49:0c:a4:ba:e6:81:09:45:fd:eb:17:4c:40:5c:23:d0:71: 8b:15:dc:65:ee:42:ec:b4:b6:cf:f2:e8:2e:42:57:f9:28:af: 70:14:a0:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhuzkdxvO3AmPCe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYxMloXDTI1MDcyMzExMTYxMlowLzEtMCsGA1UEAxMk MmQ4MDI2MWUtZDRiYi00Y2QzLWIwNmYtNDViM2NhNTgyZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndPeyMLHIJXYMnnNbd9aIX6SGY/oLaCnkISs YJnTrCQGmGxSYLG3/YCn11EcFyhw9Pw2tvV9hsggELE/3FVijIs+guMjy1Uo6Iqp gABAF0neOSyIGj1NB5/tNVaQ3fPCapuBZuQL2W7H+husPl5PJ8jCCCb+D8xadQk/ pUSJKvW2FLtXjaHZegfEbOGhqtVR58LHjz6DcYp4nWvFpSTnRHBEZRKWeiuVHIK+ n7sIICGx9Xef4pwr46ceQ8GORJXg8FwtSgrn8xsSet+0FfWzDAtCk5/pGVyHDfky p/4y8+quqP7nIH1q1tjzen7xoYpkbQ+cOs/VSIbmaqIILyfvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgdhUmTs6X+3ABK5JxQ7hrSLzE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOWUzMTVmNmYtZTk4Yi0z ODkwLTk1MjgtYThmMjBmYmJhNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7BJk8XZBqgmEk43MjiDS9pcZXhJULzld5oAxOK7qMmEbZ0IP8abE4+ HJ+U9OHQY/fTk+PUJ4hi1pnTg6BPgVrYOv69TkFt0S8B2ADFhP1cqFSDuPmcpDoy FGTB6JKvyWM0OgyaM0hRyN9oMXrQy1hsviIfFzRRt13+Gy7xtqeFXEL9SIiKz81j T1bGGNW1dN6zwW0YWRzD2sp/QfPKc79PuvWmCj+dc1xpV8O6RoPWvXtE2WxAEKyS IcMpn5qoxAXaKHh33rCnTGIWGSH/7NnsXmc5KLGAGy1JDKS65oEJRf3rF0xAXCPQ cYsV3GXuQuy0ts/y6C5CV/kor3AUoJ4= -----END CERTIFICATE-----Generated at Tue Apr 29 12:06:07 2025 by rpki-client