$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa File: b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa (raw, json) Hash identifier: yUP3GCQPcuF60ntL8sLDYNyW+stZbennQywwMRZcvHc= Subject key identifier: FF:03:82:90:72:4A:ED:D9:C8:63:11:37:E0:42:A8:DD:39:60:49:66 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A82AB3FFEB99F4260D9FCAE80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 207266 IP address blocks: 161.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:3f:fe:b9:9f:42:60:d9:fc:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=f2706743-3e38-4e62-9a13-50609e16de3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:f6:c7:56:c7:ca:9b:c1:f9:6b:15:6b:1a: cd:49:a5:f6:f4:db:c3:63:44:9c:4e:dc:be:08:28: 12:e0:98:09:15:7d:86:57:77:03:ee:65:b8:48:93: 65:a6:5c:12:28:3f:e3:95:b5:cb:79:ff:1f:cd:7b: e7:28:ae:48:61:e8:7d:ec:f1:27:61:7d:38:4d:81: 5c:1e:0e:7d:10:c4:48:3b:b8:4d:53:1d:7c:e6:c2: 2d:92:bb:d2:1d:03:47:3c:07:f9:10:1b:4d:71:74: ff:09:3a:96:05:dd:41:b7:41:f4:61:0c:96:69:fe: 96:f2:5f:17:ed:06:0d:7f:a0:32:7e:6c:1c:4f:82: 13:bd:d3:d8:e9:90:c1:a1:3a:1e:22:21:5e:51:8d: ba:51:02:3d:85:86:93:8c:be:dd:89:ca:00:f0:93: 30:c6:11:18:92:95:8a:a8:ed:c2:3a:56:02:2b:7b: a9:57:88:e4:c9:a6:fd:0c:ea:a6:75:db:a6:74:e0: 93:5b:85:f8:c5:59:d1:63:b9:3d:ba:64:3d:d0:02: ca:86:54:d5:b0:c0:c3:b2:27:13:2c:fb:93:64:b1: df:7a:f4:6c:1a:76:f7:ef:36:86:14:02:98:6e:ca: 3e:62:c5:a4:09:68:e3:bc:3a:c8:ea:60:7e:87:04: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:03:82:90:72:4A:ED:D9:C8:63:11:37:E0:42:A8:DD:39:60:49:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b2c9b15c-9d82-3ee5-b6a0-450daa958541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:eb:59:83:70:f2:e9:89:de:51:c7:3a:bb:b4:6f:a7:c5:46: 0d:76:64:df:c4:3d:b3:96:a8:c2:42:d8:6e:f8:27:bb:77:d4: 80:2c:ff:20:1f:7b:8a:a4:ee:92:31:94:85:45:3b:d9:9b:f0: b5:0b:b4:ae:f8:a2:15:cb:d1:cb:be:96:e9:7b:b8:dd:d9:c6: 0d:2e:7f:52:8a:19:0e:1b:b0:52:64:a5:7f:79:40:f3:0d:7d: 93:5b:13:0b:5c:a0:9e:c7:4b:e9:ee:7a:96:48:b6:23:e6:23: 35:5f:97:68:fa:ed:6b:1d:9c:d2:32:04:bf:00:f9:ea:b3:e2: a7:8b:cb:0c:be:16:8c:41:2c:8f:5b:64:7f:5f:09:81:a0:ee: c3:c8:4b:e6:f0:96:2c:2d:5d:af:d3:39:66:a7:1d:70:54:4f: 2e:31:29:bf:e1:8e:75:bd:0a:5d:dc:90:29:1c:ed:67:63:0e: 80:f4:f3:43:07:8e:01:9b:a2:88:d8:93:de:91:5b:79:25:b6: 04:2b:b3:dc:63:58:32:2c:39:c5:a5:9c:e2:bf:9b:68:31:ca: ce:0b:b3:7b:33:bb:e2:80:5d:0d:09:e1:4e:2e:5a:bc:55:95: 6c:5a:ba:bc:74:df:51:d0:57:94:11:78:47:a7:e4:00:f5:44: 8b:0a:71:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCqz/+uZ9CYNn8roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ZjI3MDY3NDMtM2UzOC00ZTYyLTlhMTMtNTA2MDllMTZkZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB32x1bHypvB+WsVaxrNSaX29NvDY0ScTty+ CCgS4JgJFX2GV3cD7mW4SJNlplwSKD/jlbXLef8fzXvnKK5IYeh97PEnYX04TYFc Hg59EMRIO7hNUx185sItkrvSHQNHPAf5EBtNcXT/CTqWBd1Bt0H0YQyWaf6W8l8X 7QYNf6AyfmwcT4ITvdPY6ZDBoToeIiFeUY26UQI9hYaTjL7dicoA8JMwxhEYkpWK qO3COlYCK3upV4jkyab9DOqmddumdOCTW4X4xVnRY7k9umQ90ALKhlTVsMDDsicT LPuTZLHfevRsGnb37zaGFAKYbso+YsWkCWjjvDrI6mB+hwS1OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8DgpBySu3ZyGMRN+BCqN05YElmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjJjOWIxNWMtOWQ4Mi0z ZWU1LWI2YTAtNDUwZGFhOTU4NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzrWYNw8umJ3lHHOru0b6fFRg12ZN/EPbOWqMJC2G74J7t31IAs/yAf e4qk7pIxlIVFO9mb8LULtK74ohXL0cu+lul7uN3Zxg0uf1KKGQ4bsFJkpX95QPMN fZNbEwtcoJ7HS+nuepZItiPmIzVfl2j67WsdnNIyBL8A+eqz4qeLywy+FoxBLI9b ZH9fCYGg7sPIS+bwliwtXa/TOWanHXBUTy4xKb/hjnW9Cl3ckCkc7WdjDoD080MH jgGboojYk96RW3kltgQrs9xjWDIsOcWlnOK/m2gxys4Ls3szu+KAXQ0J4U4uWrxV lWxaurx031HQV5QReEen5AD1RIsKceI= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:29 2025 by rpki-client