$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa File: b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa (raw, json) Hash identifier: CpOFysVGvsips0gaEbZICa8ntQp6NPgOEmBBcOxeLLI= Subject key identifier: D4:30:DA:5C:4D:82:84:C5:5A:BB:D8:69:CF:CC:79:8F:30:C3:ED:3B Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A21280AD37CEA44CE557BD80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa Signing time: Thu 24 Apr 2025 14:12:03 +0000 ROA not before: Thu 24 Apr 2025 14:12:03 +0000 ROA not after: Wed 23 Jul 2025 14:12:03 +0000 asID: 207266 IP address blocks: 161.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:12:80:ad:37:ce:a4:4c:e5:57:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 14:12:03 2025 GMT Not After : Jul 23 14:12:03 2025 GMT Subject: CN=c89be475-0566-4dcd-8eee-c6d3bb08c35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f3:ba:d3:1b:0d:c8:58:1c:e8:51:db:9f:f1: b3:bc:80:fd:52:76:72:f2:61:11:13:05:ac:7c:82: 32:bf:5a:82:ad:9a:6d:c4:1f:ff:6f:57:c9:16:41: e9:62:96:a5:28:95:48:0b:2a:ad:82:7e:39:ac:0b: a4:c2:ee:84:59:10:fb:a3:9e:3d:5a:89:10:c6:6e: 24:e2:92:2d:fc:e4:3c:ae:ab:cf:6b:5c:aa:a6:db: 91:8f:ba:6c:cb:bc:8d:a8:79:94:85:c7:51:3e:27: 8a:9b:40:c9:b3:3e:d5:33:1f:18:f5:c9:80:34:a9: 36:dc:a3:b0:f2:b6:07:c6:b8:bd:00:27:32:79:c0: a5:aa:ea:28:d8:d7:bf:95:44:b8:c4:64:dd:71:64: 80:cd:a0:fd:1d:fd:d4:cc:46:0c:f2:41:f5:c3:9b: 4a:40:17:f5:18:33:e1:16:63:31:21:f4:75:5a:43: ea:5e:97:ce:08:e2:eb:30:5b:c1:d0:1d:67:54:f2: ae:83:68:50:7b:48:17:31:b7:6d:72:8f:22:53:3b: 04:fc:68:69:fa:16:5e:d0:f2:61:7a:38:5b:6d:b3: bd:b8:65:0a:15:77:5f:2f:5e:1a:7f:e5:8b:e6:2d: aa:9f:e1:fc:cd:ac:ad:81:f3:e2:8f:22:5a:c5:77: 16:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:30:DA:5C:4D:82:84:C5:5A:BB:D8:69:CF:CC:79:8F:30:C3:ED:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:87:aa:51:4c:89:90:42:da:dc:35:e7:71:99:c5:c1:35:7b: bc:b3:4e:e8:c6:55:ee:35:82:1a:3c:e5:48:f0:77:18:48:36: 6a:82:17:ec:d1:8d:d8:dd:08:dd:14:0e:95:14:a2:aa:e9:83: 40:f8:bb:04:2a:d4:00:eb:4f:6c:7c:1c:65:74:f2:f2:a4:4d: ca:3e:bb:ca:b4:d4:f2:43:28:41:35:de:b6:9c:5c:d1:6d:79: 00:38:87:55:40:d9:71:da:ef:ef:e2:28:62:32:b1:25:c0:1c: 50:72:70:8d:52:eb:3d:53:53:91:41:98:e4:79:9b:39:dc:90: 95:a0:a6:ad:c4:8f:1d:b2:cc:43:73:7b:07:5a:33:0c:36:ee: 54:e6:f0:a9:65:03:44:4d:a3:53:ef:50:89:74:51:96:56:68: b4:4d:ce:e1:33:6e:9c:5f:4e:1c:ed:ae:be:cc:9d:63:6a:c6: 9f:c3:03:71:3c:50:19:04:40:1a:0a:35:a1:72:49:b9:3b:74: fe:5d:40:97:eb:d3:17:d8:c6:f0:13:11:7d:6f:71:3a:fd:1c: d8:c6:41:7e:a7:30:f8:86:66:9c:16:a4:4e:bc:5f:64:73:8a: b2:68:fa:c0:79:ad:2f:4b:6d:3a:2c:2b:c7:16:75:b4:f5:25: 5e:d9:82:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiEoCtN86kTOVXvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDE0MTIwM1oXDTI1MDcyMzE0MTIwM1owLzEtMCsGA1UEAxMk Yzg5YmU0NzUtMDU2Ni00ZGNkLThlZWUtYzZkM2JiMDhjMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPO60xsNyFgc6FHbn/GzvID9UnZy8mEREwWs fIIyv1qCrZptxB//b1fJFkHpYpalKJVICyqtgn45rAukwu6EWRD7o549WokQxm4k 4pIt/OQ8rqvPa1yqptuRj7psy7yNqHmUhcdRPieKm0DJsz7VMx8Y9cmANKk23KOw 8rYHxri9ACcyecClquoo2Ne/lUS4xGTdcWSAzaD9Hf3UzEYM8kH1w5tKQBf1GDPh FmMxIfR1WkPqXpfOCOLrMFvB0B1nVPKug2hQe0gXMbdtco8iUzsE/Ghp+hZe0PJh ejhbbbO9uGUKFXdfL14af+WL5i2qn+H8zaytgfPijyJaxXcWuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQw2lxNgoTFWrvYac/MeY8ww+07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjJjOWIxNWMtOWQ4Mi0z ZWU1LWI2YTAtNDUwZGFhOTU4NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyHqlFMiZBC2tw153GZxcE1e7yzTujGVe41gho85UjwdxhINmqCF+zR jdjdCN0UDpUUoqrpg0D4uwQq1ADrT2x8HGV08vKkTco+u8q01PJDKEE13racXNFt eQA4h1VA2XHa7+/iKGIysSXAHFBycI1S6z1TU5FBmOR5mznckJWgpq3Ejx2yzENz ewdaMww27lTm8KllA0RNo1PvUIl0UZZWaLRNzuEzbpxfThztrr7MnWNqxp/DA3E8 UBkEQBoKNaFySbk7dP5dQJfr0xfYxvATEX1vcTr9HNjGQX6nMPiGZpwWpE68X2Rz irJo+sB5rS9LbTosK8cWdbT1JV7Zgnk= -----END CERTIFICATE-----Generated at Tue Apr 29 22:15:40 2025 by rpki-client