$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b862068d-b68f-3d97-9cf9-13093d74cc0b.roa File: b862068d-b68f-3d97-9cf9-13093d74cc0b.roa (raw, json) Hash identifier: +95/y2McnEjLa4Ek9wXUrwMQ79uaoizArgw4YP/+isM= Subject key identifier: 60:2D:D8:C3:2B:C1:32:D2:72:61:F8:B4:5F:71:A0:72:BB:89:68:04 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461CA99EA645CF954FA100 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b862068d-b68f-3d97-9cf9-13093d74cc0b.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1c:a9:9e:a6:45:cf:95:4f:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=0ddd03b4-68cb-4dd7-95fc-da25954dea86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8f:f5:f3:38:50:09:9b:c1:23:7a:51:8b:69: ad:b4:95:91:19:f1:3a:5a:f4:ea:bf:7c:49:c0:32: c6:e4:1f:cc:df:6a:a2:c0:be:a1:1e:41:8b:f1:8d: bf:55:5c:04:91:cd:46:8e:f5:8c:37:29:65:8e:29: b9:9e:93:e7:b3:40:43:c9:ab:67:16:81:2a:ed:9f: 88:8f:c4:c9:24:47:4b:dc:b5:51:8b:f6:8e:24:b6: 47:be:bd:1b:1c:40:b3:bb:25:9a:69:cf:ee:f8:45: 78:5c:61:15:53:a8:2e:3d:af:8a:44:c4:ea:81:a4: ef:dd:d4:97:1c:fe:a2:5b:50:6f:08:ac:b5:11:10: c4:5f:78:0b:29:e7:2e:8c:28:71:25:9f:00:38:f6: 39:3f:d5:ea:e9:47:1f:24:7f:e3:b4:a1:d1:50:3a: 82:20:ac:66:16:fe:1c:3c:74:a5:05:da:ac:5a:9c: c8:8f:6a:9b:b2:75:04:0d:f3:04:97:53:64:e8:58: 69:6d:0d:42:9a:7d:eb:dc:67:9b:2d:5c:46:9e:1e: f2:36:a2:d2:ee:de:22:e9:0a:d6:a1:30:72:cb:07: a8:d9:29:07:1e:80:4f:40:67:7f:66:29:df:f0:3b: 95:e6:87:2d:8b:fd:6a:ba:18:f5:4f:49:83:3f:d3: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2D:D8:C3:2B:C1:32:D2:72:61:F8:B4:5F:71:A0:72:BB:89:68:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/b862068d-b68f-3d97-9cf9-13093d74cc0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:14:a6:ea:01:27:bd:fb:82:73:da:e2:e3:e7:38:46:9c:94: a1:db:2f:ce:e0:c3:96:a4:79:28:86:03:3b:b8:0f:31:09:ee: 35:8f:28:ed:0e:c8:f9:91:d8:1a:ce:3e:b7:53:0a:5e:9a:db: 5c:9e:5d:9b:fa:0d:b5:47:85:16:dc:0a:02:e4:87:af:c2:dc: 2e:94:30:3b:da:a6:3e:0c:32:b8:23:a9:8d:bd:36:6a:48:31: 47:b3:d4:39:6e:87:62:de:00:d0:14:a6:0f:11:3a:11:cb:f8: ca:8b:d3:c0:4c:fb:f1:a5:46:b4:2e:69:cd:a7:67:a4:70:3d: 0f:87:e8:6b:9c:78:29:eb:dd:bb:a3:67:69:9e:55:d5:ff:7a: 5d:4f:96:df:27:88:ad:7d:d3:9b:ee:3c:41:77:bc:22:92:2b: cc:5b:fe:40:ce:dd:fb:e2:15:de:a8:42:8e:3d:3c:4c:b1:66: 44:60:2c:76:55:6b:af:0e:94:da:06:fc:20:58:35:dc:06:da: e9:9a:e5:d0:d4:8f:97:41:1f:7d:3e:f4:52:ef:68:85:04:43: f5:62:be:f2:93:fb:8b:93:9d:ef:00:a8:96:e2:51:ea:29:cd: 67:24:59:4e:e2:dc:08:0a:a5:af:0f:cf:ca:78:28:10:a0:ec: ec:0d:65:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRhypnqZFz5VPoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MGRkZDAzYjQtNjhjYi00ZGQ3LTk1ZmMtZGEyNTk1NGRlYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY/18zhQCZvBI3pRi2mttJWRGfE6WvTqv3xJ wDLG5B/M32qiwL6hHkGL8Y2/VVwEkc1GjvWMNylljim5npPns0BDyatnFoEq7Z+I j8TJJEdL3LVRi/aOJLZHvr0bHECzuyWaac/u+EV4XGEVU6guPa+KRMTqgaTv3dSX HP6iW1BvCKy1ERDEX3gLKecujChxJZ8AOPY5P9Xq6UcfJH/jtKHRUDqCIKxmFv4c PHSlBdqsWpzIj2qbsnUEDfMEl1Nk6FhpbQ1Cmn3r3GebLVxGnh7yNqLS7t4i6QrW oTByyweo2SkHHoBPQGd/Zinf8DuV5octi/1quhj1T0mDP9M/8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAt2MMrwTLScmH4tF9xoHK7iWgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYjg2MjA2OGQtYjY4Zi0z ZDk3LTljZjktMTMwOTNkNzRjYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4UpuoBJ737gnPa4uPnOEaclKHbL87gw5akeSiGAzu4DzEJ7jWPKO0O yPmR2BrOPrdTCl6a21yeXZv6DbVHhRbcCgLkh6/C3C6UMDvapj4MMrgjqY29NmpI MUez1Dluh2LeANAUpg8ROhHL+MqL08BM+/GlRrQuac2nZ6RwPQ+H6GuceCnr3buj Z2meVdX/el1Plt8niK1905vuPEF3vCKSK8xb/kDO3fviFd6oQo49PEyxZkRgLHZV a68OlNoG/CBYNdwG2uma5dDUj5dBH30+9FLvaIUEQ/VivvKT+4uTne8AqJbiUeop zWckWU7i3AgKpa8Pz8p4KBCg7OwNZSQ= -----END CERTIFICATE-----Generated at Thu Aug 7 03:18:51 2025 by rpki-client