$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa File: d2974c0b-793f-3052-907e-201dffbd31d6.roa (raw, json) Hash identifier: AS7Avgyfyl2XTpRahj0mr/st16WnLSuSxLdtqFWvxzA= Subject key identifier: E2:66:16:F9:96:5D:C3:58:99:A2:F7:54:85:24:E3:87:A6:7C:DA:0E Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461D7092D0E7A083CDF940 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1d:70:92:d0:e7:a0:83:cd:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=064456ba-db8a-4d52-a1a7-987e9bdb9ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1b:aa:f0:96:b8:cd:f5:ae:ac:28:66:b4:34: 08:ef:48:62:80:26:27:87:86:69:9f:e4:cd:e1:56: 6d:e9:cd:dc:db:cb:b8:f7:4d:b2:f6:05:aa:20:35: eb:f6:e2:02:8e:25:07:11:bb:0a:0b:f6:2a:7f:12: 29:12:ef:e1:19:ec:d7:67:ee:61:f6:5c:f2:8c:e2: 01:00:56:81:1d:17:d8:a4:9a:e4:54:b9:a5:e7:fb: 6d:e8:31:83:a4:87:d4:07:eb:7b:6d:ae:e1:13:18: 7c:f3:02:20:bc:6a:70:7d:ba:8f:d4:7c:4b:bb:2a: 5a:b6:ac:16:a8:1b:ad:09:60:43:e7:74:c1:35:5b: 45:c6:da:dd:0f:5d:56:74:38:da:0a:65:ad:49:c7: aa:00:33:25:63:29:a7:8c:a8:8c:9f:09:dc:04:b2: c2:f0:69:21:75:47:95:50:64:9a:03:77:ae:c6:48: 0d:21:f2:96:57:d7:be:51:15:bf:70:57:25:52:e5: 01:a0:b8:26:0d:35:ab:64:ca:5b:42:c2:b0:a8:46: b3:28:b3:f2:0b:05:13:38:7f:31:65:64:c3:4f:b6: 5a:87:1c:82:cf:d4:68:16:51:c9:b7:8d:0a:e6:39: c4:c2:c3:1f:7c:25:d7:eb:6c:ca:af:ce:92:84:c5: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:66:16:F9:96:5D:C3:58:99:A2:F7:54:85:24:E3:87:A6:7C:DA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/d2974c0b-793f-3052-907e-201dffbd31d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f4:5e:eb:db:53:97:de:1f:d1:a7:aa:08:59:c5:c5:7b:84: 73:6c:4e:24:84:4a:da:a6:c7:11:51:e1:f4:ee:6c:e0:29:71: 2c:74:37:a7:e8:c6:08:b0:23:25:67:e3:34:94:32:4f:9e:cb: 7e:a7:c3:ba:cc:73:8d:a6:d9:15:c2:21:36:25:d0:89:46:73: 52:0e:0b:c0:8d:ee:7d:76:b5:9c:9f:9d:20:d6:0a:2c:b1:0c: bb:cd:04:df:e7:0f:6e:c3:3e:cf:a9:9a:d6:3b:ea:47:71:a9: e6:2b:80:dd:6c:22:ec:ef:0c:15:f1:30:11:62:8c:85:e1:db: 76:98:2d:a8:d0:7e:6c:45:d1:71:af:46:d9:2e:c2:f8:e5:17: 8c:fd:b2:c4:73:fe:11:0a:2c:60:93:bd:76:83:1f:18:93:1d: 53:27:38:e4:5e:e8:df:1a:55:15:05:61:22:e5:92:dc:df:7e: f4:4b:09:4a:11:4f:50:81:79:86:c1:99:db:0c:23:55:68:be: a8:e1:8e:c4:1c:89:ba:f4:8e:14:38:23:9d:8b:85:b3:aa:86: d5:9a:63:a7:78:9d:b4:86:75:cd:18:20:76:bb:ad:1b:63:0d: 92:53:73:15:85:bd:49:29:f7:9b:62:14:aa:5e:99:8c:9c:37: 39:38:c9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh1wktDnoIPN+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MDY0NDU2YmEtZGI4YS00ZDUyLWExYTctOTg3ZTliZGI5ZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBuq8Ja4zfWurChmtDQI70higCYnh4Zpn+TN 4VZt6c3c28u4902y9gWqIDXr9uICjiUHEbsKC/YqfxIpEu/hGezXZ+5h9lzyjOIB AFaBHRfYpJrkVLml5/tt6DGDpIfUB+t7ba7hExh88wIgvGpwfbqP1HxLuypatqwW qButCWBD53TBNVtFxtrdD11WdDjaCmWtSceqADMlYymnjKiMnwncBLLC8GkhdUeV UGSaA3euxkgNIfKWV9e+URW/cFclUuUBoLgmDTWrZMpbQsKwqEazKLPyCwUTOH8x ZWTDT7ZahxyCz9RoFlHJt40K5jnEwsMffCXX62zKr86ShMVdzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJmFvmWXcNYmaL3VIUk44emfNoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZDI5NzRjMGItNzkzZi0z MDUyLTkwN2UtMjAxZGZmYmQzMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE70XuvbU5feH9GnqghZxcV7hHNsTiSEStqmxxFR4fTubOApcSx0N6fo xgiwIyVn4zSUMk+ey36nw7rMc42m2RXCITYl0IlGc1IOC8CN7n12tZyfnSDWCiyx DLvNBN/nD27DPs+pmtY76kdxqeYrgN1sIuzvDBXxMBFijIXh23aYLajQfmxF0XGv RtkuwvjlF4z9ssRz/hEKLGCTvXaDHxiTHVMnOORe6N8aVRUFYSLlktzffvRLCUoR T1CBeYbBmdsMI1VovqjhjsQcibr0jhQ4I52LhbOqhtWaY6d4nbSGdc0YIHa7rRtj DZJTcxWFvUkp95tiFKpemYycNzk4yVE= -----END CERTIFICATE-----Generated at Thu Aug 7 01:20:42 2025 by rpki-client