$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa File: c5313336-6e92-360f-a1a0-4a2a5045ae80.roa (raw, json) Hash identifier: QOip4vsxQ5qMrpXRvuxPU2RSsFPczOvDxpR6R8RcX1Q= Subject key identifier: 19:A1:9B:B5:AF:2E:5F:39:27:E3:85:64:03:15:A7:6B:EE:C9:0C:8C Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461E86A7D8CC19E4212300 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1e:86:a7:d8:cc:19:e4:21:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=1147d5fa-70b7-480c-84da-42a98ecc445f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a6:8d:ec:f1:38:a5:8d:3c:4f:f9:0d:9a:f2: 6c:59:ef:66:48:fb:1b:80:d4:82:3e:1e:ca:cd:ab: 5e:7f:d3:56:e9:56:06:2f:f8:4e:b2:f6:dc:56:f7: f8:ca:b4:1c:94:63:9b:81:fb:3e:c9:7d:bc:6e:c2: f0:61:1b:81:d5:b4:bd:a3:00:c4:8b:a5:91:78:81: 2b:ba:34:fc:8b:b0:96:b2:b4:61:b1:79:82:74:f4: c8:cf:b5:1b:9b:19:11:b6:93:e8:6c:29:54:2f:25: ad:aa:96:2f:6e:a8:2b:6f:a8:40:37:98:36:48:51: fb:92:60:c5:ca:82:56:02:df:37:a8:5a:17:fa:74: b0:ae:ee:f9:ee:3f:e4:fc:84:60:48:d1:38:36:c5: 78:ad:f8:a4:b6:fa:67:1b:11:98:b1:e0:f9:82:42: de:25:0a:eb:af:ac:50:b7:49:ca:8a:74:31:5a:19: 9e:67:8c:22:76:43:dc:ab:e2:d6:c2:0e:50:b0:07: 2f:74:49:f1:30:d3:8e:db:df:d1:18:3f:1e:31:de: 8f:8b:01:9a:7b:68:6e:3f:00:76:97:81:a5:a6:8a: 9e:50:67:5d:56:73:ec:6a:2f:66:e0:8e:a9:c2:40: 17:61:d6:66:32:fb:5e:0d:14:d7:ec:7d:38:45:b5: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A1:9B:B5:AF:2E:5F:39:27:E3:85:64:03:15:A7:6B:EE:C9:0C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/c5313336-6e92-360f-a1a0-4a2a5045ae80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:90:4f:a0:8e:ba:9a:94:91:e6:b8:5a:ee:bc:8d:0f:ba:44: 60:7c:08:b7:5b:4e:3c:2f:12:a2:18:c5:53:4e:c4:0e:97:b1: da:f7:fe:10:aa:b2:23:6f:90:f3:24:05:b1:a1:13:55:b0:d6: e3:d4:7f:95:b4:3c:b5:66:f2:64:b9:99:05:5e:3b:81:eb:72: 66:98:13:b8:a6:06:d5:5a:b9:00:e3:55:cb:5a:d7:9d:00:ff: c5:b1:0a:54:e9:7d:a6:4f:5e:58:d9:69:b8:ad:7e:a9:1f:d3: e3:d1:dc:61:f2:d6:4a:f0:db:15:c0:e3:1f:08:f4:d5:a8:fd: 02:5c:89:f6:22:e8:16:88:04:21:85:59:ae:e7:9e:fa:ae:af: be:8d:b6:44:9f:9e:f2:af:da:79:72:f5:7b:17:19:d2:f4:c6: 40:3a:1e:c3:3d:25:2e:dd:10:1b:d1:48:55:10:f6:3c:9d:9e: 8e:0e:51:07:30:60:39:6f:79:30:8d:42:06:60:5c:fe:ce:b8: 60:4f:f6:5e:42:a7:16:21:b5:5c:67:92:f1:f7:d9:a3:12:71: 49:1d:6a:e6:74:1f:2d:ac:5a:60:fe:11:17:c4:47:bf:d8:9a: 22:fa:14:bd:66:5d:92:28:3b:37:af:09:98:54:e7:52:43:00: d7:f9:1d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh6Gp9jMGeQhIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MTE0N2Q1ZmEtNzBiNy00ODBjLTg0ZGEtNDJhOThlY2M0NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6aN7PE4pY08T/kNmvJsWe9mSPsbgNSCPh7K zatef9NW6VYGL/hOsvbcVvf4yrQclGObgfs+yX28bsLwYRuB1bS9owDEi6WReIEr ujT8i7CWsrRhsXmCdPTIz7UbmxkRtpPobClULyWtqpYvbqgrb6hAN5g2SFH7kmDF yoJWAt83qFoX+nSwru757j/k/IRgSNE4NsV4rfiktvpnGxGYseD5gkLeJQrrr6xQ t0nKinQxWhmeZ4widkPcq+LWwg5QsAcvdEnxMNOO29/RGD8eMd6PiwGae2huPwB2 l4GlpoqeUGddVnPsai9m4I6pwkAXYdZmMvteDRTX7H04RbWrxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmhm7WvLl85J+OFZAMVp2vuyQyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYzUzMTMzMzYtNmU5Mi0z NjBmLWExYTAtNGEyYTUwNDVhZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoejwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOQT6COupqUkea4Wu68jQ+6RGB8CLdbTjwvEqIYxVNOxA6Xsdr3/hCq siNvkPMkBbGhE1Ww1uPUf5W0PLVm8mS5mQVeO4HrcmaYE7imBtVauQDjVcta150A /8WxClTpfaZPXljZabitfqkf0+PR3GHy1krw2xXA4x8I9NWo/QJcifYi6BaIBCGF Wa7nnvqur76NtkSfnvKv2nly9XsXGdL0xkA6HsM9JS7dEBvRSFUQ9jydno4OUQcw YDlveTCNQgZgXP7OuGBP9l5CpxYhtVxnkvH32aMScUkdauZ0Hy2sWmD+ERfER7/Y miL6FL1mXZIoOzevCZhU51JDANf5Hfo= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:25 2025 by rpki-client